# Social Media Impersonation in Malaysia: What Evidence to Collect

> How to collect usable evidence when someone is posing as you or your brand in Malaysia, and how rights-based reporting differs from account recovery.

- URL: https://www.awarexone.com/research/impersonation-removal-malaysia
- Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone
- Published: 2026-09-22 (updated 2026-09-28)
- Topics: Impersonation, Malaysia, Content removal
- Related service: Impersonation removal: https://www.awarexone.com/social-media-recovery/impersonation-removal

## Short answer

Save evidence before you report, because a fake account can change or disappear. Record its exact URL, username and display name, and take full-screen screenshots of its profile, posts and messages with the date and time. Gather proof of what is yours, such as your real profile and original content, then report through the platform's impersonation process.

## Summary

- Save evidence before you report a fake account, because it can change its name, delete posts or disappear once reported.
- Record the fake account's exact URL, username and display name, and take full-screen screenshots of its profile, posts and messages with the date and time.
- Gather proof of what is genuinely yours, such as your real profile, original photos and videos, logo files and business or trademark records.
- Report through the platform's impersonation process. Copyright or trademark routes are separate and only apply when the facts support them.
- Do not contact or hack back the impersonator, and ignore anyone who promises certain removal. Customers who lost money should call 997 quickly.
- Only the platform decides whether to remove a fake account, and nobody can promise that it will.

A customer sends you a screenshot. An Instagram account with your logo, your product photos and a name one letter off yours has been offering them a "members-only" discount, payable by bank transfer. Or a follower asks why "you" messaged them on TikTok about an investment. The obvious move is to report the account straight away.

The less obvious problem is that a fake account can change its name, delete posts or disappear before you have documented anything, and a report you cannot back up is harder to follow through. Capture the evidence first, then report. The right route also depends on what is actually happening: impersonation, copied content, use of your trademark, fraud against your customers, or a compromised real account. This guide works through six steps: capture, verify, classify, report, preserve and escalate.

Last checked: 28 September 2026.

## What Evidence Should You Collect From a Fake Social Media Account?

Save the fake account's exact profile URL, username and display name, then take screenshots of the profile photo, bio, posts and any copied branding, noting the date and time of each capture. Keep suspicious messages the account sent, and ask customers or followers it contacted to keep theirs. Then gather proof of what is genuinely yours: your real profile URL, original photos and videos, logo files, your website, and trademark or copyright evidence where it applies. Save all of this before the account changes or disappears, because platforms review what they can see when they act, and your record may be the only copy of what was there earlier.

## Found a Fake Account? Do This First

1. Copy the fake account's URL.
2. Record the username and display name exactly as shown.
3. Screenshot the profile and the content that matters.
4. Record the date and time, in Malaysia time (MYT, UTC+8).
5. Save examples of copied branding, content and messages.
6. Gather proof connecting you or your business to the real identity and content.
7. Only then choose the reporting route that fits.

> Warning: **Keep it defensive.** Do not contact the impersonator or try to access their account. Messaging them can tip them off to change the account, and accessing someone else's account is itself an offence.

## 1. What Counts as Social Media Impersonation?

Impersonation is an account that presents itself as a specific person or business in a way likely to mislead people. Common forms:

- A fake profile using your name and photographs.
- A copy of a creator's account, often with an extra letter or underscore.
- A fake business account or Page using a brand's name and logo.
- A fake founder or director profile contacting staff or partners.
- A fake "customer support" account replying to real customers.
- An account claiming to be a brand representative or agent.
- An account using your identity to ask people for money.

Not every similar username is impersonation. A fan page that clearly says it is a fan page, a parody labelled as parody, or a different business with a similar name may be allowed under platform rules. What matters is whether the account is trying to make people believe it is you.

## 2. Account Recovery and Impersonation Reporting Are Different

Account recovery addresses loss of access to your legitimate account. You were hacked, locked out or disabled, and the goal is to get your own account back through the platform's recovery process.

Impersonation reporting addresses a separate account pretending to be you or your business. Your own account may be perfectly safe. The goal is to report the fake account through the platform's impersonation process.

Both can happen at once. An attacker may take over a creator's real Instagram account and also create a second account pretending to be the creator, so followers who notice the first problem are pointed to the fake. That needs two tracks: recovery for the real account and an impersonation report for the fake one. If your own account is compromised, start with our [social media account recovery guide for Malaysia](https://www.awarexone.com/research/social-media-account-recovery-malaysia), or the platform guides for [Instagram](https://www.awarexone.com/research/instagram-recovery-malaysia), [Facebook](https://www.awarexone.com/research/facebook-account-recovery-malaysia) and [TikTok](https://www.awarexone.com/research/tiktok-account-recovery-malaysia).

