Key takeaways
- Most fake agents copy a real agent's name, photo and price list, then message you first.
- The single biggest warning sign is a new bank account for payment "just this once".
- Always start the chat yourself from a contact you saved after a successful top-up.
- A RM10 test top-up costs little and exposes most fakes before you lose more.
How agent impersonation works
Agent impersonation is the most common way KISS918 players lose money, because it uses trust you have already built. The scammer studies a real agent — their display name, profile photo, price list and the way they write — and builds a copy. Then they find players who use that agent, usually from public group chats, and message them first.
The opening message is friendly and ordinary: a promotion, a "new number" announcement, or a reminder that a bonus is about to expire. Nothing about it looks dramatic. The goal is to get you to pay into an account the scammer controls before you think to check.
The four most common scripts
"This is my new number"
The fake claims the agent's old number was banned or lost. Any contact can change their number, but a real agent will normally tell you from the old number, in the chat you already have.
"Special rate, today only"
A rate noticeably better than the usual one, with a deadline. Urgency is there to stop you comparing prices or checking with the real agent.
"Use this account for now"
The fake asks you to pay into a different bank account because the usual one is "under maintenance" or "over its limit". This is the single most reliable sign of a scam.
"Verify your account first"
The fake asks for your password or an OTP to "check" your ID before crediting it. No legitimate top-up ever needs these.
Warning signs in the chat
- They contacted you first, from a number you have not saved.
- The display name matches, but the number or username differs by a digit or letter.
- Payment details are new, or the account name is a person you do not recognise.
- They push you to pay quickly and discourage questions.
- They avoid voice calls or will not confirm details on a channel you already use.
- Their spelling, tone or emoji habits are slightly different from the agent you know.
A 60-second check before you pay
- Close the chat that reached you. Open the contact you saved after your last successful top-up instead.
- Ask the saved contact directly whether they changed number, rate or bank account.
- Compare the receiving name. DuitNow and online banking show the recipient's registered name before you confirm. It should match previous receipts.
- Refuse any request for a password, PIN or OTP, whatever the reason given.
- If anything has changed, send a RM10 test top-up before anything larger.
The rule that prevents almost every impersonation loss: you start the conversation, from a contact you already trust. Never act on an unprompted message, however familiar it looks.
A real-world example
Here is how a typical impersonation unfolds, based on patterns players commonly report.
On a Friday evening, a player receives a WhatsApp message from a number they have not saved. The profile shows their usual agent's logo and name. The message reads: "Boss, my old number kena ban. Save this new one. Weekend promo today — top up RM100 get RM130, until 10pm only."
The player is busy, the promotion sounds plausible, and the profile looks right. When they ask for the payment details, the "agent" sends a DuitNow ID. The confirmation screen shows a personal name the player has never seen before. The fake agent explains: "That's my cousin's account, mine is full for today."
Every warning sign is present: an unsaved number, an unprompted message, a deadline, a new receiving account and an excuse for the name. The player who pays loses RM100. The player who opens their saved contact and asks "Did you change your number?" finds out in thirty seconds that the real agent knows nothing about it.
Protecting yourself long-term
A few habits make impersonation far less likely to work on you:
- Save your agent's contact with a note, such as the date of your first successful top-up. A new "same" contact will not have it.
- Keep a screenshot of the usual receiving account name. Compare against it every time.
- Agree a simple check with your agent, such as always confirming account changes by voice call.
- Leave or mute large public groups where scammers find targets.
- Never act on a deadline. Genuine promotions rarely vanish in minutes, and if one does, you have lost nothing by missing it.
What real agents do differently
Legitimate agents have their own interest in protecting you from impersonators, because every scam damages their reputation. Most will announce number changes in their existing chats, keep the same receiving account for long periods, and happily confirm details if you ask. An agent who becomes irritated when you check is giving you useful information.
Telegram, Facebook and other platforms
Impersonation is not limited to WhatsApp. On Telegram, scammers create channels and accounts with names one character away from a real agent's username. On Facebook and other social platforms, they run copycat pages with the same photos and post comments under real agents' posts offering "faster service by DM". The rules are the same everywhere: check the exact username or number, start the conversation yourself, and never pay a new account without confirming through a contact you already trust.
If you have already paid
Speed matters more than anything. Call the National Scam Response Centre on 997 and your bank's fraud line straight away, so the receiving account can be flagged before the money moves on. Then file a police report and keep every screenshot, receipt and phone number. Our guide to reporting a top-up scam in Malaysia walks through each step, and keeping dispute evidence explains what to save.
Finally, warn the real agent. They can alert other players and report the impersonating account to the messaging platform.
Frequently Asked Questions
From public group chats, leaked contact lists, or by watching who replies to an agent's posts. Being contacted first by an "agent" is a warning sign in itself.
Profile photos and names are easy to copy. Compare the phone number or username character by character with the contact you saved, and check the receiving bank account name against your past receipts.
Call the National Scam Response Centre on 997 and your bank straight away, then file a police report. Keep every screenshot.
Figures are indicative and based on publicly available information at the time of writing — always confirm current terms with your agent. This article is general information, not legal or financial advice. 18+ only; see Responsible Gambling.
Verify Your Agent Before You Pay
Compare channels and confirm current terms in writing before every top-up or cash-out.