Scammers move to RCS and iMessage as SMS links blocked
Scammers are using Rich Communication Services (RCS) and Apple’s iMessage to send phishing links after Malaysia’s telecoms regulator barred hyperlinks in SMS, the Malaysian Communications and Multimedia Commission (MCMC) said.
Source: The Star Malaysia · August 20, 2026 at 1:44 PM · AI-assisted report
CorroboratedKUALA LUMPUR, 20 AUGUST 2026 —
Listen to this article
DomainFork Audio · read aloud
Scammers are using Rich Communication Services (RCS) and Apple’s iMessage to send phishing links after Malaysia’s telecoms regulator barred hyperlinks in SMS, the Malaysian Communications and Multimedia Commission (MCMC) said.
Market Impact
Telecommunications fraud deputy director Mohd Amirul Hakim Abdul Rahim said the shift followed MCMC’s enforcement of a directive that blocked hyperlinks, callbacks and requests for personal data in official SMS messages. “For SMS, MCMC has enforced a directive … prohibiting hyperlinks, requests to call back numbers or requests for personal details through official SMS,” he told the National Digital Scam Forum on Aug 20. “So they shifted to RCS and iMessage.”
The forum was held alongside the launch of the 2026 National Anti-Scam Awareness Programme by Communications Minister Datuk Seri Fahmi Fadzil.
OTT services such as WhatsApp and Telegram are also being used to spread phishing links, according to Mohd Amirul. MCMC will now engage with platform providers to explore controls akin to those applied to SMS, he said.
For suspected fraudulent content such as illegal investments or impersonation of financial institutions, MCMC verifies the material with the Securities Commission Malaysia or Bank Negara Malaysia before issuing blocks or takedowns. “Investment-related cases would be referred to the Securities Commission Malaysia, while cases involving banking would be verified with Bank Negara or relevant banking institutions,” he said.
Bank Negara LINK and offices department deputy director Hasjun Hashim urged the public to be alert to syndicates that pressure victims into registering companies for mule accounts. Digital banks rely on electronic know-your-customer checks using ID documents and facial recognition, she said, adding that victims who discover accounts opened without their consent should file complaints with their banks within 14 days or escalate to Bank Negara.
National Financial Crime Centre director-general Datuk Seri Shamshun Baharin Mohd Jamil and Selangor commercial crime investigation department chief SAC Mohamad Rosni Mohamed Lazim also spoke at the forum.
Related: Apple · Bank Negara Malaysia