## 3. Save the Fake Account's Exact URL

A screenshot shows what the account looked like. The URL identifies which account it is, even after the display name or photo changes. Record:

- The full profile URL, copied from the browser or the app's share option.
- The username (handle) and the display name, which can differ.
- A numeric profile or Page ID if the platform shows one publicly.
- The platform.
- The date you first found the account.
- The date and time of each capture.

Keep URLs in a plain text file or spreadsheet as well as in screenshots, so they can be pasted into report forms without retyping. A URL identifies the account; it does not by itself prove who is behind it.

## 4. Take Screenshots That Actually Help

Useful screenshots show the whole screen, including the platform interface, the username and, where the phone shows it, the time. Crop nothing out of your master copies. What to capture:

Profile:

- Profile photo, username, display name and bio.
- Follower and following counts where visible.
- The link in bio and where it leads.
- Any category, contact button or "about" details.

Content:

- Copied photos, videos, logos and posts.
- False claims, fake promotions and giveaways.
- Fake phone numbers, emails or WhatsApp links.

Interaction:

- Messages the account sent to you or others.
- Requests for money and payment instructions, including bank account names and numbers.
- Links the account sends. Screenshot them; do not open them.

For videos, stories or a scrolling profile, a short screen recording can capture more than a set of screenshots. Stories usually expire after a day, so capture them first. Do not provoke the impersonator to create more evidence.

## 5. Record the Date and Time

Dates turn a folder of screenshots into a sequence someone else can follow. Record when:

- You discovered the account.
- Each screenshot or recording was taken.
- The impersonator contacted someone.
- A post or story appeared.
- You submitted each report.
- The platform responded.

Use one time zone throughout, ideally Malaysia time (MYT, UTC+8), and write it down. Screenshots and a written timeline are practical supporting evidence for a platform report. They are not a certified forensic record, and recording times does not by itself make anything admissible in court.

## 6. Save Customer and Follower Reports

For a business, the most valuable evidence often sits in your customers' phones. People targeted by an impersonator may receive:

- Fake payment or deposit requests.
- Fake promotions, giveaways or preorders.
- Fake customer-support replies.
- Fake investment or "partnership" offers.
- Fake account-recovery offers.
- Malicious links.

Ask affected customers to screenshot the conversation and the profile that contacted them, and to keep the messages rather than delete them. Store what they send privately. If you post a public warning, redact phone numbers, email addresses, home addresses, payment details, identity numbers and private conversations unless there is a legitimate reason to show them.

## 7. Prove Which Account Is the Real One

Your evidence has to work in two directions: what the fake account did, and why the real person or business is you. On the legitimate side, useful evidence can include:

- Your established official profile and its history.
- Your website, and links between it and your official accounts.
- Other official profiles that link to each other.
- Previous usernames, where the platform shows them.
- Original content that the fake account copied.
- An email address on your company domain.
- SSM business registration, where the business itself is being impersonated.
- Existing verified channels.
- Trademark registration details, where relevant.

Each document proves something specific. An SSM registration shows that a business exists; it does not by itself show that a particular social account belongs to it. Our guide to [proving you own a social media account](https://www.awarexone.com/research/prove-social-media-account-ownership) covers ownership evidence in more depth.

## 8. Preserve Your Original Content

For creators this is often the strongest evidence. Keep the original files of the photos, videos, graphics, artwork, logos and writing the fake account copied, and where possible:

- The original camera files or exports, with their dates.
- Editing project files that show the work being made.
- The original upload or publication on your real account.
- Content calendar or content-management records.
- Contracts with photographers, designers or agencies.
- Licences, where you use someone else's work with permission.

Source material is what separates "this is my content" from "this account posted it first". Store copies somewhere other than the phone that took them.

## 9. If Your Logo or Brand Is Being Used

A business should add brand evidence to the file:

- Logo files and brand guidelines.
- Your official website and social accounts.
- SSM company or business registration records.
- Trademark registration details, where you have them.
- Product packaging and marketing material.
- Invoices showing the brand in use in trade.
- Dates your branding was first published.

You do not need a registered trademark to report an account pretending to be your business; platform impersonation policies protect people and businesses, not only registered marks. Platform policies and legal rights are different things, and one does not depend on the other.

