Skip to main content
mybankcredit

Staying safe

Licensed moneylender or Ah Long? How to tell the difference in five minutes

Illegal moneylenders and loan scammers often copy the language — and sometimes the names — of licensed lenders, and today most of both operate online. A few simple checks protect you from both, whether a lender serves you face to face or entirely online. This guide explains what the law requires, what illegal operators do differently, and where to get help.

Updated 2026-10-08 · 8 min readMyBank Credit editorial team · Reviewed for compliance

Why this matters

Unlicensed lenders, known in Malaysia as Ah Long, charge interest far above the legal limit and often collect through intimidation: splashing paint, locking gates, harassing family members and employers. A newer threat is the online loan scam, where there is no loan at all — only a series of 'fees' you are told to pay before the money is released.

The cost is not only financial. People caught by illegal lenders often borrow from a second Ah Long to pay the first, hide the problem from their family, and end up with debts many times what they originally borrowed. Recognising the signs early, before any money changes hands, is by far the easiest way out.

Both target people who need money quickly and feel they have few options. The good news is that the warning signs are consistent, and the checks take minutes.

What a licensed moneylender must do

Moneylenders in Peninsular Malaysia and the federal territories are licensed and supervised by the Ministry of Local Government Development (KPKT) under the Moneylenders Act 1951. A licence comes with obligations that protect you:

  • Hold a current KPKT licence, appear on KPKT's published list and keep the registered address shown on the licence
  • Charge no more than 18% a year flat for unsecured loans, or 12% for secured loans
  • Verify your identity properly before lending — in person or, for lenders that work online, on a live video call
  • Use the prescribed Schedule J or Schedule K agreement, explain it to you before you sign, and have it stamped with LHDN
  • Give you a copy of the stamped agreement and a statement of account when you ask
  • Pay the loan into a bank account in your own name, never in cash through a middleman
  • Rebate unearned interest if you settle early
  • Never use threats, violence or harassment to collect a debt

Notice what is not on that list: a requirement to meet face to face. KPKT allows licensed moneylenders to lend online, provided they verify the borrower's identity and use a proper Schedule J or K agreement. A lender that serves you entirely through its website, a video call and an official WhatsApp number can be fully legal. What matters is whether it is licensed and whether it follows the rules above — not whether it has a counter you can walk up to.

Online lending: what is legal and what is a red flag

Scammers have moved online too, which makes this confusing. 'Online only' is not on its own a warning sign — we are an online-only lender ourselves. The warning signs are what comes with it: a WhatsApp number that matches no licence, a website or Facebook page that hides the company name and licence number, a request for a fee before payout, or a request for your banking login.

  • Legal: an enquiry form on the lender's own website that does not ask for your IC number, bank details or documents
  • Legal: a call or message from the number published on that website and on the lender's KPKT details, quoting your reference
  • Legal: a short video call where an officer sees you and your MyKad, with documents sent only through the lender's official channel
  • Legal: a Schedule J agreement sent digitally, explained line by line, signed electronically and stamped with LHDN
  • Red flag: any 'processing', 'insurance', 'release' or 'stamp duty' payment before the loan reaches your account
  • Red flag: anyone asking for your online-banking password, TAC or a photo of your ATM card, or asking you to courier the card

Licensed lender vs illegal lender: side by side

How to tell them apart
What to checkLicensed moneylenderAh Long or scammer
How they find youYou find them; adverts show the licence numberUnsolicited SMS, WhatsApp, flyers or social-media messages
Where they operateA registered address on KPKT's list; may serve you entirely online through its official website and numberNo verifiable company at all — just a WhatsApp number, a social-media page, or a café or car
InterestUp to 18% a year, quoted as a yearly flat ratePer week or per month, often 10% to 30% a month
Upfront feesNone; only stamp duty at signing'Processing', 'insurance', 'release' or 'stamp duty' fees before payout
AgreementSchedule J or K, explained before you sign, stamped with LHDN, copy for youNo agreement, a blank form, or a fake 'contract' sent as a picture by message
Your documentsIdentity checked in person or on a video call; originals stay with youAsks you to hand over or courier your MyKad, ATM card or bank book
Payment accountCompany account in the licensed namePersonal accounts or a different company's account
How you receive the loanThe full amount into a bank account in your own nameAsks for your online-banking login or TAC 'to deposit the loan'
Credit checkWith your consent, to check affordability'No CTOS check, guaranteed approval'
PressureYou can take time to read the offer'Decide now or lose the offer'
CollectionCalls and letters to you onlyThreats, paint, harassment of family and employer

How a typical loan scam unfolds

This is an illustrative scenario based on patterns reported by the police and KPKT, not a real customer. A factory worker needs RM5,000 for a family emergency and replies to a WhatsApp advert promising 'approval in one hour, no CTOS check'. Within minutes she receives an approval letter with a licensed company's name. She is told to pay RM150 'stamp duty' first. Then RM400 'insurance'. Then the money is 'frozen' because her account number was 'entered wrongly', and she must pay RM800 to unfreeze it.

