Cybersecurity – VeecoTech https://veecotech.com.my Custom Software & App Development Agency Wed, 07 Jan 2026 03:55:31 +0000 en-US hourly 1 https://wordpress.org/?v=7.1 https://veecotech.com.my/wp-content/uploads/2025/01/cropped-veeco-favicon-32x32.png Cybersecurity – VeecoTech https://veecotech.com.my 32 32 Malaysia’s Cyber Security Authorities: A Complete Guide https://veecotech.com.my/blog/malaysia-cyber-security-authorities/ Mon, 03 Feb 2025 09:00:56 +0000 https://veecotech.com.my/?p=8843

In the final quarter of 2022, Malaysia encountered an alarming average of 84 million cyber attacks daily.

Sounds frightening.

But, why do your systems manage to stay secure?

Thanks to the watchful guardians who tirelessly defend our nation against digital threats.

In Malaysia, there is no single regulatory authority dedicated to cyber security currently. Instead, cyber security is dealt with by various law enforcement agencies, regulators, government departments, and statutory bodies.

Join us as we explore the roles of these unsung heroes who safeguard the virtual borders of our country.

General Authorities

CyberSecurity Malaysia (CSM)

Logo of Cybersecurity Malaysia

Source: Wikimedia Commons

CyberSecurity Malaysia (CSM) operates as Malaysia’s dedicated agency for cyber security, falling under the jurisdiction of the Ministry of Communications and Digital (KKD).

CSM is initially established as NISER (National ICT Security and Emergency Response Centre) on January 24, 1998. It marked the first significant step in addressing national information security concerns.

Over time, as the government granted NISER additional responsibilities in implementing the National Cyber Security Policy (NCSP), it underwent a name change to CyberSecurity Malaysia to better signify its expanded roles.

With a primary objective of bolstering Malaysia’s self-reliance in cyberspace, CSM is committed to providing a diverse array of cyber security services and programmes, including:

  • Cyber Security Responsive Services
  • Cyber Security Proactive Services
  • Industry and Research Development
  • Outreach and Capacity Building
  • Strategic Study and Engagement
  •  

Remark: For detailed information on these specialised initiatives and services of CSM, please visit its official website or refer to its corporate profile.

In the array of services offered, those falling under Cyber Security Responsive Services hold particular relevance in our daily lives, and the Malaysia Computer Emergency Response Team (MyCERT) is one of its integral components.

MyCERT operates the Cyber999 Help Centre which serves as a crucial platform for Malaysian internet users to report various computer security incidents. These incidents include cyber harassment, malware, intrusion, hack attempts, and other breaches in information security.

Logo of Cyber999

Source: Responding to Security Incident: MyCERT approach and case study

Malaysian internet users can lodge reports regarding cyber security incidents to Cyber999 through various platforms:

PlatformDetails
Online FormClick here
Cyber999 Mobile AppAvailable on Google Play Store & Apple Store
Emailcyber999@cybersecurity.my
Phone Call
  • Hotline: 1-300-88-2999
  • Emergency Report Number: +6019-266 5850 (Operating 24×7)
SMSContent: CYBER999 REPORT
Send to: 15888
Secure Messaging via Pretty Good Privacy (PGP) EncryptionEncryption of sensitive emails for secure communication with MyCERT staff
FaxPrint and fax your complaint to Cyber999 at +603-8945 3442

Please refer to the website of Cyber999 for more information.

Remarkably, CSM and its subsidiaries do not operate as law enforcement agencies and lack the authority to impose penalties or fines on offenders. The primary responsibility for law enforcement lies with the police.

Nevertheless, CSM and its subsidiaries did play an active role in preventive and restorative measures concerning cyber security. They collaborate with law enforcement agencies, leveraging CSM’s specialised expertise to fulfil their respective roles.

National Cyber Security Agency (NACSA)

Logo of NACSA

Source: Official website of National Cyber Security Agency (NACSA)

The National Cyber Security Agency (NACSA) serves as Malaysia’s central hub for cyber security affairs under the National Security Council. Besides its regulatory mandates, NACSA does not possess enforcement powers to penalise offenders.