## 10. Impersonation vs Copyright Reporting

Impersonation reporting deals with "someone is pretending to be me or my business". Copyright reporting deals with "someone is using my protected original work without permission". Works that may qualify include photographs, videos, artwork, graphics and original writing.

In Malaysia, copyright has no registration system. MyIPO's [FAQ](https://www.myipo.gov.my/faq/) says a work "is protected automatically upon creation", provided it meets the qualifying conditions, including that enough effort went into making it original and that it has been recorded in material form. MyIPO also lists ways to prove ownership, including a statutory declaration.

Copying your name or pretending to be you is not, on its own, copyright infringement. Copyright is about works, not identity. A fake account may raise an impersonation issue. If it also uses your original photos, videos, artwork or other protected works, a copyright-based reporting route may be relevant.

> Note: **Your details may be shared.** Intellectual-property reports work differently from impersonation reports. Meta's [copyright help page](https://www.facebook.com/help/325058084212425) says it regularly provides the rights owner's name, your email address and the details of your report to the person who posted the content, and [YouTube says](https://support.google.com/youtube/answer/2807622) your full legal name and email may be shared with the uploader. Consider using a business email for these reports.

## 11. Impersonation vs Trademark Reporting

An impersonation report says the account presents itself as you. A trademark issue arises when an account uses a protected brand mark in a way that may infringe the owner's rights, for example to sell goods under your brand.

MyIPO's [FAQ](https://www.myipo.gov.my/faq/) says registered trademark owners have the exclusive right to use their marks in trade and can take legal action for infringement under the Trademarks Act 2019 against people who use their marks without consent. It also notes that owners of unregistered marks cannot sue under the Act, though common-law action may be possible. You can check registrations through [MyIPO's trademark search](https://www.myipo.gov.my/search-trademark/).

A trademark-based report may be relevant when the facts involve use of a protected mark in a way that may constitute infringement. A fake page showing your logo is not automatically trademark infringement, and not every fake account qualifies for a trademark complaint.

Information about Malaysian copyright, trademarks and reporting routes here is general education, not legal advice. The appropriate reporting or legal route depends on the facts of the case.

## 12. When More Than One Reporting Route May Apply

Multiple reporting routes may apply to the same incident when the facts involve identity, copied content, branding and fraud.

*Matching the facts to the reporting route*

| Situation | Likely route | Possible additional issue |
| --- | --- | --- |
| Fake creator profile using your name and photo | Impersonation report | None, if nothing else is copied |
| Fake profile also reposts your original photos and videos | Impersonation report | Copyright report for the copied works |
| Fake business Page uses your registered mark to sell fake products | Impersonation report | Trademark report, and fraud, depending on the facts |
| Fake account asks your customers to send money | Impersonation report | Fraud report through Malaysian channels |
| Someone hacked your real account and changed the password | Account recovery | Not impersonation, unless a separate fake account also exists |

Where several apply, they can run in parallel. Keep one evidence file and note which report used which evidence.

## 13. What Evidence Should a Malaysian Business Prepare?

- Company identity: registered name and SSM registration where relevant.
- Official website and email on the company domain.
- URLs of every official social profile.
- Trademark registration details, where relevant.
- Original logo files and brand assets.
- Original marketing materials and their publication dates.
- Customer reports, redacted before sharing beyond your team.
- The fake profile's URL, username and display name.
- Screenshots and recordings with dates.
- A timeline of events.
- Payment details used in any scam: bank account, e-wallet, amounts.
- Evidence of your account's history, such as early posts.

Platform forms may ask for proof of identity or authorisation. Submit it only through the platform's own form, and do not send confidential company documents to strangers offering help.

## 14. What Evidence Should a Creator Prepare?

- Your official profile URLs on every platform.
- Previous usernames.
- Original photos and videos, with camera files or exports.
- Editing project files.
- Screenshots of your genuine accounts.
- Creator or business records, such as payout statements.
- Sponsorship contracts that name your handle.
- Reports from followers who were contacted.
- The fake profile's URL and username.
- Screenshots of the impersonating posts.
- Suspicious messages and payment requests.
- Dates and times for all of the above.

