Khazanah Research Institute Calls for Shared Liability in Cyber Financial Scam Fight

The Khazanah Research Institute (KRI) has issued a urgent call to reform Malaysia's approach to cyber financial crimes, arguing that the burden of preventing fraud must shift from individual victims to the corporations that facilitate digital transactions. According to the original publisher, the institute’s 2026 paper, Hook, Line and Sinker: Cyber Financial Scams in Malaysia, highlights that the current system disproportionately penalizes consumers, even as financial losses from scams have ballooned to RM2.77 billion.

The research, led by Jun-E, emphasizes that the ecosystem of digital finance is fundamentally flawed if the responsibility for security rests solely on the end-user. The KRI report proposes a model of shared responsibility, demanding that financial institutions, telecommunications companies, and digital service providers take active, legally binding steps to verify, monitor, and prevent illicit activity on their platforms before it reaches the consumer.

The staggering RM2.77 billion figure underscores the systemic nature of the threat. The KRI analysis suggests that cyber scams are no longer isolated incidents of individual error but are enabled by structural vulnerabilities within the infrastructure of Malaysian banking and mobile connectivity. By requiring banks and telcos to bear a portion of the financial burden, the KRI suggests that these entities will be incentivized to invest more heavily in robust, proactive anti-fraud technologies.

For the average Malaysian, this proposed policy shift represents a potential lifeline. Currently, victims of sophisticated social engineering or phishing scams often find themselves with little recourse, left to navigate complex banking policies that rarely favor a full recovery of stolen funds. A move toward shared accountability could mean that consumers are no longer solely liable for the failures of digital security systems, potentially forcing banks to tighten their protocols for authorizing large transfers and verifying digital identities.

For SMEs and digital investors, the shift is equally critical. In an economy currently expanding at a real GDP growth rate of 6.0% year-on-year, trust in digital platforms is essential for sustained growth. When small businesses or investors fear that a single security breach could result in total financial loss without institutional support, their participation in the digital economy is stifled. Ensuring that banks and telcos are held accountable may ultimately stabilize the digital marketplace, making it safer for the workforce to manage finances online.

This discourse on financial safety arrives against a backdrop of moderate economic pressure. While headline inflation remains relatively controlled at 1.8% as of July 2026, the cost of living remains a primary concern for the 513,400 individuals currently unemployed. In an environment where every ringgit is vital—particularly for those managing budgets amidst fluctuating fuel costs like the RM3.77 price for unsubsidized RON95—the loss of life savings to cybercrime is economically catastrophic for individual households and the broader domestic economy.

The KRI paper serves as a significant marker in the ongoing battle against fraud, shifting the narrative away from public awareness campaigns that focus on "vigilance" toward a structural regulatory approach. Policymakers must now decide whether to integrate these recommendations into the National Scam Response Centre’s (NSRC) existing framework or to pursue new legislative mandates that force financial and telco entities to compensate victims for systemic security lapses.

What remains unconfirmed is how these entities—banks, telcos, and digital platforms—will respond to the proposed shift in liability. While the KRI has provided a roadmap for better protection, it is unclear if the government will implement these changes through new legislation or if it will opt for a more collaborative, voluntary industry standard. Whether this shift will lead to lower operational costs for consumers or higher service fees as institutions adjust to their new risk profiles is a question for future market analysis.