SCAM ALERT: Hari Raya Card Malware Scam

SCAM ALERT: Hari Raya Card Malware Scam

Every festive season in Malaysia comes with two certainties: heartfelt greetings — and scammers who take advantage of goodwill. This Hari Raya, a familiar-looking message has been making its rounds on WhatsApp, Telegram, SMS, and even Facebook Messenger. It usually sounds harmless, even sweet: “Selamat Hari Raya! Ada kad Raya untuk awak. Klik sini.”

What many don’t realise is that behind these festive greetings lurks a dangerous digital trap known as malware.

What is Malware?

Malware is short for malicious software. In simple terms, it is a harmful program designed to sneak into your phone or computer without your permission. Once inside, it can spy on you, steal personal data, read your messages, access banking apps, or even take control of your device.

Unlike old-fashioned viruses that were obvious and noisy, modern malware is quiet. You won’t see it flashing warnings. Your phone will still work — just not for you alone.

How the Raya Card Scam Works

The Raya card malware scam plays on emotion and habit. Malaysians are generous during festive seasons, and receiving digital Raya cards has become normal. Scammers know this.

The message often includes:

• A festive greeting
• A link claiming to show a digital Raya card, video, or animation
• Sometimes the name or profile photo of someone you know (because their account may already be compromised)

Once you click the link, you may be asked to:

• Download an app
• Allow certain permissions
• View a “card” that never loads properly

Behind the scenes, malware is being installed.

From that point, scammers can:

• Read your SMS and WhatsApp messages
• Intercept OTP codes
• Access banking or e-wallet apps
• Use your phone to send the same scam link to your contacts

That’s how the scam spreads so fast — victim to victim, friend to friend, family to family.

Why Malaysians Fall for It

This scam works not because people are careless, but because it looks normal. During Raya, we expect greetings. We trust messages that seem festive and friendly. The scam doesn’t demand money upfront, so there is no immediate red flag.

By the time bank accounts are drained or social media accounts hijacked, the damage is already done.

How to Spot Malware and Scam Links

Here are some simple warning signs every Malaysian should remember:

1. Unexpected links
   If you weren’t expecting a Raya card from that person, be cautious — even if the name looks familiar.

2. Strange web addresses
   Links that look shortened, random, or unfamiliar are a major red flag.

3. Requests to download apps
   Legitimate Raya cards do not require app installations.

4. Urgency or pressure
   Phrases like “buka cepat”, “link tamat hari ini”, or “jangan ketinggalan” are designed to rush you.

5. Phone behaving strangely
   Sudden lag, battery drain, overheating, or unknown apps appearing can indicate malware.

What To Do If You Clicked the Link

Don’t panic, but act fast:

• Disconnect from the internet
• Scan your phone with a trusted security app
• Remove suspicious apps immediately
• Change passwords for email, banking, and social media
• Contact your bank if financial details may be exposed

A Festive Reminder

Hari Raya is about forgiveness, reflection, and connection — not fear. But in today’s digital world, kindness must be paired with caution. A genuine Raya greeting never comes with hidden software.

Before you click, pause. Before you download, question. And before you forward, verify.

Because this Raya, the most valuable thing you can protect isn’t just your duit raya — it’s your digital life.

_____________

I am Farizal Kamal, part-time blogger, former banker & paralegal. I write about social media, digital culture, human behaviour, online scams, and the everyday nonsense we all pretend not to see.