## 15. How to Build an Evidence Timeline

A short table is enough. Here is an example of what one day might look like for a small online business:

*Example impersonation evidence timeline*

| Time (MYT) | Event | Evidence |
| --- | --- | --- |
| 9:10 AM | Fake profile discovered | Profile screenshot and URL |
| 9:20 AM | Customer receives fake payment request | Customer's screenshot |
| 9:35 AM | Fake account copies an original post | Screenshot and original file |
| 10:00 AM | Platform report submitted | Confirmation screenshot |
| 2:15 PM | Further suspicious activity | New screenshots |
| 4:00 PM | Platform response received | Email or notification |

A consistent timeline makes the case easier for a platform reviewer, a bank or the police to understand. It does not decide the outcome; the platform still makes its own decision.

## 16. What Not to Do

- Do not hack the impersonator back or try to access their account.
- Do not threaten them.
- Do not publish their personal information or dox them.
- Do not create fake accounts to retaliate.
- Do not fabricate evidence or edit screenshots misleadingly.
- Do not file false copyright or trademark claims. They can backfire, and your details may be passed to the other side.
- Do not flood the platform with duplicate reports.
- Do not pay strangers who say removal is certain.
- Do not send passwords or OTP codes to anyone claiming to be support.

## 17. Reporting the Fake Account

The general process is the same on every platform:

1. Preserve the evidence first.
2. Open the fake profile.
3. Use the platform's current reporting option.
4. Choose the category that accurately describes the problem.
5. Give truthful information.
6. Submit supporting evidence where the form asks for it.
7. Save the confirmation or reference number.
8. Keep tracking the account for changes.

Some platform details worth knowing:

- Instagram and Threads: you can report impersonation even without an Instagram account, using the [impersonation form](https://help.instagram.com/370054663112398). Instagram acts on reports from the person being impersonated or an authorised representative, and asks for a photo of your ID.
- Facebook: you can [report impersonating profiles or Pages](https://www.facebook.com/help/174210519303259) without a Facebook account. The form also asks for ID.
- TikTok: the [impersonation reporting page](https://support.tiktok.com/en/safety-hc/report-a-problem/report-an-impersonation-account) explains the in-app report and the web form for people outside the US.
- YouTube: channels impersonating you can be reported under YouTube's [impersonation policy](https://support.google.com/youtube/answer/2801947).
- LinkedIn: [report the profile](https://www.linkedin.com/help/linkedin/answer/a1338436) with "This person is impersonating someone". Reported members are not told who reported them.
- X: use the impersonation report in X's Help Center.

Malaysia's communications regulator gives the same advice: MCMC's [impersonation FAQ](https://www.mcmc.gov.my/ms/faqs/online-content-problems-2024/9-someone-has-opened-an-account-in-social-networki) says to complain to the site under its "impersonation" category, and that sites prioritise direct complaints from the person impersonated. For how we handle these cases, see our [impersonation removal](https://www.awarexone.com/social-media-recovery/impersonation-removal) page. If the problem is a post rather than an account, our guide to [getting content removed from social media](https://www.awarexone.com/research/social-media-content-removal-malaysia) matches each type of content to its route.

## 18. What If the Impersonator Is Scamming Your Customers?

Once money is involved, this becomes a fraud problem as well as a platform problem.

- Warn customers through your official channels, and pin the warning where you can.
- Tell them how to recognise your real account: exact handle, website link and the only payment methods you use.
- Preserve every payment request, including bank account names and numbers and e-wallet details.
- Preserve URLs and message screenshots.
- Customers who have lost money should call the National Scam Response Centre on 997 as soon as possible. The [government's NSRC page](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) asks for a call within 24 hours so bank accounts and transactions can be blocked, and lists impersonation scams among the cases it handles.
- Before paying anyone, customers can check a bank account or phone number on PDRM's Semak Mule portal. It checks accounts and numbers, not social profiles.
- Report the cyber incident to [Cyber999](https://www.cybersecurity.my/portal-main/services/cyber999-overview), which provides technical analysis and helps escalate abuse reports. It does not remove accounts. CyberSecurity Malaysia tracks impersonation and spoofing as a separate fraud category, with [81 incidents in Q1 2026](https://www.cybersecurity.my/portal-main/advisories-details/21046861-ac28-11f1-b812-0050568ccc16).

## 19. What If the Impersonator Uses Your Name and Photos?

An account using your name and face is an identity problem, and it should normally be reported under the platform's impersonation policy with your ID. That is the route designed for it.

If the same account also posts photos or videos you created, a copyright report may be a separate, additional route for those works. If it uses a registered brand mark in trade, a trademark route may apply. Identity and intellectual property are different categories with different forms, and combining them in one report usually makes it harder to act on.

