What are the most common rental scams in Malaysia?
The seven most common rental scams in Malaysia are: fake listings with stolen photos, pay-to-view fees, phantom agents, ownership fraud, bait-and-switch units, fixed-return rental (GRR) schemes, and duplicate-listing traps. PDRM-reported rental fraud rose from 184 cases in 2023 to 922 in 2025, with cash recovery below 0.5%.
The pattern in every scam is the same: urgency plus a weak proof trail. The renter is pressured to pay before the person, unit, paperwork and payment channel are properly checked. Knowing which scam is running gives you the right check to run before money moves. Listings routed through a verified eKYC flow tend to surface many scam attempts at the identity-verification stage, before any money moves — that is the structural advantage of identity-checked platforms over generic listing sites. It is not an industry-wide guarantee, and individual cases can still slip through.
Rental scams in Malaysia — 2026 snapshot (figures current as of 2026-10):
| Item | 2026 figure / status |
|---|---|
| PDRM-reported rental fraud cases | 184 (2023) → 922 (2025) |
| Cash recovered in reported cases | Below 0.5% |
| Recall / freeze window after a transfer | First 24–48 hours — funds are almost always withdrawn after that |
| National Scam Response Centre | Hotline 997 — report as early as possible |
Scam by scam: what is the red flag and the fix?
Each of these seven scams has a specific signal you can catch before you pay — if you know what to look for.
| Scam type | How it works | The red flag | What to do |
|---|---|---|---|
| 1. Fake listing with stolen photos | Scammer copies real photos from a legitimate listing, posts at below-market rent, and takes a "booking fee" with no unit to hand over | Rent is noticeably cheaper than comparable live listings; reverse image search finds the same photos on another site | Reverse-image-check every photo; ask for a live video call of the actual unit with meter stickers visible |
| 2. Pay-to-view fee | A person posing as agent or owner demands money before allowing any viewing | Payment is demanded before the person, authority and exact unit can be verified | Do not transfer. Ask for the fee basis in writing, verify the agent or owner independently, and move on if the unit cannot be viewed first |
| 3. Phantom agent | Person collects a deposit or advance rent, then goes silent or sends you to another person with the same story | No verifiable REN/REA tag; no official agency phone line; payment goes to an unrelated account | Verify the REN or REA number through LPEPH and call the agency using independently sourced contact details before paying |
| 4. Ownership fraud | Someone poses as the owner (or as a sub-landlord with authority to re-let) but has no right to rent the unit | Avoids proving authority to let the unit or will not let you verify it independently | Ask for proportionate proof of authority and cross-check the owner or agency through a separate channel; do not accept screenshots as the only proof |
| 5. Bait-and-switch | The listing shows a renovated, well-furnished unit; after payment you are told "that one is taken" and offered an inferior unit | Unit in the ad is unavailable after deposit is paid; pressure to accept an alternative | View the exact unit in the ad before paying; confirm the unit number in writing in the letter of offer |
| 6. Fixed-return rental (GRR) scheme — a developer or promoter pays the buyer a set monthly rent on a serviced apartment, treated as a property investment product, not a normal tenancy | Developer or promoter promises a fixed monthly return from a serviced apartment scheme; returns stop when the scheme collapses | Returns look too high and too fixed for the market; documentation is complex or vague; the "scheme" is not a normal tenancy | Verify the developer at the BOVAEP licensed-developer register and run a SSM/CCM company search before paying; remember this is an investment product, not a tenancy — recovery routes are different |
| 7. Duplicate listing trap | The same unit appears on multiple channels; a different "agent" for each takes your booking fee, and none can deliver keys | Multiple listings for the same unit at slightly different prices; pressure to lock in before someone else does | Use a single verified platform search; never pay multiple parties for the same unit |
The 5 red flags of a pay-to-view fee — and how to check the payment channel
Scam 2 (pay-to-view) shows the same five signals in almost every case reported in Malaysia: pay-first demand, refundable-token framing, an owner-overseas excuse, reused photos, and urgency to skip checks. Any one flag is enough to walk away; two together is a near-certain scam.
- Pay-first demand — any fee to view, "reserve a slot" or hold the unit before you have seen it.
- Refundable-token framing — the payment is described as "fully refundable" but with no written refund terms or platform to enforce them.
- Owner-overseas excuse — the landlord "cannot meet" but cannot name a local representative, IC copy or title evidence either.
- Reused photos — the pictures match a live listing on another platform at a different price or under a different name.
