Fake Online Casino Scam: What Malaysia’s Raids Reveal

A fake online casino scam is a gambling site, often run through a WhatsApp “top-up agent”, that takes your deposits but never lets real money out. This week Malaysian police raided two alleged call centres doing exactly that, one in an abandoned hotel in Sungai Petani and one in a house in Kuching. If your winnings sit on “pending withdrawal” and the agent asks you to pay more to release them, stop paying: that stall is the scam. In Malaysia, call 997 straight away. Below: the 5 stages, the red flag at each one, and where to report.

What police found in this week’s raids

Two raids, three days apart, describe the same business model.

• Sungai Petani, Kedah (raids 21 and 23 Oct 2026). Kuala Muda police said a syndicate had run from an abandoned hotel since June. It handled online game credit top-ups via a website and WhatsApp. Winnings withdrawals were “deliberately delayed” and shown as “pending withdrawal”, so customers never got their money. Police said it targeted the Bangladeshi community. Six men were held: four Bangladeshi men aged 20 to 53, and two Malaysian men police believed were the premises owner and a rental agent. Police estimated about 17 accounts affected and about RM2,000 lost a day, and said suspects were believed to earn about RM2,700 a month (Malay Mail, 25 Oct 2026).
• Kuching, Sarawak (raid 23 Oct 2026). Police arrested eight foreign nationals aged 19 to 38 at a house they said was a call centre for “non-existent online gambling sites”, targeting victims in a neighbouring country. All were believed to work there full time (Borneo Post, 23 Oct 2026).
• Kuala Lumpur (raids 28 Sep 2026). A month earlier, Bukit Aman raided eight premises and held 74 foreigners. Police said the sites were calling centres promoting online gambling and running scams, including love scams and fake investment scams (The Star, 29 Sep 2026).

In both October cases, suspects are being investigated for cheating and criminal conspiracy under Sections 420 and 120B of the Penal Code. These are allegations. Nobody has been convicted.

Our calculation (27 Oct 2026): RM2,000 a day across about 17 accounts is roughly RM118 per affected account per day. These are small, everyday amounts, the size of a top-up you would not think twice about. If the police estimate held steady from June until the 21 October raid (113 to 142 days, depending on the start date), the total would be roughly RM226,000 to RM284,000. That is our rough extrapolation, not a police figure.

Takeaway: These are not glamorous casinos. Police described a room of phones and computers, small daily top-ups, and a withdrawal button that was never meant to work.

The fake online casino scam in 5 stages

We mapped the police reports above, a Penang case from January 2026 and a Singapore Police Force advisory onto one pattern. Each stage has a short EXAMPLE line (invented names, for recognition only), the red flag and what to do instead.

Stage 1: They find you

Contact comes through WhatsApp, social media or someone in your community. In the Penang case, a woman who lost RM759,950 was first contacted on WhatsApp about something unrelated, domestic helpers, before the gambling “investment” came up (Malay Mail, 3 Jan 2026).

EXAMPLE: “Bro, new game site, top up RM30 only, withdraw same day. Ask for Agent Rina.”

• Red flag: A stranger or a “friend of a friend” brings you a site you have never heard of.
• Instead: Do not click. Take our scam quiz if you are unsure.

Stage 2: Trust and a small first win

The first win is bait. The Penang victim’s first “investment” showed a RM3,000 profit before she sent much larger sums. Forcepoint researchers found fake casino dashboards display “winnings” to encourage more deposits (Forcepoint X-Labs, Jan 2026).

EXAMPLE: “Congrats! Your balance is now RM480. Top up a bit more to join the VIP tables.”

• Red flag: A big number on screen, before you have ever taken real money out.
• Instead: A balance is not money. Try withdrawing a small amount first, before adding anything.

Stage 3: Top-ups through an agent

Police said the Sungai Petani group handled game credit top-ups through a website and WhatsApp. You pay a person, not a cashier page, often into a personal bank account or e-wallet.

• Red flag: You are told to transfer to a named individual or a different account each time.
• Instead: Never pay a personal account for “credit”. Those accounts are often money mule accounts.

Stage 4: “Pending withdrawal” and the fees

This is the core of the scam. In Sungai Petani, police said withdrawals were deliberately delayed and shown as “pending withdrawal”. Singapore police described the same move: victims were told their accounts were “frozen” and they had to deposit more before withdrawing, and some were charged administrative fees (SPF, 23 Oct 2020). The Penang victim was told to make more payments to release her earnings.

EXAMPLE: “Withdrawal pending. Please pay RM150 verification fee to release.”