Established in February 2017 to bolster our national cyber security ecosystem, NACSA coordinates top experts and resources in the field to execute the following job scopes:

  • Develop and implement national cyber security policies
  • Protect the networks, systems and data of the government and Critical National Information Infrastructures (CNII) agencies
  • Spearhead cyber security awareness, acculturation and capacity-building programmes
  • Foster constructive regional and global networks among entities with shared interests in cyber security
  • Operate a cyber security incident reporting platform to receive complaints from individuals and organisations

One of the notable responsibilities among these job scopes is the protection towards Critical National Information Infrastructures (CNII) agencies.

As evident from its name, the CNII agencies are the critical sectors in Malaysia. Specifically, it refers to the 10 sectors below:

  • Defence and security
  • Banking and finance
  • Information and communication
  • Energy
  • Transportation
  • Water
  • Health services
  • Government
  • Emergency services
  • Food and agriculture

Typically, malicious cyber activities target a nation’s vital pillars. Hence, CNII agencies will mostly be the prime targets for cyber threats in Malaysia.

As breaching these digital fortresses can profoundly impact our country’s operations, this is where NACSA steps in. NACSA implements proactive measures to safeguard CNII agencies’ networks, systems, and data whilst enhancing interagency coordination to combat cybercrimes.

However, given the critical and highly interdependent nature of CNII agencies, it’s actually crucial for these entities to take proactive steps in fortifying their systems beyond relying solely on NACSA and other relevant authorities.

At VeecoTech, we offer comprehensive cyber security assessments. While addressing vulnerabilities across various platforms, including web applications, mobile apps, systems, and networks, we also evaluate your business’s adherence to industry best practices and standards.

We know that the journey of combating cyber threats demands continuous effort. Hence, we provide thorough assessment reports upon completion of the assessments to empower you in strengthening your systems for the future.

Explore our Cyber Security Assessment Packages for extensive cyber security solutions!

Personal Data Protection Department (PDPD)

Logo of PDPD

Source: Official website of Department of Personal Data Protection

The Personal Data Protection Department (PDPD) was established under the purview of the Ministry of Communications and Multimedia (KKMM) on May 16, 2011.

This department plays a vital role in safeguarding individuals’ personal data, especially in commercial transactions and ensuring compliance with the stipulations of the Personal Data Protection Act 2010 (PDPA).

Key functions of the PDPD include:

  • Overseeing matters related to consumer data registration and user forums to ensure their alignment with PDPA.
  • Promoting programme policies and activities for a positive image of PDPD through strategic planning.
  • Providing technical support and advisory assistance for ICT implementation to PDPD’s personal data protection personnel.
  • Handling administrative and financial matters for PDPD.

In the enforcement of PDPA, this department is mandated to register all Data Users, and also to address and investigate complaints related to PDPA violations.

Additionally, the PDPD collaborates with the Attorney General’s Chambers of Malaysia (AGC) to prosecute data users who breach the PDPA.

Cyber Court

Image of cyber court

Source: New Straits Time

The establishment of the Special Cyber Court marks a crucial step in addressing the escalating threat of cybercrime in Malaysia.

Launched on September 1, 2016, at the Kuala Lumpur court complex, the cyber court aspires to equip the legal system with adequate resources to address various cybercrime offences, including:

  • Hacking
  • Online fraud/scamming
  • Botnet attacks
  • Online defamation
  • Sedition and harassment
  • Web-defacement
  • Theft of online information
  • Cyber gambling
  • Pornography

Operating as an e-court, the Special Cyber Court is equipped with essential tools to manage evidence in cybercrime cases. It has specialised judges for cybercrime and computer-related civil matters, all undergoing mandatory training for essential IT knowledge and skills.

Given the prevalence of cybercrime in our country, the government plans to establish Special Cyber Courts in other states too. The project will commence in Selangor and Johor, with plans to extend the coverage to all remaining states in the coming years.

Malaysian Communications and Multimedia Commission (MCMC)

Logo of MCMC

Source: Wikimedia Commons

The Malaysian Communications and Multimedia Commission (MCMC) was founded on November 1, 1998, under the Communications and Multimedia Act (CMA).

Wielding a range of powers granted by the CMA, MCMC assumes a pivotal role in overseeing and enforcing regulations within the communications and multimedia industry.

Within the realm of cyber security, the most pertinent functions of MCMC include:

  • Regulating and promoting the government’s national policy objectives for the communications and multimedia industry in Malaysia.
  • Ensuring the integrity of all licensed entities within the industry.
  • Providing advice to the Minister on matters related to national policy objectives specific to communications and multimedia activities.
  • Regulating all communications and multimedia-related activities which are not explicitly covered by the communications and multimedia law.