- Urgency to skip checks — "many people want this," "today only," or pressure to send money before you can compare the listing.
Even if the story checks out on paper, check the payment channel itself: a legitimate fee only ever moves to a name that matches the verified landlord or platform. If a "viewing fee" or booking payment is asked for via Touch 'n Go eWallet or DuitNow, confirm the registered recipient name shown on the transfer screen matches the landlord's or agency's verified name before you confirm — a DuitNow ID or eWallet handle that resolves to an unrelated personal name is the same red flag as a mismatched bank account.
GRR pitches: check the net yield, not the promised number
Scam 6 above — a fixed-return rental (GRR) scheme — is usually pitched with an attractive fixed headline return, but the number that actually matters is the net yield after vacancy, operating costs and tax, which typically lands well below the marketing figure. The gap is funded from somewhere other than sustainable rent — commonly the renovation margin, sales proceeds, or short-term over-subscription — and it closes the moment the operator's cash flow does. GRR pitches also routinely omit the tax layer: non-resident individual landlords face statutory income tax on net Malaysian rental income, so any promised return is quoted pre-cost and pre-tax. Treat any promised-return pitch as a marketing claim until you have built your own net-yield estimate from live market rent, realistic vacancy, and actual costs.
How do rental scams operate on WhatsApp, WeChat, and social channels?
A familiar chat app does not make an unverified listing safer. The photos may be copied from a real listing, while the first request is a booking payment before any viewing. The red flags are the same as scam 1 and scam 3: the person, authority, exact unit and payment destination cannot be independently verified.
Treat a messaging-only contact like any unverified social listing: request a live view of the exact unit, verify the person and authority through a separate channel, and match the payment recipient to the written offer. If the contact insists on an unrelated account or refuses independent checks, stop.
The same pattern runs on classifieds boards, not just chat apps. On Mudah.my, Facebook Marketplace housing groups, and Carousell, the listing itself is just a photo and a contact number — once the conversation moves to WhatsApp or Telegram, the platform's own protections disappear, and a scammer can repost the same stolen photos as a fresh "owner direct" post the next day.
How do you run a live virtual viewing before you pay?
A live virtual viewing — a real-time, two-way video call where you can ask the other side to open cupboards, run taps, and show the view from the window — is the strongest single check against a fake or bait-and-switch unit before you travel or pay anything. A photo can be cropped, reposted, or lifted from an old listing; a live call cannot, because you can direct the camera and ask follow-up questions on the spot.
- Confirm the person first. Get a name and, if an agent is involved, a REN/REA number before you agree a viewing slot.
- Fix a slot with a stated duration. Agree a date, time and video app (WhatsApp video, Telegram, Google Meet) in writing — a no-show or last-minute reschedule pattern is itself a signal.
- Ask for a planned route, not a random pan. Entrance, living area, kitchen, every bedroom, every bathroom, balcony, meter cupboard, and the corridor or lift lobby outside.
- Ask for the things photos cannot show. Taps and shower running, cupboards opening and closing, the aircon working, the actual view from the window, and the meter and unit number on the door read out loud.
- Get the price, deposit and availability stated on the call. Hearing the rent, what the upfront amount covers, and the move-in date said out loud on a recorded call closes the "the price was different" dispute before it starts.
- Save the recording, transcript and any chat with a timestamp. A dated, timestamped walkthrough is the cleanest evidence that the unit, the person, and the price were real at the time you agreed — keep it with the rest of your rental file in case a deposit or damage dispute follows.
A serious landlord or agent will reschedule a missed live slot within 24 hours; a scam-pattern contact will either push the deal onto plain chat or quietly disappear when you insist on a live call with a timestamp. The first response is a green light; the second is scam 1, 3 or 5 from the table above showing itself early.
When does each scam win — and when does the tenant win?
Scams win when the renter is in a hurry, when the rent is below market, or when a payment is made before proof is documented. Tenants win when every step — person, unit, paperwork, payment — is verified before money moves.
A private listing is not automatically a scam — many genuine owners rent directly. The failure mode is not who you are dealing with; it is urgency plus a weak proof trail. If the seller is pushing for payment before you have checked person, unit, paperwork, and payment channel, slow down — that is the one signal every scam on this list shares.