• Red flag: Any request to pay money to get your own money back. See our withdrawal fee scam breakdown.
• Instead: Stop all payments. A short delay at a real operator is normal; our casino withdrawal pending guide explains how to tell the difference.

Stage 5: Silence, or a new site

Singapore police said that after extra payments, scammers stopped responding and the sites became inaccessible. The agent goes quiet, the number changes, or a “new platform” appears.

EXAMPLE: “Old site under maintenance. Move your balance to our new site, small transfer fee.”

• Red flag: “Maintenance”, a new link, or a new agent who already knows your balance.
• Instead: Report it. Save every chat, receipt and account number first.

Takeaway: The first two stages feel like luck. Stage 4 is where you find out. If a withdrawal needs a fee, the money was never there.

Real licensed operator vs fake call-centre casino

A fake site can look polished. These are the differences that matter.

Run any site through our licence check tool and read fake gambling app red flags. Singapore police also remind the public that betting on illegal online betting sites is an offence.

Takeaway: A real operator pays you back to an account in your name. A fake one asks you to pay first.

Why migrant workers and overseas players are targeted

Police said the Sungai Petani group targeted the Bangladeshi community, and the Kuching centre targeted people in a neighbouring country. They did not say why. What the reports do show:

• Small, frequent amounts. About RM118 per account per day is easy to send without anyone noticing.
• Victims abroad are harder to reach. A call centre in one country taking money from people in another makes it harder for victims to report to the right police.
• Workers can be recruited too. In a 2022 Kuala Lumpur raid on a centre taking gambling deposits from customers in Bangladesh, one worker said he was offered a “customer service” job after months without work (Dhaka Tribune, Feb 2022).

If a job offer involves “customer service” for a game or betting site, be careful: you could end up running the scam, or lending your bank account to it.

Takeaway: If you have family working abroad, ask them one question: “Has a game site ever said your withdrawal is pending?”

Already paid? What to do in the first 2 hours

Speed matters. Malaysia’s Home Minister said of the 997 hotline: “The first one to two hours are crucial” (Malay Mail, 3 Mar 2026).

1. Stop paying. No fee, tax or “unfreeze” payment will release your balance.
2. Call your country’s scam hotline (table below) with the account numbers you paid into.
3. Call your bank and ask it to try to stop or recall the transfer.
4. Save evidence: screenshots of chats, the site address, receipts, agent numbers.
5. Make a police report. In Malaysia, 997 calls feed the National Scam Response Centre, which can freeze accounts.
6. Ignore anyone offering to “recover” your money for a fee. That is a recovery scam, the next stage.

Where to report a fake online casino scam

We checked each number on 27 Oct 2026 against official or news sources.

If you paid from Malaysia, report in Malaysia even if you are not Malaysian. If your relative paid from another country, use that country’s channel. For the bigger picture of how gambling and “investment” scams build trust over weeks, read our pillar guide to how pig butchering scams work.

Takeaway: One call, fast, with the account numbers. That gives the authorities their best chance to freeze money.

FAQ

How do I know if an online casino is fake?

The clearest sign is a withdrawal that stays “pending” while someone asks you to pay a fee, tax or deposit to release it. Other signs: you top up through a WhatsApp agent, you pay personal bank accounts, and there is no licence you can check on a regulator’s register.

What does “pending withdrawal” mean on a scam site?

In the Sungai Petani case, police said withdrawals were deliberately delayed and shown as “pending withdrawal”, so customers never got their money. On a fake site it is a stalling screen, not a real payment queue.

Should I pay the fee to release my winnings?

No. Singapore police described victims being told to deposit more or pay administrative fees, after which scammers stopped responding. Paying more only increases the loss.

Who do these call centres target?

Police said the Sungai Petani syndicate targeted the Bangladeshi community, and the Kuching centre targeted victims in a neighbouring country. Anyone can be targeted, especially through WhatsApp and social media.

Can I get my money back from a fake online casino?

Sometimes, if you report fast. In Malaysia, call 997; the National Scam Response Centre can suspend reported accounts. Never pay anyone who offers to recover the money for a fee.

Will I get in trouble for reporting if I was gambling?

Laws differ by country, and this is not legal advice. Online gambling can itself be an offence in Malaysia and Singapore. Police still ask scam victims to report quickly so accounts can be frozen; if you are worried, get legal advice before or when you report.

HotStakes is an independent directory. Some links on this site are affiliate links; we may earn a commission at no cost to you, and it never changes our rankings. Gambling involves risk — only play with money you can afford to lose, and if it stops being fun, seek help. This article is general information, not legal advice. Read our full disclaimer.