Malaysia is looking at whether its cybercrime laws need to be strengthened, not only to punish offenders more seriously but also to give scam victims a clearer way to recover their lost money. The review comes at a time when online scams have become one of the most frustrating digital threats facing ordinary Malaysians. In many cases, victims discover that once money has been transferred out of their bank account, the chances of getting it back can be uncertain, slow, or extremely limited.
This has raised a bigger policy question: should Malaysia's cybercrime framework focus only on catching and prosecuting criminals, or should it also provide stronger protection and recovery support for victims?
A Wider Review of Cybercrime and Online Harm
Minister in the Prime Minister's Department for Law and Institutional Reform, Datuk Seri Azalina Othman Said, has indicated that the review will look at both punishment and victim support.
The work is being handled by the Legal Affairs Division and is expected to cover more than just financial scams. It may also consider wider digital offences and online harm, reflecting how cybercrime has expanded beyond traditional hacking or fraud cases.
Today, cybercrime can involve phishing, mule accounts, fake investment schemes, impersonation, social media deception, online harassment, and other forms of digital abuse. This makes the legal response more complicated because different offences may require different types of enforcement, prevention, and victim assistance.
Could Tougher Punishments Be Introduced?
One of the more attention-grabbing parts of the review is whether caning should apply to certain cybercrime offences.
This would be a major policy discussion because cybercrime is often seen as a non-physical offence, even though its impact can be financially and emotionally devastating for victims. Supporters of tougher penalties may argue that stronger punishment could act as a deterrent, especially for organised scam networks and repeat offenders.
However, any proposal would still need to be carefully assessed under Malaysia's legal and regulatory framework. The government would also need to consider which offences, if any, should fall under tougher sentencing, and whether such measures would actually reduce cybercrime in practice.
The Bigger Issue: Helping Victims Recover Money
For many scam victims, punishment alone is not enough. What they want most is their money back.
At present, Malaysia does not yet have a bank-led refund model that gives scam victims a clear and consistent reimbursement route in cases where funds are transferred due to deception. This leaves many victims feeling that the system focuses more on investigation than recovery.
The review may look at whether victims should have a more structured path to compensation or reimbursement, especially in cases involving authorised push payment scams, where a victim is tricked into willingly transferring money to a scammer.
This is one of the hardest areas to manage because responsibility can be shared across several points: the victim, the bank, the receiving account, mule account networks, digital platforms, and enforcement agencies.
Learning From Other Countries
Malaysia is also looking at overseas examples as part of the review.
The United Kingdom has introduced mandatory reimbursement rules for certain authorised push payment scam cases, shifting more responsibility onto payment service providers. Australia is also developing its own scam redress framework, while Singapore's legal system includes tougher penalties for selected offences.
These examples may help Malaysia evaluate different models, but they cannot be copied directly without adjustment. Each country has different laws, banking systems, enforcement capabilities, consumer protection rules, and expectations around shared responsibility.
For Malaysia, the key challenge will be finding a model that protects genuine victims without encouraging negligence or creating loopholes that scammers could exploit.
Why This Matters for Banks and Consumers
A refund framework would have major implications for banks, eWallet providers, payment networks, and consumers.
If financial institutions are expected to reimburse victims in more cases, they may need stronger fraud detection, faster transaction monitoring, better warning systems, and tighter controls around suspicious accounts. At the same time, consumers may also be expected to take reasonable precautions, such as paying attention to scam warnings and avoiding suspicious links or investment promises.
The goal should not be to blame victims, but to create a fair system where banks, regulators, law enforcement, digital platforms, and users all play their part in reducing scam losses.
Final Thoughts
Malaysia's cybercrime review is important because scams have become more than a personal financial problem. They are now a national digital trust issue.
Tougher penalties may send a stronger message to offenders, but victim recovery is just as important. If people feel that there is no practical way to recover stolen funds, trust in digital banking, online payments, and digital services can weaken.
The review is still at the study stage, and no completion timeline has been confirmed. Still, the direction is clear: Malaysia is now looking beyond prosecution alone and asking how the legal system can better support victims, strengthen accountability, and respond to the growing reality of online crime.
Comments