Maybank is strengthening the built-in Malware Shielding feature in its MAE banking app, adding broader detection capabilities designed to identify more security risks before customers access their accounts. The enhanced protection is being progressively introduced with MAE version 0.9.51, with the rollout beginning from 26 September.
At the time of the announcement, version 0.9.51 had not yet appeared on the Google Play Store or Apple App Store, where version 0.9.50 remained the latest release. MAE users should therefore watch for the upcoming update and install it once it becomes available on their devices.
Malware Shielding Can Detect More Security Risks
The upgraded Malware Shielding system is designed to identify a wider range of potentially unsafe conditions on a smartphone. When MAE detects a security issue, the app will alert the user and explain what needs to be corrected before normal banking access can continue.
This approach is intended to prevent potentially compromised devices from becoming an entry point for fraudulent transactions. Instead of simply warning users after suspicious activity occurs, Maybank is trying to identify risky device conditions before sensitive banking functions are accessed.
Depending on the severity of the issue, the app may allow the user to continue after acknowledging a warning, provide steps to resolve the problem, or temporarily restrict MAE access until the detected risk has been addressed.
Users Will Need to Accept Updated Terms
After installing the new MAE version, customers will also be asked to review and accept the updated Malware Shielding Terms & Conditions.
By selecting "Agree", users acknowledge that the security feature will automatically scan for signs of malware and potentially unsafe device settings whenever MAE is launched. The check operates as part of the app's security process rather than requiring users to manually initiate a scan.
Maybank says this monitoring is intended specifically to assess security-related conditions that could place banking activity at risk.
Maybank Says Personal Content Is Not Collected
The bank has also emphasised that Malware Shielding does not access, collect, process or store personal information from other applications installed on a customer's device.
According to Maybank, the feature does not inspect personal content such as photographs, messages, contacts, videos or documents. Banking information and other personal data also remain protected under the bank's existing security controls.
This distinction is important because security software that checks for risky applications or system configurations may naturally raise privacy concerns. Maybank says the feature is focused on identifying security conditions rather than examining the user's private content.
Malware Shielding Was Introduced in 2024
Maybank first introduced Malware Shielding in 2024 as an additional preventive security layer within the MAE app.
The feature performs security checks whenever users launch MAE and looks for signs that the device may not provide a sufficiently secure environment for mobile banking. This includes identifying suspicious applications, unsafe configurations and behaviours commonly associated with malware or fraud attempts.
The enhanced version builds on that foundation by widening the range of potential risks the app can detect.
Developer Mode and Rooted Devices Can Be Flagged
One category of risk involves modified or less secure operating-system configurations.
Malware Shielding can identify settings such as Developer Mode, as well as rooted Android devices or jailbroken iPhones. These configurations are not automatically malicious, but they can reduce some of the protections normally enforced by Android or iOS and potentially give malicious applications greater access to the device.
For a banking application, that creates additional risk because malware operating with elevated permissions could potentially interfere with the app or observe sensitive activity.
Maybank may therefore require customers to disable certain settings before continuing to use MAE.
Screen Sharing and Recording Are Also Monitored
The feature can also detect screen sharing and screen recording, both of which have become increasingly relevant in online banking scams.
Fraudsters sometimes convince victims to install remote-access software or share their screens while pretending to provide technical assistance. Once connected, the scammer may be able to observe banking activity or guide the victim through transactions.
By detecting these conditions when MAE launches, the app can warn users before sensitive information is exposed during a remote session.
This type of preventive control has become increasingly common among Malaysian banking apps as financial institutions respond to scams involving remote-access tools.
Unsafe Apps and Modified MAE Versions Can Be Blocked
Malware Shielding can also detect applications Maybank considers potentially malicious or risky.
This may include software associated with malware behaviour, suspicious services or applications capable of interfering with the banking environment. The feature can additionally identify modified or unofficial versions of the MAE app, which may represent another avenue for credential theft or transaction manipulation.
Using only the official MAE application downloaded through recognised app stores remains one of the simplest ways users can reduce this risk.
Unsafe Connections May Trigger Warnings
The security checks are not limited to applications and device settings. Maybank says Malware Shielding can also identify potentially unsafe connections or services that could place banking activity at risk.
If such a condition is detected, users may be asked to correct the issue before accessing MAE. The exact response depends on how serious the detected risk is.
The broader objective is to ensure that both the app and the surrounding device environment meet an acceptable security level before customers access banking services.
Keeping MAE and the Phone Updated Remains Important
Maybank continues to recommend that customers keep both the MAE application and their smartphone operating system updated.
Operating-system updates frequently contain security patches for vulnerabilities that could otherwise be exploited by malicious software. App updates similarly allow Maybank to introduce new protections, improve threat detection and respond to emerging fraud techniques.
Users should therefore avoid delaying security-related updates unnecessarily, particularly on devices used for mobile banking.
Security Is Becoming More Device-Aware
The enhanced Malware Shielding feature reflects a broader change in mobile banking security. Banks can no longer focus only on protecting their own servers and applications; the condition of the customer's device also matters.
Even a secure banking app can become vulnerable if it is running alongside malware, remote-access software or on a heavily modified operating system.
By checking the surrounding device environment every time MAE launches, Maybank is attempting to reduce the chance that compromised phones can be used to facilitate unauthorised banking activity.
Final Thoughts
Maybank's upgraded Malware Shielding adds another layer of protection for MAE users by detecting a wider range of potential security risks before banking access is allowed.
The feature can identify malicious or risky applications, unsafe system settings, rooted or jailbroken devices, screen sharing, recording, suspicious connections and modified versions of MAE. Depending on the risk detected, users may receive a warning, instructions to resolve the issue or temporary restrictions until the device is secured.
Importantly, Maybank says these checks do not involve accessing personal photos, messages, contacts or documents stored on the device.
Once MAE version 0.9.51 becomes available, users should install the update and review the new Malware Shielding terms. For customers, it is another reminder that mobile banking security now depends not only on strong passwords and transaction authentication, but also on keeping the device itself secure.
Comments 0