The Whoscall Annual Report 2024, released by the TrustTech service provider Gogolook, reveals that Malaysia recorded the highest rate of personal data leaks among major Asian markets. At the same time, scam calls in Malaysia surged by an alarming 82.81% in 2024, marking a sharp rise from the previous year and indicating a significant escalation in digital scam tactics.
The report, which analyses scam data collected between January and December 2024 from Malaysia, Taiwan, Thailand, Brazil, Japan, South Korea, Hong Kong, and the Philippines, highlights the growing risk of personal data breaches driving targeted scams across the region.
Malaysia records the highest personal data leaks in key Asian markets.
Malaysia recorded the highest rate of personal data leaks among the countries studied, with 72.5% of users who checked their status via Whoscall’s ID Security feature discovering their information had been compromised.
Voon Chang Liew, business development director of Gogolook in Malaysia, explained, “While phone numbers were the most leaked data across all countries (98% in Malaysia), Malaysia stands out for its high rate of name leaks (89%), followed by addresses and emails. This makes impersonation scams more convincing, as scammers exploit leaked names to pose as banks, government agencies, or delivery services.”
“With personal details readily available, scammers can launch highly targeted fraud attempts. Whoscall’s ID Security helps users detect data leaks early, allowing them to update passwords and secure accounts before scammers take advantage,” he added.
In contrast, email addresses were the second most leaked data type in Taiwan, Thailand, Japan, and the Philippines, where phishing emails are a primary method of fraud. Account credentials and home addresses remain high-risk across the region, exposing users to identity theft and financial fraud.
Scam calls surge by 82.81% – financial losses climb to RM1.57 billion
Scammers are ramping up their activities, using personal data leaks to execute more sophisticated scams. Scam calls rose by 82.81%, while SMS scams increased by 19.97%, indicating that scammers are increasingly relying on calls while still using text messages to deceive victims.
This surge in scam activity is also linked to a rise in financial losses, as fraudsters exploit leaked personal data and AI-driven deception tactics to target victims more effectively.
Bukit Aman Commercial Crime Investigation Department (CCID) Director Datuk Sri Ramli Mohamed Yoosuf said, “Scam financial losses in Malaysia surged to RM1.57 billion in 2024, up from RM1.22 billion in 2023. AI-driven scams, including deepfake videos of celebrities and politicians, are making it easier to deceive victims into fraudulent investments or phishing traps. These scams are becoming harder to detect, especially for the elderly, who are often targeted due to their financial savings.”
“To combat this, PDRM continues its strategic partnership with Whoscall by sharing PDRM-verified scam numbers in the Whoscall application, recognising AI-powered solutions as a critical first line of defence. As scams grow more advanced, distinguishing real from fake will become increasingly difficult, making tools like Whoscall essential in protecting the public,” he stated.
The top scam tactics in Malaysia
In 2024, scammers continued to evolve their tactics, with banking fraud, gambling scams, and phishing being the most common types of fraud reported:
- Scam Calls: The most frequently reported scam and spam calls involved banking or debt collection (25.15%), followed by scammers impersonating authorities or businesses (22.40%).
- SMS Scams: Gambling-related scams accounted for 45.16% of SMS scams, followed by financial scams (21.47%), including fake investment opportunities and fraudulent money-lending services. Other common scam messages included parcel scams (5.29%), telecom fraud (5.60%), and fake payment reminders (5.82%).
- Phishing & Malicious Links: Whoscall’s URL Scanner found that 16.56% of malicious links were disguised as registration pages, tricking victims into submitting personal data. A further 16.52% directed users to fraudulent software downloads, which could install malware or spyware on their devices.
Whoscall, a trusted AI-powered anti-scam solution endorsed by the Royal Malaysia Police (PDRM), helps Malaysians detect scam calls, filter fraudulent SMS, and identify malicious links in real time. To stay protected, use its ID Security feature to check for personal data leaks and the Auto Web Checker for real-time scam warnings when visiting suspicious websites. Downloading Whoscall is a crucial step in safeguarding yourself against evolving scam tactics.
