One warning is all it takes
By Dr. Nur Syazwani Ahmad
Today, online scams are no longer an issue that only affects people who are considered “naive” when it comes to technology. In an increasingly digital world, anyone can become a target, including educated individuals, professionals, active social media users and people who regularly conduct online transactions. Every day, more stories of cybercrime victims are being shared on social media. Some lose their savings to investment scams, others fall victim to fake job offers, while some unknowingly provide their banking information after receiving calls from individuals impersonating bank officers or government authorities.
This raises an important question: why do people continue to fall victim to scams despite the growing number of awareness campaigns? One reason is that online scams today do not simply exploit weaknesses in technology; they also exploit human vulnerabilities. Scammers do not necessarily need to hack into sophisticated computer systems or use highly complex technology. Instead, they may simply need to make someone feel afraid, excited, greedy, sympathetic or pressured into making a decision without thinking carefully.
We often hear comments such as, “How could they fall for a scam? They’re educated,” or “They work and use computers every day. How could they possibly get scammed?” This perception needs to change. Becoming a victim of a scam does not necessarily mean that a person is unintelligent or does not know how to use technology. Scams are designed to manipulate the way people make decisions.
For example, someone may be highly proficient in using online banking applications but still fall victim to a phone call claiming that there is a suspicious transaction involving their account. A professional who regularly uses email and social media may also be influenced by a message impersonating their supervisor and demanding an urgent payment. When people are placed under pressure or panic, they tend to focus on solving the immediate problem rather than questioning whether the information they have received is actually legitimate.
This is why digital literacy should not be measured solely by a person’s ability to use technology. More importantly, it involves the ability to evaluate information, identify signs of manipulation, verify information and make safe decisions. The challenge becomes even greater as technology continues to evolve. In the past, scam messages could often be identified through obvious spelling mistakes, unusual language or suspicious links. Today, this is no longer necessarily the case. Scam messages can appear professional, use the identity and branding of legitimate organisations, and even be tailored to the recipient’s circumstances.
The development of artificial intelligence (AI) also has the potential to make scams even more convincing. AI can be used to generate more polished messages, create fake images and, in some cases, produce voices or other content that resemble real individuals. This means that we can no longer rely on simple indicators such as, “If the language looks strange, it must be a scam.” Instead, users need to develop a more important habit: pause before you act. If you receive a message urging you to make a payment, provide personal information or click on a link, do not act immediately. Verify the information through official channels and contact the relevant organisation using a telephone number obtained from its official website or other trusted sources, rather than using the contact details provided in the suspicious message.
This is where the role of the family becomes particularly important. In many families, individuals who are more digitally confident often become the first point of reference when parents, siblings or relatives receive suspicious messages. “Is this really a message from the bank?” “Can I trust this number?” or “They said my account will be blocked if I don’t make the payment now.” These questions may seem simple to some of us. However, for individuals who are less familiar with digital scams and their tactics, such situations can create confusion and panic.
This is where our knowledge can become a form of protection for others. We should not make fun of or blame someone for asking questions. Instead, we should encourage a culture within our families where people feel comfortable asking for a second opinion before making a transaction or sharing personal information. It is far better to ask ten questions before making a transaction than to make one decision that results in the loss of thousands of dollars.
Another behaviour we need to change is the way we share information about scams. We often share stories about scams only after someone has become a victim. These stories then become topics of discussion on social media such as how the victim was deceived, how much money was lost and how the scammer carried out the scheme. Such sharing is important, but education should take place before an incident happens, not only afterwards. If we learn about a new scam tactic, we should share that knowledge with our parents, family members, friends and communities. Rather than simply saying, “Don’t fall for scams,” explain how the scam works.
For example, if scammers are impersonating bank officers, discuss what information they typically request, how they create a sense of urgency or fear, and what steps can be taken to verify the caller’s identity. In this way, we are not merely giving warnings; we are helping others develop the ability to make safer decisions.
We should also not be afraid to admit when we have been scammed. Shame can cause some victims to delay telling their families or seeking help. They may fear being scolded, judged as careless or blamed for sharing their money or personal information. In reality, delaying action only gives scammers more time to exploit the situation. Being a victim is not something to be ashamed of; what matters is acting quickly, seeking help and learning from the experience. A victim’s experience can also help others recognise the same tactics before they become the next victim.
Ultimately, breaking the chain of cybercrime is not simply about making sure “I don’t get scammed.” It is also about making sure that “the people around me don’t become victims.” In a digital world where scams are becoming increasingly sophisticated, our knowledge and willingness to help others can become an important layer of protection. Sometimes, a simple reminder, a second opinion or a few minutes spent checking information can make the difference between someone staying safe and losing their hard-earned savings. So, stay informed, pause before you act, verify before you trust, and never hesitate to share what you know.
The author is a Senior Lecturer at the Department of Social Sciences, Centre for Foundation Studies in Science, Universiti Malaya, and can be reached at syazwani.ahmad@um.edu.my