In addition to its primary functions, MCMC also plays a crucial role in technical regulation. Under sections 96, 184, and 185 of the CMA, MCMC is entrusted with the development and enforcement of various voluntary technical codes.

These codes serve to standardise the technical aspects of the industry, whilst fostering collaboration among diverse communication and multimedia networks in the country.

One such framework mentioned in the Technical Code of Requirements for Information and Network Security is MS ISO/IEC 27001:2007. ISO 27001 stands as the leading international framework for information security. The advantages of adopting this framework include:

Moreover, the Malaysian government has initiated the adoption and certification of CNII agencies (the critical sectors in Malaysia), both in the public and private domains, to adhere to the ISO 27001 standard.

MCMC itself also holds the responsibility of ensuring proper enforcement and accurate reporting on the implementation of this standard. In the future, these initiatives will extend to non-CNII sectors.

Now, here we come to the exciting part – our Cyber Maturity Pre-Assessment is featuring the ISO 27001 framework! This assessment will evaluate your organisation’s compliance with industry best practices and standards, with a specific focus on the ISO 27001 framework.

To further strengthen the digital defences of CNII and non-CNII sectors, we provide Vulnerability Assessment and Penetration Test as well.

Find out more about our Cyber Security Assessment Package here!

Sector-specific Authorities (Finance)

Next, we’ll delve into two authorities dedicated to addressing cyber security issues within the financial sector.

It’s important to highlight that failure to adhere to the guidelines issued by these authorities may subject an organisation to regulatory sanctions.

These may range from warnings, public or private reprimands, orders to rectify non-compliance, monetary penalties, to even imprisonment.

In instances of severe non-compliance, legal proceedings may be initiated by these authorities against the organisation.

Bank Negara Malaysia (BNM)

Logo of Bank Negara Malaysia

Source: LogoTypes101

Bank Negara Malaysia (BNM) is the central bank of Malaysia. It is mandated to foster monetary and financial stability in Malaysia as per the Central Bank of Malaysia Act 2009.

The main responsibilities of Bank Negara Malaysia include:

  • Issuing currency in Malaysia
  • Regulating and supervising financial institutions under its jurisdiction
  • Monitoring money and foreign exchange markets
  • Promoting a resilient, advancing, and inclusive financial system
  • Holding and managing Malaysia’s foreign reserves
  • Promoting an exchange rate regime aligned with economic fundamentals
  • Serving as the Government’s financial adviser, banker, and agent

In regard to cyber security risks, BNM acts as the regulatory authority that issues guidelines and regulatory standards to oversee financial services technology.

An example is the Guidelines on Data Management and Management Information System (MIS) Framework for Development Financial Institutions.

To ensure effective data and IT security measures for banks and financial institutions, this guideline mandates these financial entities to pursue MS ISO/IEC 27001 certification for critical systems like payment and settlement systems.

Moreover, BNM possesses the authority to enforce sanctions, encompassing criminal, civil, and administrative actions. These measures span from:

  • Issuance of warning letters
  • Joint raids with other authorities
  • Pursue legal action in the courts
  • Impose financial penalties and imprisonment sentences

These enforcement powers are derived from various legislations, including but not limited to the Financial Services Act 2013 (FSA), the Islamic Financial Services Act 2013, and the Money Services Business Act 2011.

Securities Commission Malaysia (SC)

Logo of SC

Source: gradmalaysia

Securities Commission Malaysia (SC) is a self-funded statutory body that directly reports to the Minister of Finance. Established on 1 March 1993 under the Securities Commission Act 1993 (SCA), SC is tasked with regulating and developing the Malaysian capital market.

The main responsibilities of SC are shown below:

Rule-making and enforcing regulations in the capital market Regulating unit trust schemes, securities and futures contracts
Supervising capital market activities and institutions Regulating takeovers and mergers of companies
Regulating entities and persons licensed under the Capital Markets and Services Act 2007 Licensing and supervising all licensed persons
Registering authority for prospectuses Encouraging self-regulation
Approving corporate bond issues Supervising exchanges, clearing houses, and central depositories

Aside from this, SC has also issued the Guidelines on Management of Cyber Risk. This guideline explicitly outlines the roles and responsibilities of the board of directors and management of capital market entities in governing cyber risk.

