How to avoid Ah Long scams in Malaysia: the 2026 red-flag checklist

'Ah Long' is the colloquial Malaysian term for an illegal moneylender — any person or entity lending at interest without a licence from the Ministry of Housing and Local Government (KPKT) under the Moneylenders Act 1951 (Act 400), or without a BNM licence under the Financial Services Act 2013.

Ah Long activity is a criminal offence. Under section 5 of the Moneylenders Act, unlicensed lending carries a fine of RM 20,000 to RM 100,000, imprisonment of up to five years, or both. Harassment, intimidation, and the splashing of red paint on homes are separately offences under the Penal Code and, since the 2011 amendments, the Moneylenders Act itself.

You cannot be criminally prosecuted for having borrowed from an Ah Long — victims are protected. But the debt itself is legally unenforceable, and any collateral collected (MyKad, ATM card, bank login) has likely been used for other crimes.

The stereotype is a pamphlet on your car windshield. The reality in 2026 is digital. Industry tracking by the Malaysian Communications and Multimedia Commission (MCMC) and PDRM's Commercial Crime Investigation Department shows a 3x increase in illegal-lending WhatsApp campaigns during festival seasons (Raya, CNY, Deepavali) compared to the rest of the year.

Common entry points: unsolicited WhatsApp from +60 numbers you do not know, Telegram groups with names like 'Pinjaman Segera KL' or 'Loan Tanpa CTOS', Facebook Marketplace 'loan' listings that redirect to WhatsApp, and TikTok comments under debt-anxiety content.

• Asks for any payment before the loan is disbursed — 'processing fee', 'insurance', 'guarantee deposit', 'stamp fee'. Legitimate lenders deduct from disbursement or invoice post-approval. This is the #1 red flag and accounts for the majority of reported losses.
• No physical office, or an address that does not exist on Google Maps Street View. Legitimate KPKT moneylenders must display their licence at a physical premises.
• No licence number, or a 'licence' that looks photoshopped, has an invalid format, or cannot be found on the KPKT portal at kpkt.gov.my.
• Threatening, high-pressure, or aggressive communication. Phrases like 'hari ini mesti decide' or threats to call your employer are hallmarks of illegal operators.
• Interest rate above 18% per annum. KPKT caps secured moneylender loans at 12% p.a. and unsecured at 18% p.a. Anything quoted weekly or daily is a crime by definition.
• 'Guaranteed approval regardless of CCRIS / CTOS / blacklist'. No licensed lender in Malaysia can make that claim. Approval is always conditional.
• Asks for your MyKad photo (front and back), ATM card, online-banking credentials, or TAC. Legitimate lenders never request your banking login or TAC.

Before you share any personal information, run these checks. They take less than a minute each.

• BNM Financial Consumer Alert List — visit bnm.gov.my and search the lender's name. If they appear on the alert list, walk away.
• KPKT Moneylenders Directory — kpkt.gov.my carries a searchable directory of licensed moneylenders. Match the licence number, company name, and registered address exactly.
• SSM — check the company registration at ssm.com.my. The registered business activity should include moneylending.
• Google the office address — Street View should show a real premises with signage.
• Reverse-search the WhatsApp number — legitimate lenders use business numbers linked to a verified company, not random personal numbers.

Stop all communication immediately, but do not delete anything. Evidence is how you get your money back, if you can, and how investigators build a case.

• Collect every screenshot — WhatsApp threads, payment receipts, bank statements, the 'loan agreement', any voice notes.
• File a police report at the nearest IPD (Ibu Pejabat Polis Daerah). Ask for the report number — you will need it.
• Report to BNMLINK (1-300-88-5465) if the lender claimed to be BNM-regulated, and to KPKT if they claimed a moneylender licence.
• Contact your bank's fraud line immediately if you shared any banking credentials or approved any transfers under duress.
• If you are being harassed — threatening messages, visits to your home, splashing of paint, threats to family — that is separately prosecutable. PDRM has a dedicated unit.
• Consider the Legal Aid Centre (Bar Council) for free advice on unenforceability of the debt.

MyTrustCredit is not an Ah Long. We are a KPKT-licensed moneylender (License No. WL1234/5678) operating under the Moneylenders Act 1951. Our licence is verifiable on the KPKT directory at kpkt.gov.my, our registered office and licence are displayed at our premises, and every rupiah we lend is governed by a KPKT-compliant loan agreement. We will never ask for a 'processing fee' upfront, will never ask for your banking credentials or TACs, and will never request photos of your MyKad, ATM card, or online-banking login through unofficial channels.

If any operator ever contacts you claiming to be from MyTrustCredit and asks for an advance fee or your banking credentials, it is a scam — report it to us immediately at our /contact page.

If you genuinely need a small loan, use licensed channels. A MyTrustCredit application is free and non-binding, and every loan we disburse is made directly by us under our KPKT licence. Visit /apply to start, or /calculator to check affordability first.