## 20. When Is Professional Case Review Worth Considering?

Many impersonation cases are resolved by a single accurate report. A case review may help when:

- The impersonator is actively contacting your customers.
- A business, rather than an individual, is affected.
- Several platforms are involved.
- The fake account uses several kinds of copied material.
- Copyright or trademark questions are involved.
- Official reports have not resolved the problem.
- The evidence needs substantial organising.
- The incident overlaps with account compromise or fraud.
- Reputation or revenue is materially affected.

## Scams That Target Impersonation Victims

Finding a fake account makes you a target for a second scam. Common versions:

- Fake platform notices: phishing messages posing as Meta, claiming a copyright or impersonation violation and linking to a fake appeal form that asks for your password and 2FA code ([MailGuard, June 2025](https://www.mailguard.com.au/blog/facebook-page-admins-targeted-with-fake-copyright-notice)). Instagram says it [never contacts you about account security by Direct message](https://www.facebook.com/help/instagram/760602221058803/?locale=en_GB).
- Fake removal specialists who contact you first and promise a takedown for a fee.
- Fake lawyers and fake police: in 2026 the Malaysian Bar warned that lawyers do not act as "recovery agents" ([AFP Fact Check](https://factcheck.afp.com/doc.afp.com.97Y77KE)), and police warned of fake recovery services posing as officers or legal firms ([AFP Fact Check](https://factcheck.afp.com/doc.afp.com.92QZ6CQ)).
- Fake NSRC accounts: police have confirmed that NSRC has no social media accounts ([Malay Mail, September 2025](https://www.malaymail.com/news/malaysia/2025/09/03/scam-alert-fake-nsrc-facebook-pages-tricking-malaysians-into-sharing-data/189846)).
- Fake copyright complaints used against you, followed by a demand for payment to withdraw them ([Malwarebytes, September 2026](https://www.malwarebytes.com/blog/scams/2026/09/copyright-scammers-get-instagram-accounts-suspended-and-demand-payment)).

Report through the platform's own help pages, reached by typing the address yourself. Our guide to the [fake Meta support scam in Malaysia](https://www.awarexone.com/research/fake-meta-support-scam-malaysia) shows what these messages look like.

## When SocialSafe by AwareXone May Help

SocialSafe by AwareXone is AwareXone's social media recovery and digital identity service line. For impersonation, we review the case first, help organise the evidence, explain which platform route fits the facts, and guide the reporting through the platforms' own processes. Where copied posts are part of the problem we help with [content removal](https://www.awarexone.com/social-media-recovery/social-media-content-removal), and afterwards our [digital identity protection](https://www.awarexone.com/digital-identity-protection) work helps make your real accounts easier to recognise, including [verification](https://www.awarexone.com/social-media-verification) where you are eligible.

AwareXone is independent and not affiliated with any platform. We have no special access to platform staff, and we cannot promise that a fake account will be removed or that any legal outcome will follow. The platform makes the decision. We never ask for passwords, OTP or 2FA codes, backup codes, session cookies, tokens or private keys. You can read [how we work](https://www.awarexone.com/trust).

## Social Media Impersonation Evidence Checklist

Fake account evidence:

- Profile URL
- Username and display name
- Profile photo and bio
- Dated screenshots
- Posts, stories and other content
- Direct messages
- Payment requests
- Customer reports

Ownership evidence:

- Your legitimate profile URLs
- Original photos and videos
- Original branding files
- Website
- Business records, where relevant
- Trademark records, where relevant
- Copyright or creation evidence, where relevant

Reporting evidence:

- Platform report confirmations
- Support correspondence
- Case or reference numbers, if provided
- Later platform responses

## Save These 10 Things Before Reporting

1. The fake account's full URL.
2. Its username and display name.
3. A full-screen screenshot of the profile.
4. Screenshots of copied posts, photos or logos.
5. Any messages or payment requests it sent.
6. Screenshots from customers or followers it contacted.
7. The date and time of each capture, in MYT.
8. Your real profile URLs.
9. Original files of the content it copied.
10. Business, trademark or ID documents you may need for the platform's form.

## Frequently Asked Questions

### What evidence should I collect when someone impersonates me online?

The fake account's URL, username and display name, dated screenshots of its profile, posts and messages, reports from people it contacted, and proof of what is genuinely yours: your real profile, original content and, where relevant, business or trademark records.

### Should I screenshot the fake social media account?

Yes. Capture the full screen, including the username and platform interface, before you report. Accounts often change or disappear once reported.