The guideline also encompasses the policies and procedures that should be implemented to address cyber risks, as well as measures for the prevention, detection, and recovery from a cyber breach.

While SC does not extensively regulate cyber security, this guideline may provide valuable insights into the ways to mitigate cyber risks for the relevant authorities.

Notably, SC is endowed with civil, criminal, and administrative enforcement powers under the Capital Markets and Services Act 2007 (CMSA), the Securities Commission Act 1993 (SCA), and the Securities Industry (Central Depositories) Act 1991.

Conclusion

While these authorities set the rules and regulations to establish a baseline for cyber security, cyber security assessments bring a proactive twist to securing our businesses online.

These assessments enable businesses to find out their specific vulnerabilities, risks, and how well they follow industry best practices.

After all, it’s a collaborative effort to create a safer digital space.

Ready to fortify your systems? VeecoTech is here for you, providing top-notch cyber security solutions. Reach out to us today!

FAQ

What distinguishes CyberSecurity Malaysia (CSM) from the National Cyber Security Agency (NASCA) in terms of their cyber security roles?

CSM and NASCA play distinct yet complementary roles.

CSM is primarily focused on providing proactive and reactive cyber security services and conducting research, aiming to actively safeguard the nation’s digital infrastructure.

In contrast, NASCA is a national-level agency with a strategic focus on formulating and coordinating policies and strategies to enhance Malaysia’s cyber security resilience.

What are the key responsibilities of the Personal Data Protection Department (PDPD) in Malaysia?

PDPD is tasked with ensuring the protection of individuals’ personal data especially in commercial transactions and ensuring compliance with the stipulations of the Personal Data Protection Act 2010 (PDPA).

How does the Cyber Court handle cyber-related legal matters in Malaysia?

The Cyber Court specialises in addressing legal issues related to cybercrimes, providing a dedicated platform for prosecuting and adjudicating cyber offences.

What role does the Malaysian Communications and Multimedia Commission (MCMC) play in cyber security?

MCMC oversees the communications and multimedia industry while ensuring its alignment with the national policy objectives.

It also develops and enforces voluntary codes related to technical regulation for enhanced cyber security in our country.

How do the functions of Bank Negara Malaysia (BNM) and Securities Commission Malaysia (SC) differ in dealing with cyber security issues?

BNM primarily regulates the financial sector, with a focus on banks. Its role in cyber security involves formulating policies and strategies to safeguard critical systems like payment and settlement systems.

SC, on the other hand, oversees the capital market, implementing measures to strengthen cyber security within this sector to ensure market integrity and protect investors.

References

About Us: Malaysian Technical Standards Forum Bhd (MTSFB)
Central Bank of Malaysia Act 2009
Corporate Profile of CyberSecurity Malaysia
Guidelines on Data Management and Management Information System (MIS) Framework for Development Financial Institutions
Malaysia Cyber Security Strategy 2020-2024
Malaysia: Cybersecurity – OneTrust Data Guidance
Official website of Bank Negara Malaysia (BNM)
Official website of CyberSecurity Malaysia (CSM)
Official website of Cyber999
Official website of Department of Personal Data Protection (PDPD)
Official website of Malaysian Communications and Multimedia Commission (MCMC)
Official website of National Cyber Security Agency (NACSA)
Official website of Securities Commission Malaysia (SC)
Special Court for Cyber Crimes – The Star
Special Cyber Court And E-Court – Lee & Poh Partnership
Technical Code: Requirements for Information and Network Security
The International Comparative Legal Guide to: Cybersecurity 2019
What is ISO 27001? A quick and easy explanation – Advisera

]]> Malaysia’s Cyber Security Laws: A Comprehensive Guide https://veecotech.com.my/blog/malaysia-cyber-security-laws/ Tue, 21 Jan 2025 09:00:38 +0000 https://veecotech.com.my/?p=8878

In this digitalised age, the internet has taken centre stage in our daily lives.

A recent study by Proxyrack revealed that Malaysia ranks third in the world for spending most time online.

While the internet provides us with convenience and enjoyment, it also serves as the seedbed of cyber security issues.

In Q4 2022 (October to December), Malaysia experienced an average of 84 million cyber attacks daily, making Malaysia one of the most vulnerable locations in Asia.

