# MA-888.112022: MyCERT Alert - Suspicious Fraudulent Telephone Calls Asking for Users NRIC Number

**Date:** 16 Nov 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-888.112022  
**Advisory ID:** MA-888.112022

---

**1.0 Introduction**
Lately, MyCERT has been observing several calls to users' mobile numbers, purportedly from Delivery Service. The Delivery Service persists users to provide their full NRIC numbers for the Delivery Service cross-checking purposes. This is something unusual for Delivery Services to persist users to provide their full NRIC numbers. The actual motive of such calls is unknown as of now. Nevertheless, there is a potential for misusing such personal details of users by irresponsible parties. This could be an attempt to gain personal information such as Identification Card (NRIC) numbers or other personal details for possible malicious purposes. Based on our observation, we presume the perpetrators are using a VoIP system to make the calls. Most likely they are using a group of call agents, with automatically assigned different phone numbers that can be easily interchanged within the VoIP phone number system, used to call the victims.
**2.0 Impact**
Personal information obtained from individuals could be misused by perpetrators for various malicious activities, for instance, impersonation via telephone calls, purportedly from government officials or the Law Enforcement Agency (LEA). The modus operandi is to create panic among potential victims and force victims to make payments to the perpetrators.
Figure 1: Screenshot of the telephone call log
**3.0 Recommendations**
Protection of sensitive data is required not only for legal or ethical reasons but for issues 
MyCERT suggest the below best practices as preventive measures:
1. Do not disclose any personal information including NRIC numbers, bank account numbers, ATM cards, or credit card numbers to an unidentified individual.
2. Do not do any financial transactions before verifying the true identity of the alleged parties.
3. Always check with the organisation implicated by using their official numbers and do not call back any number that was given by the perpetrators during the call.
4. Do not panic or simply follow the instructions given by the perpetrators. Users are advised to remain calm and disconnect such calls immediately.
5. Contact the **National Scam Response Center (NSRC)** via dialling the hotline number at **997** (Operating Hours: 8 am - 8 pm).
6. File a report to [Jabatan Data Perlindungan Peribadi, JPDP](https://www.pdp.gov.my/jpdpv2/), if users receive such calls asking for their personal information, at:
Jabatan Data Perlindungan Peribadi
Aras 6, Kompleks Kementerian Komunikasi dan Multimedia
Lot 4G9, Persiaran Perdana, Presint 4 Pusat Pentadbiran Kerajaan Persekutuan
62100 Putrajaya, Malaysia. 
Telephone : 03-8000 8000
Fax : 03-8911 7959
Email : aduan[at]pdp[dot]gov[dot]my
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours)  
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
<https://www.mycert.org.my/portal/advisory?id=MA-821.102021>