Your gaming agent sends a Maybank or CIMB account number and asks you to transfer your deposit immediately. The platform you're playing on has one name (let's say you're topping up for Mega888), but the bank confirmation screen shows a completely different individual's name—like "Mohd Ali" or "Tan Ah Kao". When you ask about it, the agent's typical answer is “company account full boss,” “temporary cashier,” or “this one today only.”
There may be businesses that use manual payment arrangements, but you should not treat an unexplained personal account as routine. A transfer receipt proves that you sent money. It does not prove what the recipient promised to do with it.
Nine reasons to pause
- The recipient name does not match any name published on the service website.
- The account changes each time you ask for payment details.
- The agent will not explain the relationship between the recipient and the service.
- You are told to split one deposit across several accounts.
- The reference field must be left blank or contain an unrelated description.
- A countdown, bonus or account threat is used to rush the transfer.
- The agent asks for a screenshot that exposes more than the receipt.
- A “refund” requires another payment first.
- The only record of the offer is a disappearing message or voice call.
One red flag may have an innocent explanation. Several together form a pattern that deserves a firm no.
Verify the recipient before confirming
Return to the service website using an address you found independently. Contact the published support channel and ask it to confirm the account number and recipient name. Do not use only the same WhatsApp conversation that supplied the payment details.
Malaysians can also check phone numbers and bank accounts through PDRM’s Semak Mule service. A result can help identify details connected to existing reports; no result does not certify an account as safe. Use it as one check, not a guarantee.
If you are dealing with a new agent and haven't fully established their reputation yet, start with our guide on verifying a mobile gaming agent before transferring money. Finding a trusted agent is the most critical step for any popular game in Malaysia.
Keep a record that makes sense without the chat
Before payment, save the public offer page, amount, purpose, recipient name, account number and support contact. The records should tell a coherent story if you have to show them to your bank tomorrow. A cropped payment screenshot with no surrounding context is much less useful.
Never share your banking password, e-wallet PIN, TAC or OTP. A recipient needs confirmation that money arrived; they do not need the credentials used to send it.
If the transfer has already happened
If you suspect fraud, contact the bank through the number in its official app or on the back of your card. Do not wait for the chat agent to stop replying. PDRM’s current guidance says the National Scam Response Centre operates 24 hours a day at 997 to coordinate fast action on financial scams. Read the latest PDRM notice.
Keep the original conversation, receipt, phone number, account number and timestamps. If the APK installed but no app icon appeared, treat the phone itself as a separate risk and follow our missing app-icon checks.