To strengthen national cyber security protection, Malaysia started to work on a comprehensive cyber security law. Dubbed the Cyber Security Bill, the enactment of this new legislation on cyber security is still on its way.

While the bill is yet to be presented in the Malaysian Parliament, various existing laws are also capable of addressing cyber security threats and implementing preventative measures to safeguard against cyber security threats.

Let’s dive in and embark on the exploration of cyber security laws in Malaysia. Off we go!

Illustration of cybersecurity

Computer Crimes Act 1997

As evident from its name, the Computer Crimes Act 1997 (CCA) addresses offences associated with the misuse of computers, including:

  • Unauthorised access to computer material
  • Unauthorised access with intent to commit or facilitate commission of further offence
  • Unauthorised modification of the contents of any computer
  • Wrongful communication

Remark: The term “wrongful communication” pertains to the inappropriate sharing of any means of access to a computer to an unauthorised individual.

The regulatory body under CCA is the Royal Malaysian Police (PDRM). Under this legislation, police officers can arrest anyone without a warrant if there is a reasonable belief that individuals have committed or are currently committing a crime under this act.

Any offences related to this act can result in varying penalties, with fines ranging from RM25,000 to RM150,000, imprisonment for 3 to 10 years, or a combination of both.

Notably, the CCA has extraterritorial applicability. This implies that the law applies to individuals of any nationality, both within and outside Malaysia.

If an individual commits a crime under the CCA outside Malaysia, they can face punishment as if the offence occurred within the country.

An image showing CCA always observing hacker

Source: India Today

Communications and Multimedia Act 1998

The Communications and Multimedia Act 1998 (CMA) serves as the regulatory framework that is aligned with the national policy objectives for the converging communications and multimedia industries in Malaysia.

As outlined in Section 3 of the CMA, the CMA places a premium on information security and network reliability.

Fraudulent or improper use of network facilities, possession of counterfeit access devices, unauthorised access attempts, and interception of communications without lawful authority were prohibited under CMA (Chapter 2, Part X of CMA).

Similar to the Computer Crime Act 1997, the CMA also has extraterritorial applicability.

The Malaysian Communications and Multimedia Commission (MCMC) assumes the role of the regulatory body overseeing the industry.

Since its appointment on the 1st of November 1998, the MCMC has been entrusted with ensuring compliance with the regulatory framework, including licensing conditions, competition practices, technical regulations, and more.

Illustration of Internet and cybersecurity

Electronic Commerce Act 2006

As indicated by its name, the Electronic Commerce Act 2006 (ECA) provides legal recognition to electronic messages within commercial transactions. This Act plays a pivotal role in fostering the flourishing growth of digital trade in our country.

While ECA takes centre stage in addressing the legal intricacies of electronic transactions, cyber security issues are intertwined with its effective implementation.

Securing electronic messages, preventing fraud and unauthorised access, and protecting consumer data are critical considerations that align with the goals of ECA to facilitate a secure and legally recognised environment for electronic commerce in our country.

In anticipation of more comprehensive legislative measures, proactive steps are essential for business owners (like you!) in fortifying the systems of businesses against cyber security challenges.

At VeecoTech, we are in arms to consolidate your digital journey with our comprehensive suite of cyber security assessments, including Vulnerability Assessment, Cyber Maturity Pre-Assessment, and Penetration Test.

Feel free to visit this webpage for more details.

Cybersecurity meme

Credit: Imgflip

Copyright Act 1987

The Copyright Act 1987 stands as the cornerstone of copyright protection in Malaysia, with a focus on safeguarding various forms of copyrighted works.

This includes literary works such as computer programmes and online materials, along with trade secrets, intellectual property in devices or data, and many more.

The amendment of this Act in 1997 addressed unauthorised transmissions of copyrighted works over the Internet and prohibited the circumvention of technological protection measures that applied to copyrighted works (Section 36A).

Remarkably, offering technology or devices that enable such circumvention is also deemed an offence. These measures aim to ensure robust protection for intellectual property rights, especially for businesses involved in content creation within the ICT and multimedia sectors.

The penalties for non-compliance with the provisions are as follows:

FInes for literary works

The Copyright Act implies that its jurisdiction is primarily within Malaysia, as there is no mention of its extraterritorial applicability.