### Do I need the fake account's URL?

Yes. The URL identifies the account even if its name or photo changes, and report forms usually ask for it. Keep it as text as well as in screenshots.

### What if the impersonator deletes the account?

Your saved screenshots, URLs and timeline remain your record. Keep them, because the same person may return under a new name, and your earlier evidence helps show a pattern.

### What is the difference between impersonation and account recovery?

Account recovery addresses loss of access to your legitimate account. Impersonation reporting addresses a separate account pretending to be you. The two can happen together and need separate actions.

### Is copying my photos a copyright issue?

It can be. Copyright reporting addresses unauthorised use of protected original works, such as photos or videos you created. Copying your name or identity alone is not a copyright issue.

### When might a trademark report be relevant?

When a protected brand mark is used in a way that may constitute infringement, such as selling goods under your registered mark. Not every fake account using a logo qualifies.

### Can I report an impersonator to the platform and use a copyright report too?

Yes, where the facts support both. Report the fake identity as impersonation and the copied works through the copyright route. Be aware that platforms may share your name and email with the other party for copyright reports.

### What should a Malaysian business do if customers are being scammed by an impersonator?

Warn customers through official channels, preserve payment details and messages, report the account to the platform, and tell anyone who lost money to call NSRC on 997 quickly.

### Should I contact the impersonator directly?

No. Contact can prompt them to change or hide the account before you have reported it, and it can escalate the situation. Report through the platform instead.

### Can a recovery or removal service make sure a fake account is removed?

No. Only the platform decides whether to remove an account. Anyone promising certain removal, especially someone who contacted you first, is a warning sign.

### When is professional case review worth considering?

When customers are being targeted, several platforms or rights issues are involved, reports have not worked, or the case overlaps with fraud or a compromised account.

## Official sources

- [Instagram Help Center: Report an impersonation account](https://help.instagram.com/370054663112398)
- [Facebook Help Center: Report an impersonating profile or Page](https://www.facebook.com/help/174210519303259)
- [Facebook Help Center: Copyright reports](https://www.facebook.com/help/325058084212425)
- [Instagram Help Center: Instagram will never contact you by Direct message about account security](https://www.facebook.com/help/instagram/760602221058803/?locale=en_GB)
- [TikTok Support: Report an impersonation account](https://support.tiktok.com/en/safety-hc/report-a-problem/report-an-impersonation-account)
- [YouTube Help: Impersonation policy](https://support.google.com/youtube/answer/2801947)
- [YouTube Help: Submit a copyright removal request](https://support.google.com/youtube/answer/2807622)
- [LinkedIn Help: Report fake profiles](https://www.linkedin.com/help/linkedin/answer/a1338436)
- [MyIPO: Frequently asked questions (copyright and trademarks)](https://www.myipo.gov.my/faq/)
- [MyIPO: Trademark search](https://www.myipo.gov.my/search-trademark/)
- [MCMC FAQ: Someone has opened an account and impersonated me](https://www.mcmc.gov.my/ms/faqs/online-content-problems-2024/9-someone-has-opened-an-account-in-social-networki)
- [Malaysian government: NSRC 997 hotline](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline)
- [CyberSecurity Malaysia: Cyber999 overview](https://www.cybersecurity.my/portal-main/services/cyber999-overview)
- [CyberSecurity Malaysia: Cyber incident quarterly summary, Q1 2026](https://www.cybersecurity.my/portal-main/advisories-details/21046861-ac28-11f1-b812-0050568ccc16)
- [AFP Fact Check: Malaysian Bar warns lawyers are not recovery agents (February 2026)](https://factcheck.afp.com/doc.afp.com.97Y77KE)
- [AFP Fact Check: Fake recovery services target scam victims in Malaysia (February 2026)](https://factcheck.afp.com/doc.afp.com.92QZ6CQ)
- [Malay Mail: Fake NSRC Facebook pages (September 2025)](https://www.malaymail.com/news/malaysia/2025/09/03/scam-alert-fake-nsrc-facebook-pages-tricking-malaysians-into-sharing-data/189846)
- [MailGuard: Facebook Page admins targeted with fake copyright notice (June 2025)](https://www.mailguard.com.au/blog/facebook-page-admins-targeted-with-fake-copyright-notice)
- [Malwarebytes: Copyright scammers get Instagram accounts suspended and demand payment (September 2026)](https://www.malwarebytes.com/blog/scams/2026/09/copyright-scammers-get-instagram-accounts-suspended-and-demand-payment)

---

AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.
