You should use a malware scanner regularly as part of your WordPress maintenance routine. It’s also a necessary tool if you’re starting a new website. If you own an eCommerce website or a high-traffic site, it's best to scan it at least once a week (best to scan it daily). However, the best option is to have ongoing malware checks happening in real-time.