Penal Code

The Penal Code is the main statute that codifies most criminal offences and procedures in Malaysia. In cases where cyber-related criminal offences do not specifically fall within the ambit of existing statutes, such offences may be charged under the Penal Code.

One prevalent cyber security issue in Malaysia is phishing.

Whilst there isn’t a specific provision addressing it in the country currently, Section 416 of the Code, which deals with ‘cheat by personation’ can be invoked to counter phishing.

Applying to both real and imaginary personas, this offence targets individuals who pretend to be someone else with the intention to deceive.

Similarly, fraud is a common cyber security concern without a dedicated provision.

However, the Penal Code does cover several criminal offences related to fraud, including theft (Section 378), criminal breach of trust (Section 405), forgery (Section 463), fraudulent deeds (Section 423) and more.

Violation of the provisions under the Penal Code would subject the offender to enforcement by the Royal Malaysian Police. The offender may face penalties involving a fine ranging from RM25,000 to RM150,000 or imprisonment for 3 to 10 years, or both.

Personal Data Protection Act 2010

The Personal Data Protection Act 2010 (PDPA) is the key framework that regulates personal data processing in commercial transactions in Malaysia.

The most relevant PDPA principle in the context of cyber security would be the Security Principle. This principle mandates the implementation of practical measures to protect personal data from loss, misuse, modification, unauthorised access, disclosure, alteration, or destruction.

Non-compliance with the PDPA may result in fines ranging from RM100,000 to RM500,000, imprisonment for one to three years, or both.

Hence, not keeping up with PDPA rules can be a big deal.

Ask yourself:

  1. Are your systems ready to fend off cyber threats?
  2. Do your virtual defences align with PDPA guidelines?

If you’re saying “No,” “Not sure,” or “Don’t know,” it might be the perfect time to check out our Cyber Security Assessment Package.

In this package, we’ll dive into vulnerabilities across web apps, mobile apps, systems, and networks, while making sure your business sticks to top-notch industry practices and government standards. Find out more about the assessment package over here!

Conclusion

While these laws can help after a cyber hit, they’re more like cures than shields.

Moreover, the aftermath of a cyber incident is never pretty.

You’ll need to spend money to rebuild your system, waste valuable business operation time while waiting for the system to recover, and risk damage to your business reputation due to perceived vulnerabilities.

Instead of dealing with these consequences, why not consider taking a proactive step by fortifying your systems upfront?

VeecoTech is all set to assist you in strengthening your systems and safeguarding your business from potential cyber threats! Contact us today for expert cyber security solutions.

FAQ

How does the Communications and Multimedia Act 1998 (CMA) play its role in cyber security in Malaysia?

CMA regulates the communications and multimedia industry and places a premium on information security and network reliability.

CMA prohibits:

  • Fraudulent or improper use of network facilities
  • Possession of counterfeit access devices
  • Unauthorised access attempts
  • Interception of communications without lawful authority

How does the Copyright Act 1987 contribute to cyber security?

This Act protects intellectual property, including digital content, by prohibiting:

  • Unauthorised transmissions of copyrighted works over the Internet
  • Circumvention of technological protection measures that applied to copyrighted works
  • Offering technology or devices that enable such circumvention

What role does the Electronic Commerce Act 2006 play in shaping the cyber security landscape of Malaysia?

This Act provides a legal framework for electronic transactions, ensuring the security and reliability of online transactions.

What role does the Malaysian Communications and Multimedia Commission (MCMC) play in cyber security?

MCMC oversees the communications and multimedia industry while ensuring its alignment with the national policy objectives.

It also develops and enforces voluntary codes related to technical regulation for enhanced cyber security in our country.

What are the penalties for violating the cyber security provisions under these acts and laws in Malaysia?

Penalties for cyber security violations vary, but they may include fines ranging from RM25,000 to RM150,000 or imprisonment for 3 to 10 years, or both.

In cases where cyber offences don’t fall under specific statutes, how are they dealt with under Malaysian law?

Such offences may be charged under the relevant provisions of the Penal Code. This Code ensures that legal measures are in place even when specific statutes are absent.