By the time she stops, she has paid RM1,350 into three different personal accounts and received nothing. Every one of the checks in this guide would have stopped it at the first message: an unsolicited advert, a company name with a different phone number from the one on its licence, a fee before payout, and payments to personal accounts. None of it needed a meeting to spot.

How to check a lender in five minutes

  1. 1

    Get the full company name and licence number

    Ask for them in writing. A licensed lender will give them immediately; ours are at the bottom of every page of this website.

  2. 2

    Check the KPKT list

    KPKT publishes licensed moneylenders by state on its website. Confirm the company name, licence number and address all match exactly. Scammers sometimes use a real lender's name with a different phone number or bank account.

  3. 3

    Call the number on the official listing

    Don't rely on the number in the message you received. Call or WhatsApp the number shown on the lender's official website or the KPKT listing and ask whether the offer is genuine. With us, that is the official WhatsApp number shown on our site — we never contact you from any other number.

  4. 4

    Check the agreement before you sign

    It should be a Schedule J (or K, for secured loans) agreement with the lender's licensed name, your loan amount, rate, instalment and total cost filled in. It is stamped with LHDN, and you should receive a copy. Never sign a blank or half-filled page, on paper or on screen.

  5. 5

    Check where the money goes

    The loan must be paid into a bank account in your own name, and you should pay nothing before it arrives. When you repay, confirm the account belongs to the licensed company. Never pay into a personal account.

Common tactics to watch for

  • The fee chain: you pay a small 'processing fee', then 'stamp duty', then 'insurance', then an 'unfreeze fee' — and the loan never arrives
  • The fake approval letter: a professional-looking document with a real company's logo and a different phone number
  • Holding your ATM card: the lender asks you to hand over or courier your card, then withdraws your salary each month and controls your account
  • Borrowing in your name: you are asked to sign as a 'guarantor' for a stranger and become liable for the debt
  • Rolling the loan: you're offered a new loan to pay the old one, and the debt grows every month
  • The 'verification' trap: you're asked to log in to your online banking on a link they send, or read out a TAC, so they can 'check your account' or 'deposit the loan'
  • The cloned page: a Facebook page or website copies a real lender's name, logo and licence number but lists a different WhatsApp number

If you've already borrowed from an illegal lender

  1. 1

    Stop paying 'fees' to unknown accounts

    If it's a scam, more payments will not release a loan. Note every account number you paid into.

  2. 2

    Contact your bank immediately

    Ask them to try to stop or trace the transfers, and change your online-banking password if you shared it.

  3. 3

    Report it

    Call the National Scam Response Centre on 997 as soon as possible for scams, and make a police report. Report unlicensed moneylending to KPKT as well.

  4. 4

    Get free help with your debts

    AKPK, set up by Bank Negara Malaysia, offers free and confidential counselling and can help you plan repayments of legitimate debts.

If you're being harassed or threatened

Harassment, threats, damage to property and contacting your family or employer to shame you are criminal offences, whoever does them. You do not have to deal with it alone. Keep messages, call logs and photos as evidence and make a police report. Tell your employer and family what is happening so they are not caught off guard.

Safer places to borrow

  • Banks — usually the lowest rates for people with a steady salary and a clean record
  • Cooperatives (koperasi) — salary-deduction loans for civil servants and some private employees
  • Government schemes — for small businesses, agencies such as TEKUN Nasional offer financing for entrepreneurs
  • Your employer — some offer salary advances for emergencies
  • Licensed moneylenders — when you need money quickly or don't fit bank criteria, with rates capped by law

If you're borrowing to keep up with other debts, speak to AKPK before taking on anything new. A new loan rarely fixes a debt problem on its own.

What to do next

Check our licence against the KPKT list before you contact us — we'd encourage that. We are a KPKT-licensed moneylender that works entirely online: you send an enquiry on this website, we call or WhatsApp you from the official number shown on our site, verify you on a short video call, and send a Schedule J agreement for you to e-sign, stamped with LHDN. Read our fees page to see exactly what a licensed loan costs, with rates from 4.9% a year flat, and send an enquiry when you're ready. Our form never asks for your IC number, bank details or documents, and we will never ask you for money before your loan is paid into an account in your own name.

Related loans

Ready to see your own numbers?

Try the calculator or send a three-minute enquiry. No IC number, no fee, no obligation.

More guides