130 Malaysians Detained in Pakistan Over a Rawalpindi Call Centre Accused of Scamming Victims Back Home
Pakistan's cybercrime agency raided a call centre in Rawalpindi and detained 130 Malaysians accused of phoning victims in Malaysia while posing as bank staff and police. PDRM may send investigators.
Pakistani authorities have detained 130 Malaysians accused of working in a Rawalpindi call centre that police say phoned and defrauded people in Malaysia, and the Royal Malaysia Police (PDRM) have confirmed the arrests. Pakistan's National Cyber Crime Investigation Agency (NCCIA) raided premises at KASA Tower in Bahria Town Phase VIII after getting a court warrant. All 130 are Malaysian passport holders, and some had valid visas while others had overstayed, Inspector-General of Police Mohd Khalid Ismail said on 30 October.
The alleged scam
The callers posed as bank customer service officers and uniformed police and told victims they were tied to money laundering, police say. Victims' payments were received through Malaysia's Touch 'n Go eWallet, ProPakistani reports from the first information report.
PDRM believes the operation was masterminded by a Malaysian operating from Cambodia together with a Chinese national. No figure for losses or for the number of victims has been given.
The case and what comes next
The case was registered under sections 13, 14 and 16 of Pakistan's Prevention of Electronic Crimes Act 2016, amended in 2025.
PDRM is working with Pakistan through Malaysia's foreign ministry. The file has gone to the director of Bukit Aman's Commercial Crime Investigation Department, and the IGP said "we may send officers there to obtain the full details". Police don't yet have a full list of the detainees' profiles.
On Cambodia's scam compounds, Amnesty International has named five security firms that guard them.
More news
Synology NAS Hit by C3RB3R Ransomware (.L0CK3D): Synology Blames Unpatched DSM, Fixed Versions Listed
Ransomware is encrypting Synology NAS boxes and renaming files .L0CK3D. Synology says attackers exploit a flaw patched in December 2024; Qihoo 360 points to two September 2026 bugs. Which DSM builds fix both.
Philippine Privacy Commission Probes Theft of 27 OFW Database Backups Linked to DMW Systems
Hunt.io found logs showing 27 database backups named after POEA and OFW systems were copied in September. The National Privacy Commission is investigating; DMW hasn't commented.
SEBI Fines CDSL ₹1 Crore Over Unpatched Vulnerabilities, Data Loss Prevention Gaps and Pledge Lapses
SEBI's 30 October order fines CDSL ₹1 crore after an FY 2023-24 inspection found unpatched vulnerabilities, endpoints outside DLP, a narrow VAPT and pledge lapses. It's CDSL's second ₹1 crore penalty this year.