MySPA

Malaysia Scam Prevention Agent

WhatsApp-native No app required No sign-up Free BM · EN · 中文 · தமிழ்

The Problem

The scam happens on WhatsApp.
Every system activates after.

RM2.77B
Lost in 11 months (Jan–Nov 2025, official figures)
70%
of victims never report — shame, confusion, or no idea where to go

Why banks can't solve this

Banks catch fraud — unauthorized transactions criminals initiate without the victim's knowledge. Malaysia's crisis is scams — victims authorize the transfer themselves, under deception. By the time any bank system or government hotline activates, the decision is already made. MySPA is the intervention that happens at the deception layer — in WhatsApp, before the banking app opens.

See the full Malaysia and global scam landscape data →

The New Threat

Scammers upgraded.
The old defences didn't.

Voice cloning. A call that sounds exactly like your child, your spouse, or your bank officer — asking for emergency money. AI generates it in real time from a voice sample as short as 3 seconds.

Infinite script variation. The same scam, rewritten thousands of ways so no keyword filter catches it. "You've won a prize." "Tahniah, anda terpilih." "Congratulations, you have been selected." One campaign. Infinite variations.

Fake video calls. A scammer appears on screen as a police officer or bank manager. The face, the uniform, the background — all AI-generated.

Automated at scale. AI chatbots run scam conversations 24/7 across thousands of victims simultaneously. One syndicate. Industrial reach.

Fake cell towers, real bank messages. A device the size of a laptop broadcasts a fake mobile signal in a shopping mall or city centre. Your phone connects. You receive an SMS — in your actual Maybank thread, from what looks like Maybank — asking you to verify your account. The SMS never went through the telco. There is no filter to catch it.


How It Works

One number. No app. No form.

Quick Flag
Got a suspicious contact?
Send a number, link, or screenshot to MySPA on WhatsApp. We check it against PDRM's Semak Mule database and community reports, and send back a verdict. Under 60 seconds.
Full Flag
Lost money, or nearly did?
Tell MySPA what happened in your own words. AI extracts the details and issues a case ID you can use with your bank or the police.

The Intelligence

One report is a data point.
Thousands is a case.

Campaign Scale
Bigger than any one person can see.
Scammers run campaigns — same script, same mule account, hundreds of victims across states. No single report reveals that. No investigator can connect those dots manually.
The Pattern
AI connects what humans can't.
Every report is matched against every other report in the database. AI finds the pattern — the same script in Johor and Kelantan, the same mule account across three victims.
The Community
Your report is the intelligence.
MySPA doesn't have analysts. The intelligence comes from Malaysians reporting what they see. AI turns individual flags into something investigators can act on.

The Mission

Every report is counted.
At 10,000, the data makes the case.

Every report goes on record the moment you send it. At 10,000 reports, that's not a request. That's evidence.

Free. Anonymous. Kita jaga kita.