Free credit is a genuine marketing tool used by many online casinos — but it is also one of the easiest baits for scammers. A message offering "RM188 free credit, no deposit" costs a scammer nothing to send, and it only needs a few people to respond. This guide explains how free credit scams usually work in Malaysia, the warning signs to look for, and what to do if you think you have already been caught.
18+ only. If an offer feels too good to be true, it almost always is. Never share banking passwords, TAC or OTP codes with anyone.
How free credit scams typically work
Most scams follow a similar pattern, whatever name they use:
- The bait. An unusually large free credit offer arrives through WhatsApp, Telegram, Facebook, TikTok or SMS — often from an "agent" you have never spoken to.
- The hook. You register, sometimes on a site or app that looks like a well-known brand, and your balance shows the "free credit".
- The win. The balance grows quickly — sometimes suspiciously quickly — to hundreds or thousands of ringgit.
- The block. When you try to withdraw, there is a new condition: a "verification deposit", "tax", "unlock fee" or "turnover clearing payment".
- The loop. Each payment leads to another fee. Eventually the agent disappears or the account is frozen.
The money on screen was never real. The only real money in the whole process is what you send.
10 warning signs of a free credit scam
| # | Warning sign | Why it matters |
|---|---|---|
| 1 | Very large free credit with "no conditions" | Real free credit is small and always has rules |
| 2 | Contact from an unknown "agent" on WhatsApp/Telegram | Scammers rely on private chats that are hard to trace |
| 3 | Request for banking password, TAC or OTP | No legitimate platform ever needs these |
| 4 | Fees to withdraw ("tax", "unlock", "activation") | Legitimate platforms do not charge you to receive winnings |
| 5 | APK from a random download link | Fake apps can steal logins or install malware |
| 6 | No written terms — "just ask the agent" | Without written rules, they can invent new ones at any time |
| 7 | Pressure and countdowns | "Deposit in 10 minutes or lose everything" is manipulation |
| 8 | Payment to a personal bank account | Deposits to individuals' accounts are a common scam marker |
| 9 | A website that looks like a known brand but the address is slightly different | Cloned sites copy logos and layouts to borrow trust |
| 10 | Support disappears when you ask about withdrawal | A platform that only talks to you about deposits is not a platform |
One sign alone does not always mean fraud, but two or more together is a strong reason to stop.
The fake APK problem (Mega888, 918Kiss and others)
Slot apps such as Mega888 and 918Kiss are usually installed on Android as APK files rather than from the Google Play Store. Scammers take advantage of this by sending "updated" or "special free credit" versions through chat links.
A fake APK may:
- Ask for permissions it does not need, such as reading SMS messages (where TAC codes arrive) or accessibility access.
- Show a fake login screen that captures your username and password.
- Be a cloned game client connected to a server the scammer controls.
Protect yourself:
- Only install from a source you can trust and verify — see our Mega888 safe download guide.
- Never grant SMS or accessibility permissions to a game app.
- Keep Google Play Protect turned on and your phone updated.
- If an app asks for your banking details inside the game, uninstall it.
Signs of a safer platform
No checklist can guarantee a platform is honest, but legitimate operators tend to share these traits:
- Written promotion terms — turnover, max withdrawal, eligible games and expiry — visible before you claim.
- Deposits through normal channels, with clear account details, not a different personal account every time.
- Working 24/7 live chat on the website, not only a private agent's phone number.
- Consistent withdrawal process with no surprise fees.
- A website address that stays the same and is shared through official channels.
For a deeper checklist, read how to choose a safe online casino in Malaysia.
What to do if you think you have been scammed
Act quickly — speed matters most in the first hours.
- Stop sending money. No further "fee" will unlock your balance.
- Contact your bank immediately and ask them to block or flag the transaction.
- Call the National Scam Response Centre (NSRC) at 997. The official Malaysian government portal lists it as operating 24 hours and advises reporting as soon as possible, ideally within 24 hours.
- Make a police report at the nearest police station. Bring screenshots of chats, transfer receipts, account numbers and website addresses.
- Check suspicious accounts or numbers using PDRM's Semak Mule portal before you transfer to anyone in future.
- Change your passwords — especially online banking and email — if you shared any login details or installed an unknown app.
- Warn friends and family who may receive the same message.
Do not be embarrassed. These scams are designed by people who do this every day, and reporting helps stop the next victim.
How to protect yourself going forward
- Ignore unsolicited free credit messages. Go directly to a platform's website instead of clicking links.
- Never share TAC, OTP or banking passwords — not with "customer service", not with an "agent", not with anyone.
- Read the terms before you claim any free credit. See our turnover guide to understand the numbers.
- Start small. Test withdrawal with a small amount before trusting a platform with more.
- Set a budget and never borrow to play. Our responsible gambling guide has practical tools.
Choosing where to play
If you do decide to play, choose a platform with clear written terms and a support channel you can reach on its official website. One platform we track is MCC888, a Malaysian online casino offering slots, live casino and sportsbook, with local bank and e-wallet deposits and 24/7 support. You can see its current promotions here: MCC888 promotions. Wherever you play, the rules above still apply: no TAC sharing, no withdrawal fees, no random APKs.
Related guides
- Free Credit Malaysia: the complete guide
- Free credit no deposit: what to check
- Mega888 download: safe install guide
FAQ
Is every free credit offer a scam?
No. Many online casinos offer small free credit with written terms. The scams are the offers with unrealistic amounts, no written rules, and fees to withdraw.
Why would a platform ask me to deposit before withdrawing free credit winnings?
Some legitimate platforms do this once to verify that your bank account is yours, and they state it in the terms before you claim. Repeated fees, "taxes" or "unlock payments" are a different thing and are a strong scam signal.
An agent asked for my TAC to "activate" free credit. Is that normal?
No. A TAC or OTP authorises transactions on your bank account. Anyone asking for it can move your money. Do not share it, and contact your bank if you already did.
Can I get my money back after a scam?
It is not guaranteed, but your chances are better the faster you act. Contact your bank and call NSRC at 997 as soon as possible, then make a police report.
How can I tell a cloned casino website from the real one?
Check the exact web address letter by letter, use only links from official channels, and be wary if the site asks you to deposit to a personal account or contact an agent outside the site's own live chat.
18+. Gambling involves risk. Set a budget, take breaks, and never chase losses. If gambling stops being fun, stop.