A single mother in her 40s, working as an insurance salesperson in Sibu, has lost nearly RM9,000 after falling victim to an online scam involving a fake identity and a fraudulent QR code.
According to Sarawak National Consumer Action Council (MTPN) president Lucas Lau, the suspect approached the victim with what appeared to be an instalment-based purchase scheme linked to a prize offer.
To gain her confidence, the scammer allegedly presented a fake identification card and employee credentials from a legitimate business, creating the impression that the transaction was authorised and secure.
Lau said the use of false identification may constitute an offence under Section 416 of the Penal Code, which relates to cheating by personation. He added that scammers are increasingly adopting more sophisticated tactics, using professional-looking documents and digital tools to exploit victims through online platforms.
The victim was later persuaded to scan a QR code provided by the suspect. Lau said this action enabled the scammer to gain unauthorised access to her financial accounts, an offence under Section 4 of the Computer Crimes Act 1997. Once access was obtained, funds were allegedly transferred out through a series of rapid transactions.
In addition to the immediate financial losses, the victim was reportedly manipulated into taking out personal loans, leaving her further burdened with debt. Lau described the case as part of a growing trend in which digital fraudsters use psychological tactics and technological methods to pressure victims into making quick decisions.
He urged the public to exercise caution, particularly when confronted with offers that appear unusually attractive or urgent. Lau emphasised that once funds are transferred, recovery can be difficult and lengthy.
“Public awareness is the last line of defence,” he said, noting that while legal provisions exist to address such crimes, individual vigilance remains critical in preventing financial losses.
Authorities continue to advise consumers to verify identities independently and avoid scanning unfamiliar QR codes or sharing sensitive banking information online.