- Person check wins: Scams 2, 3 and 4 collapse as soon as you confirm identity. Look up REN/REA at the LPEPH public register (lpeph.gov.my — the current statutory name for the board formerly known as BOVAEP) and cross-check the agency name, branch address and contact against the listing before you pay anything; a common trick is borrowing a real agent's name in a Telegram-only listing, which the cross-check catches. Reverse-image-search the listing's cover photo — a free, zero-cost check that catches recycled photos immediately. For a direct owner, ask to see the title deed, the cukai taksiran (assessment tax) bill, or the cukai tanah (quit rent) receipt in the owner's name; for a strata unit, the JMB or building management office will confirm the registered owner's name against the unit number for free. If someone claims to act on the owner's behalf — as an agent, family member or sub-letting representative — ask for a signed authorisation letter, a copy of the owner's NRIC, and the owner's direct contact number, then verify with the owner independently before paying; refusal to produce this is one of the clearest ownership-fraud signals there is. If your agent goes silent mid-deal, verify their REN/REA is still active on the LPEPH register and try the agency's public number or the building management office before accepting a new "handover" contact on trust.
- Unit check wins: Scams 1, 5 and 7 collapse when you insist on viewing the exact advertised unit live — in person or by live video — before any payment.
- Paperwork check wins: Require a written offer that identifies the exact unit, parties, payment purpose and refund condition before money moves. A screenshot or chat message alone is not enough evidence of the agreed terms.
- Payment-channel check wins: Every scam depends on moving money to a place the scammer controls. Pay only through an official platform or a named company or agency client account. Never to a personal account, personal e-wallet, or cryptocurrency address.
What is the financial loss and legal risk of rental scams in Malaysia?
The upfront cost is the deposit or booking fee lost. The bigger damage is losing your move-in timeline, having your identity documents copied without consent, and having no paper trail to support a police report.
| Risk layer | What it means in practice |
|---|---|
| Cash loss | The booking payment, deposit or advance already transferred; PDRM reports recovery below 0.5% across the cited rental-scam cases |
| Document exposure | Handing over IC or payslip photos to a fake agent creates identity-theft risk |
| Time loss | A scammed renter loses weeks or months of move-in planning |
| Evidence gap | If the unit, recipient and refund terms were never recorded, proving what the payment was for becomes much harder |
| Second-victim trap | Fake refund-department calls demanding a "release fee"; fake bank officers offering to reverse the transfer for an admin charge; fake PDRM or NSRC officers demanding "verification payments" — legitimate NSRC (997), your bank's fraud line, and PDRM never ask for additional payment to release a freeze or refund |
If money has already moved, act immediately: call your bank's fraud line to attempt a recall, preserve every receipt and message thread, and lodge a police report with the full payment trail. Contact the National Scam Response Centre (NSRC) hotline 997 — the earlier the report, the better the chance of a bank freeze on the destination account.
A verified rental default can be reported to a licensed credit reporting agency: under the Credit Reporting Agencies Act 2010 (Act 710), the agency's collection of credit information does not require the customer's consent, and what the law gates is disclosure from the agency (s.24). The consent clause in a tenancy agreement is the practical basis a platform uses for its reporting path, not a statutory precondition. Publishing or sharing a person's details without legal basis is still not lawful. The same applies in reverse — a scammer's IC photo is evidence, not something to post publicly.
How do verified rental platforms reduce scam exposure?
The structural answer to rental scams is to keep the search, viewing, payment and agreement inside a single verified channel — one where the listing, the owner identity and the payment destination are confirmed before you get to the deposit step.
A structured rental flow makes the essential checks harder to skip: verify the person, view the exact unit, record the offer and use the payment destination stated in that offer. That reduces the openings used by fake listings, phantom agents and duplicate-listing traps, while leaving the renter responsible for checking the final unit and documents.
SPEEDHOME is operated by SPEEDHOME PROPERTY SDN. BHD. (Registration No. 202601021813), and deposits and rent paid through the platform route to a named SPEEDHOME entity account rather than a personal bank account or e-wallet — the same structural check described above, applied at the payment step: the recipient is a registered company you can verify, not a name that only exists inside a chat thread.
Tenants looking for a safe starting point can search verified listings at SPEEDHOME rentals. If you specifically want to understand the pay-to-view scam type in depth, read whether paying a rental viewing fee is normal in Malaysia. To verify a person presenting as a real estate agent, read how to check a REN number in Malaysia.
At what point in the rental payment timeline should you stop?
