The Malaysian Communications and Multimedia Commission (MCMC) has successfully busted a digital fraud syndicate that used Fake Base Transceiver Station (Fake BTS) equipment to defraud mobile phone users.
According to a statement issued on 29th July 2026, the tactic was discovered following the arrest of a 23-year-old man in Johor Bahru, last Friday.
“The suspect was spotted driving a vehicle equipped with fake BTS equipment emitting radio frequency (RF) signals that masquerade as a telecommunications service provider and send fraudulent SMS containing web links to deceive victims,” according to the statement.
According to MCMC, the technology allows fraudulent messages to appear as if they were sent by a legitimate party, increasing the risk of users being misled by the included web links.
Initial investigations found that the syndicate targeted public areas, especially during peak hours, to increase the number of SMS sent.
“Fake BTS is a non-standard communication device that imitates mobile network signals to enable SMS to be sent to users’ phones without going through the official network of the telecommunications service provider,” according to the statement.
The case is being investigated under Section 239(1)(a) of the Communications and Multimedia Act 1998 (Act 588) and Regulation 16(1)(b), the Communications and Multimedia (Technical Standards) Regulations 2000.
If convicted of an offence under Section 239, the offender may face a fine of up to RM1 million, imprisonment for up to ten years, or both, whereas offences under Regulation 16 carry a maximum fine of RM300,000, imprisonment for up to three years, or both.
MCMC stated that it would continue to intensify operations with the Royal Malaysian Police (PDRM) to combat the fraudulent and criminal use of radio frequency spectrum and telecommunications infrastructure.
“As of mid-2026, MCMC has carried out five (5) special operations to combat Fake BTS activities, including two (2) operations in Johor and three (3) operations in Genting Highlands, in addition to seizing four (4) GSM module units believed to have been used in the activities, four (4) individual conversations were recorded to aid the investigation.
The public is also advised to remain vigilant and not click on any suspicious SMS links, or to share banking or personal information without first checking through official channels.
