Malaysia, 5 November 2026 – The Malaysia Computer Emergency Response Team (MyCERT) has warned that a fraudulent Android application called “BNM Mobile Security” can relay contactless bank cards to criminals for unauthorised payments and cash withdrawals. Its advisory, dated 4 November, says the application impersonates Bank Negara Malaysia but is not distributed or endorsed by the central bank.
The warning matters to Malaysian businesses and regional investors following payment security because the scam combines institutional impersonation with misuse of a customer’s physical card. MyCERT describes a card-relay attack, not a confirmed intrusion into banks’ core systems. The advisory does not provide a victim count or aggregate loss figure, so the scale of financial damage cannot be established from it.
Unlock the Full Article
This article is exclusive to The Ledger Asia Subsribers / PAID members.
Already have an account? Log in here

