As cybercriminals continue to evolve their tactics, phishing scams are becoming increasingly sophisticated and emotionally manipulative. One alarming trend involves attackers targeting vulnerable groups, including expectant mothers, by disguising scams as government financial assistance programs. A recent case in Malaysia revealed how fake maternity aid offers circulated on social media were actually designed to hijack victims’ Telegram accounts. This incident serves as an important reminder that phishing scams are no longer limited to suspicious emails, but now spread rapidly through platforms people use every day.
A phishing scam is a type of cybercrime where attackers pretend to be trusted individuals, organizations, or government institutions to trick victims into sharing sensitive information. This information may include passwords, banking details, verification codes, identity documents, or access to personal online accounts. The main goal of a phishing scam is usually to steal data, hijack accounts, or commit financial fraud.
In the past, phishing scams were mostly spread through email. However, cybercriminals now use many other channels such as social media platforms, messaging apps, SMS messages, fake websites, voice calls, and even AI-generated videos or images. In this case, scammers used TikTok posts and WhatsApp conversations to convince victims that they were eligible for fake government financial assistance.
Read: Types and Examples of Phishing Emails Commonly Used by Scammers
In this incident, scammers targeted expectant mothers by spreading fake maternity financial aid offers through social media platforms such as TikTok and WhatsApp. The scam falsely claimed that the Malaysian federal government was offering 500 ringgit in financial assistance to pregnant women and mothers who had recently given birth.
To make the campaign appear legitimate, the posts used official-looking government symbols, references to the “Malaysia Madani” initiative, and even impersonated healthcare professionals. However, investigations later confirmed that the aid program did not exist and was actually designed to steal victims’ Telegram accounts. The fraudulent posts included several elements intended to gain public trust, such as:
Victims were instructed to contact a WhatsApp number supposedly managed by a doctor named “Dr Faizan Irda Atty.” However, checks on the Malaysia Medical Council registry found no registered doctor by that name. Once victims contacted the number, the scammers requested their Telegram phone number, claiming that Telegram was the only platform through which applications could be processed.
After receiving the victim’s number, the attackers triggered a Telegram verification code request and asked victims to share the code with them. In reality, the verification code was the main target of the phishing operation. By obtaining the code, attackers could hijack the victim’s Telegram account and use it for various cybercrimes, including:
Cybercriminals often focus on emotionally vulnerable groups because they are more likely to react quickly without thoroughly verifying information. Expectant mothers may become ideal targets because:
Attackers understand human psychology very well. Instead of relying solely on technical hacking methods, many phishing scams now focus on manipulating emotions such as urgency, hope, fear, or compassion. This strategy is commonly known as social engineering.
Social media platforms have become powerful tools for cybercriminals because they allow scams to spread rapidly to large audiences. In this case, TikTok was used to distribute misleading information through short videos and posts. The content appeared authentic because it contained:
Many users tend to trust information shared repeatedly on social media, especially when it appears connected to government programs or healthcare services. Unfortunately, cybercriminals exploit this trust. Modern phishing scams on social media may involve:
Because these scams often appear visually convincing, users may not immediately recognize the warning signs.
Phishing scams often contain warning signs that can help users recognize suspicious activity before becoming victims. Understanding these red flags is important because modern scams are designed to look highly convincing, especially when they involve financial assistance or government-related programs.
By recognizing these warning signs early, users can significantly reduce the risk of becoming victims of phishing scams. Staying cautious, verifying information carefully, and avoiding emotional decisions are essential steps in protecting personal accounts and sensitive information online.
Malaysian authorities have previously warned citizens about phishing scams involving Telegram account hijacking. Law enforcement agencies explained that stolen Telegram accounts are often reused in broader cybercrime activities such as online fraud, fake investments, romance scams, financial extortion, and identity theft. Authorities also stressed that public awareness plays an important role in preventing these attacks from spreading further.
Meanwhile, Malaysia’s finance ministry confirmed that no federal maternity aid scheme existed and clarified that the viral TikTok posts were misleading. Citizens were advised to rely only on official government websites and verified communication channels when seeking information about financial assistance programs. The incident also shows how quickly misinformation can spread online, especially when combined with emotionally appealing narratives.
Protecting yourself from a phishing scam requires both awareness and caution. As cybercriminals continue using more convincing tactics through social media, messaging apps, and fake financial aid offers, users must become more careful when sharing personal information online.
By following these cybersecurity practices, users can better protect themselves from phishing scams and other online threats. Staying vigilant, verifying information carefully, and avoiding rushed decisions are essential steps in maintaining digital security in today’s increasingly connected world.
Read: Social Engineering and Phishing: Scams You Need to Know About
The fake maternity assistance campaign in Malaysia shows how modern phishing scam operations exploit trust, emotion, and social media to target vulnerable individuals. By impersonating government programs and healthcare professionals, cybercriminals attempted to hijack Telegram accounts and spread further cybercrime activities. As phishing scams become more sophisticated, public awareness remains one of the most important defenses. Users should always verify suspicious offers, avoid sharing verification codes, and rely on official sources before providing personal information online.