References

Acts:
Communications and Multimedia Act 1998
Computer Crimes Act 1997
Copyright Act 1987
Electronic Commerce Act 2006
Personal Data Protection Act 2010
Penal Code

Others:
Basics of Cyber Security Law in Malaysia – Chia, Lee & Associates
Cybersecurity Laws in Malaysia – MahWengKwai & Associates
Malaysia: Cybersecurity – OneTrust Data Guidance
The International Comparative Legal Guide to: Cybersecurity 2019 (2nd Edition)

]]> Scam Alert! How to Spot and Avoid Fake Company Recruiters https://veecotech.com.my/blog/scam-alert-post-veecotech/ Mon, 06 Jan 2025 09:00:44 +0000 https://veecotech.com.my/?p=9765

In today’s digital age, where job seekers rely heavily on online platforms to find employment opportunities, it is crucial to be aware of the lurking threat of recruitment scams.

Unfortunately, our company has recently become aware of a concerning trend: scammers impersonating our trusted recruiters to deceive unsuspecting individuals.

We are deeply concerned about the well-being and security of job seekers, which is why we want to raise awareness about this issue and equip you with the knowledge to protect yourself.

Scam received by VeecoTech

Unmasking Recruitment Scams

Recruitment scams often follow a carefully crafted script designed to exploit the hopes and dreams of job seekers.

These scams typically involve unauthorised individuals posing as our company recruiters, using various means of communication such as email, phone calls, or even social media messages. By cleverly mimicking our company’s identity, scammers attempt to gain your trust and manipulate you into divulging personal information or making payments.

To ensure your safety, it is essential to familiarise yourself with the modus operandi of these scammers.

Typically, they will approach you with enticing promises of job offers or interview opportunities, capitalising on your eagerness to secure employment. They may even provide false information about positions within our company, further adding to the deception.

Scam alert example 1
Scam alett example 3

The scammers’ ultimate goal is to either extract money from youby requesting upfront payments for processing fees, training materials, or visa applications or to obtain sensitive personal information such as bank account details or social security numbers. 

Once they have acquired this information, they can engage in identity theft, financial fraud or sell your data to other malicious actors.

It’s important to understand that these scammers can be sophisticated, making it difficult to identify their fraudulent activities. They may employ tactics such as using our company’s name, logo, or other visual identifiers to appear legitimate. 

The overall tone of their communication may seem professional and convincing, but it is vital to remember that they are not affiliated with our organisation in any way.

Scam alet example 3
Scam alert example 4

How to Safeguard Against Recruitment Scams

To safeguard yourself from recruitment scams and protect your personal information and financial security, it is crucial to take the following precautions:

Verify Legitimacy

Always independently verify the authenticity of recruiters claiming to represent our company. Use official channels such as our website, official email addresses, or contact numbers listed on our official platforms.

As we have clearly mentioned in our website’s popup, VeecoTech would:

  1. Never ask for fees to betransferred to personal accounts. As a registered organisation, all transactions are performed via our corporate bank accounts.
  2. Never ask job seekers to pay for a position or offer task-based roles with payout schemes.
  3. Never offer a position without an interview session.
Beware of Scams pop up
Hence, be cautious of any deviations from the established contact information or suspicious email addresses that do not match our company domain.

Exercise Caution with Personal Information

Exercise caution when sharing personal information online, especially with unknown individuals. 

Be wary of requests for sensitive details like social security numbers, bank account information, or copies of your identification documents. Legitimate recruiters will not ask for such information during the initial stages of the hiring process.

Use Secure Communication Channels

When engaging in communication with recruiters, ensure you are using secure platforms. Look for encrypted messaging options or official communication channels provided by the company. Avoid sharing personal information or sensitive data through unsecured email or messaging services.

Research and Validate

Conduct thorough research on our company’s official website, social media profiles, and online reviews. 

Verify that the job opening or opportunity aligns with the information available on our official channels. Be cautious if there are discrepancies or if the offer seems too good to be true.

Scam alert example 5

Trust Your Instincts

Trust your instincts when something feels off or suspicious. If an offer or communication seems too good to be true, it likely is. 

Be cautious of high-pressure tactics that demand immediate action or confidentiality. Legitimate recruiters understand the importance of allowing candidates time to consider and make informed decisions.

Protecting Yourself from Recruitment Scams

By being aware of the tactics and following the precautions and protective measures, you can reduce the risk of becoming a victim of recruitment scams. 

Remember, your safety and security are of utmost importance to us, and together, we can combat this threat effectively.

Stay vigilant, remain cautious, and share this information with your networks to create awareness and protect others from falling prey to these unscrupulous individuals.

]]>