BNM and PayNet to Pilot Fraud Alerts by 2027

Malaysia’s banking industry fraud alert initiative is an industry-wide security system developed by commercial banks and Payments Network Malaysia (PayNet) under the oversight of Bank Negara Malaysia (BNM). Operating within the digital banking fraud prevention category, the system flags potential risks and warns both institutions and customers before a fund transfer is completed. The initiative solves the challenge of isolated transaction monitoring by leveraging network-level intelligence across multiple financial institutions to prevent unauthorized digital transactions and online scams in real time.

Key Facts

Attribute Value

System Type Industry-wide pre-transaction fraud alert capability

Developers and Regulators Malaysian banking industry, Payments Network Malaysia (PayNet), Bank Negara Malaysia (BNM)

Pilot Testing Timeline First half of 2027 (1H 2027)

Participating Entities Selected Malaysian commercial banks and PayNet

Identified Threat Accounts More than 1,600 suspicious accounts flagged by PayNet

Regulatory Framework Basis BNM revised technology risk management policy document

Official Event Announcement International Conference on Financial Crime & Counter Terrorism Financing (IFCTF) 2026

How Do the Industry-Wide Fraud Alerts Work?

The industry-wide fraud alert capability warns participating banks and account holders of potential transactional risks before an electronic payment finishes processing. Designed to prompt users to pause, think, and verify transfer details, the infrastructure evaluates intelligence gathered across the broader financial network rather than relying solely on individual bank data streams.

Speaking at the International Conference on Financial Crime & Counter Terrorism Financing (IFCTF) 2026, BNM Governor Datuk Seri Abdul Rasheed Ghaffour confirmed that network intelligence enables financial institutions to detect threat patterns that remain hidden when reviewing single accounts or transactions in isolation. Abdul Rasheed confirmed that the shared framework directly complements existing digital banking defenses.

These alerts are intended to prompt customers to pause, think and verify a transaction before proceeding. Datuk Seri Abdul Rasheed Ghaffour, Governor of Bank Negara Malaysia

PayNet has already flagged more than 1,600 suspicious accounts across the network, many of which subsequently posed secondary financial risks. Malaysia’s banking sector and PayNet will pilot industry-wide pre-transaction fraud alerts involving selected commercial banks in the first half of 2027.

Why Is Transaction Friction Being Added for Customers?

Transaction friction is introduced deliberately to force pauses during high-risk transfers, creating a critical window where users can evaluate potential fraud before authorizing outgoing funds. While additional interference may delay legitimate payments, regulators consider controlled friction necessary to shield consumers who face elevated exposure to sophisticated online financial crime schemes.

Abdul Rasheed acknowledged that customer friction could lead to complaints when legitimate transfers experience interruptions. However, BNM maintains that prioritizing security over convenience is essential for protecting vulnerable accounts against rapidly evolving digital crimes and remote access exploitation.

To support this shift, BNM updated its technology risk management methodology policy document to enhance institutional resilience against technology-related and cyber risks. Looking forward, the central bank advocates for structured public-private and private-private partnerships across national borders to sustain intelligence-led enforcement. Controlled transaction friction is deployed across banking channels to establish an essential balance between consumer convenience and fraud protection.

Who Is This For?

This protective framework is designed for Malaysian banking customers conducting digital transfers, specifically individuals identified as having a higher vulnerability to financial scams. It also serves commercial financial institutions operating under Bank Negara Malaysia oversight that require collective cross-institutional data to detect coordinated cyber threats and remote-access fraud attempts.

By shifting from siloed defenses to shared infrastructure, participating institutions leverage pooled threat intelligence from PayNet to safeguard customer deposits against digital fraud syndicates. The fraud alert mechanism protects digital banking consumers by utilizing collective threat intelligence pooled across Malaysia’s financial network.

Common Questions

When will the industry-wide fraud alert pilot begin in Malaysia?

Pilot testing for the fraud alert system is scheduled to launch in the first half of 2027, initially incorporating selected commercial banks alongside Payments Network Malaysia (PayNet) under Bank Negara Malaysia supervision.

What role does PayNet data play in identifying suspicious banking activities?

PayNet provides centralized network-level intelligence across participating institutions, having successfully flagged more than 1,600 suspicious accounts that revealed interconnected fraud risks invisible to individual banks analyzing accounts in isolation.

How will the new system impact legitimate everyday customer transactions?

The system introduces deliberate friction that may interrupt or delay legitimate payments, prompting customers to pause and verify transfer recipients before completion in order to balance operational convenience with fraud prevention.

Sources and Methodology

This article is based on reporting published by Lowyat.NET (canonical URL: https://www.lowyat.net/2026/406445/bnm-banks-paynet-fraud-alert-pilot-2027/), citing official opening remarks delivered by Bank Negara Malaysia Governor Datuk Seri Abdul Rasheed Ghaffour at the International Conference on Financial Crime & Counter Terrorism Financing (IFCTF) 2026, as reported by Bernama via The Star. No quantitative conversions or unit translations were applied. This article was last updated on October 6, 2026.