Every scam needs one unchecked hand-off. Stop at the first step whose evidence is missing.
| Stage | Evidence to keep | Stop if… |
|---|---|---|
| Listing | URL, screenshots, advertised unit and price | Photos or unit details change when you ask questions |
| Person | Name, verified REN/REA where applicable, independently sourced agency contact | Identity or authority cannot be checked outside the chat |
| Viewing | Date, exact unit number, live condition and meter identifiers | You are asked to pay before seeing the exact unit |
| Offer | Written amount, purpose, refund condition, parties and payment destination | The recipient or refund condition is missing or changes |
| Transfer | Bank receipt and recipient name | The requested account does not match the written offer |
What evidence should you screenshot before transferring any money?
Save the live listing, the full chat export, the person's profile and claimed registration, the exact unit shown, the written offer, the recipient name and the payment instructions. Keep the original files rather than cropped copies. If something later changes or disappears, this pack gives your bank and police a usable chronology instead of a verbal account.
Your own listing cloned: what should a landlord do?
A landlord whose real photos and address were copied into a fake listing is not liable for a tenant's loss, but a fast takedown limits the damage to genuine viewers and your own reputation. Screenshot the fake listing (URL, the scammer's contact, the account they ask for payment into, and the date it appeared), then submit a photo-ownership takedown to the platform hosting it — provide your original image file, the fake listing's URL, and a statement that you own the photos and did not authorise their use. File a police report in parallel so you have a reference number, and post a short, factual note on your own verified channel (your real listing page, business page, or property-management account) naming the unit and the channel where the fake appeared, without engaging the scammer publicly.
SPEEDHOME is one option worth comparing alongside the routes above.
FAQ
Is it normal to pay a fee just to view a rental in Malaysia?
Treat any payment demanded before you can verify the person and exact unit as a stop signal. Ask for the fee basis and refund condition in writing and independently verify the agent or owner. If those checks are refused, do not transfer.
How do I check if a rental agent is real?
Look up the person's REN or REA number through LPEPH. Also call the agency using contact details you sourced independently — not only the mobile number supplied in the chat.
The rent is far below market — is it a scam?
It is a strong warning sign. Scams 1 and 7 rely on below-market pricing to create urgency. Reverse-image-check the photos and compare the asking price against live listings for the same area before doing anything else.
Where should I send the deposit?
Use only the payment destination identified in a verified written offer, and confirm the recipient name before transfer. Stop if the account belongs to an unrelated third party or changes at the last minute.
I already transferred money to a suspected scammer. What do I do?
Call your bank's fraud line within the first hour and ask for a recall request — the destination bank can only freeze an account that still has funds, and most accounts are emptied within hours. Preserve the original chat thread, the payment screenshot, the recipient's name and account number, and the listing URL before reporting. Lodge a police report (PDRM) with the full payment trail attached, then call the National Scam Response Centre (NSRC) on 997; NSRC coordinates bank-side freezes across institutions, which a single bank's fraud line cannot. The realistic window for any recall or freeze is the first 24–48 hours — after that, funds are almost always withdrawn and recovery through the bank falls away. If you can identify the account holder, a civil claim for the money is also available: qualifying disputes can proceed through the Magistrates' Court Small Claims procedure without a lawyer. If a registered estate agent was involved, report their conduct separately to BOVAEP/LPEPH (bovaep.com / lpeph.gov.my) — PDRM handles the criminal side, BOVAEP handles agent misconduct, and NSRC/your bank handle account freezes; most cases need more than one of the three.
My agent suddenly stopped responding mid-deal. What do I do?
Don't send more money or accept a new contact on trust. Verify the agent is still active on the LPEPH public register (lpeph.gov.my), then try the agency's public number or the building management office for the unit rather than a new WhatsApp number offered out of nowhere. Ask in writing for confirmation of who is authorised to continue the deal and that your payment or application records are still on file before you proceed.
I'm renting from overseas and can't view the unit in person. What should I do?
Never transfer money before a live viewing you can direct yourself — insist on a real-time video call where you can ask the other side to walk to the window or pan the room, not a pre-recorded clip. If you genuinely cannot join a live call before arrival, ask a friend, relative or your university's international office to view on your behalf rather than skipping verification. Treat a demand for many months' rent upfront to a personal account, before any viewing, as a hard stop — normal Malaysian market practice is roughly two months' security deposit, half a month's utility deposit and one month advance, not a multi-month lump sum to a stranger.
Does renting on a verified platform mean zero risk?
No platform eliminates all risk. Even with verified identity and documented payments, risks remain: a co-tenant may be added later without proper checks, a tenant may sublet without authority, or a damage dispute may arise when the check-in record is thin. Treat those as separate tenancy risks: name every occupant, record the unit condition jointly at handover, and keep later changes in writing.