A video that appears to feature a financial regulator is not proof that an investment has official backing. Bank Negara Malaysia (BNM) has warned about deepfake videos impersonating its senior officers. Its 13 October 2026 alert states that neither BNM nor the Securities Commission Malaysia (SC) promotes or recommends private investment schemes.
This Malaysian news explainer was checked on 15 October 2026. It covers the recent warning and the checks readers can make before trusting or sharing a claim. It is not an investment recommendation, and no particular offer has been assessed or approved by WABO.
What the BNM deepfake warning means
The warning concerns content that presents BNM or SC senior officers as promoters of investments or financial products. BNM asks people to verify such claims through official channels and report suspicious material to the platform concerned or to the regulators.
The practical question is not simply whether the face or voice looks convincing. It is whether the claimed endorsement exists in an independently accessible official source. BNM links readers to its deepfake and impersonation examples; the examples are a reference point, not an exhaustive catalogue of every fraudulent video.
An alert list and an authorisation check answer different questions
A warning list can help identify a known concern. It cannot certify every name that does not appear on it. BNM explicitly cautions that an entity’s absence from, or removal from, its Financial Consumer Alert list must not be taken as confirmation that the entity is licensed or regulated by BNM.
- Alert-list question: has the authority flagged this entity or scheme?
- Authorisation question: is this individual or entity authorised for the relevant activity?
- Identity question: does the person contacting you actually represent that entity?
The SC Investment Checker is designed to check whether a person or entity is authorised by the SC to offer, promote or sell capital-market products and services in Malaysia. Read the returned name, status and permitted activity carefully. A matching company name alone does not authenticate a message, video or payment instruction that someone has sent you.
A practical verification sequence
- Pause before responding. Do not let an urgent video caption replace an independent check.
- Open the regulator’s website yourself. Use the official address rather than a link supplied by the promoter.
- Check the claim and the entity separately. Look for the alleged announcement, then use the appropriate regulator’s records to check authorisation.
- Resolve mismatches through official contact channels. BNM’s alert points to BNMLINK; the SC checker provides its own enquiry details. Do not rely only on contact information in the suspicious post.
- Report, rather than amplify, suspicious content. Use the platform’s reporting function or the regulator’s official reporting channel.
As a hypothetical example, imagine a forwarded clip naming a real firm and claiming that a regulator guarantees its offer. Finding the firm’s name in an official register would answer only part of the question. You would still need to check the claimed announcement and whether the sender is genuine. Do not treat these separate checks as interchangeable.
This habit also matters when using public services. WABOMY.CO’s STR 2027 application-opening guide explains how to distinguish official HASiL instructions from unofficial application help. That is a separate government-assistance update, not an investment scheme; the shared lesson is to verify the original channel before handing over information.
If money has already been sent
Act promptly rather than waiting to prove that a video was fabricated. Malaysia’s official NSRC information page directs scam victims to contact their bank, call 997 and lodge a police report. It lists the hotline as operating 24 hours daily.
Keep transaction records, the message link and relevant screenshots for the bank or authorities. Share them through official reporting channels, not in public comments. Reporting does not guarantee that funds will be recovered, but delaying a report is not a useful verification step.
The takeaway from this week’s warning is straightforward: apparent authority on screen is not the same as verified authority. Check the source, check the relevant authorisation, and use official channels if something does not match.