How to Avoid Online L.O Scams, Report NSRC and Police Report -Scammers Target Malaysian Business Owners Using Fake Government Local Orders (LOs)

Author: Kyzson

Hmmm... this is a topic I never thought I would share in my lifetime, but hey, I guess some incidents are powerful enough to make you do things you never expected.

So, what happened?
​
Let's dive into the story of how it all began. (Grab your popcorn 🍿.) The following is based on my police report statement and the events that led up to one of the most valuable lessons I've learned as a business owner.

---

What is L.O Local Order in business term or meaning?

In business, LO most commonly stands for Local Order or Line of Business. Depends on whether you are dealing with corporate purchasing, finance, organizational structure or government.

In procurement and government contracting (particularly in Malaysia and other Commonwealth countries), a Local Order is an official document issued by an agency or organization to a supplier / vendor.

---

Our Scam's Police Report

Pada 15 Mei 2026, saya telah dihubungi oleh seorang individu bernama Encik Azizudin (99% Fake Name) (No. Telefon: 011-18758353) yang mendakwa berasal dari Jabatan Penerangan Negeri bagi mendapatkan sebut harga penyewaan LED Screen berukuran 7 meter x 4 meter. Beliau telah memberikan maklumat lokasi, maklumat saiz pentas serta tarikh pemasangan yang dijadualkan pada 1 Jun 2026 jam 10.00 pagi (PUBLIC HOLIDAY).
​
Pada 1 Jun 2026, saya bersama pekerja2 telah hadir ke lokasi yang diberikan, iaitu di alamat Jabatan Penerangan Putrajaya, 14, 14G9 Persiaran Perdana, Presint 4, 62100 Putrajaya. Namun, setelah tiba di lokasi, kami mendapati tiada pegawai atau wakil yang bertanggungjawab berada di tempat tersebut dan bila kami tanya sekurity guard sana, dia ka tiada sebarang pengawai ygn bernama Azzizudin bertugas di sini. Pihak syarikat kami telah beberapa kali cuba menghubungi Encik Azizudin, namun tiada sebarang jawapan diterima selama 2 hari.

Pada 3 Jun 2026, Encik Azizudin telah menghantar SMS kepada saya dengan alasan terdapat masalah komunikasi dah Public holiday. Pada ketika itu, saya tidak mengesyaki sebarang perkara yang mencurigakan kerana beranggapan kemungkinan beliau bercuti atau tidak dapat menjawab panggilan telefon atas urusan kerluarga atau telefon di letak tepi waktu tak bertugas.

Seterusnya, dalam proses menjadualkan semula tarikh pemasangan baru, beliau telah mengeluarkan Local Order (L.O.) baharu bernilai RM32,000 (Tambahan Charge Overtime atas kehadiran Krew pada 1hb Jun). Pada ketika itu, syarikat kami masih belum mengalami sebarang kerugian.

Pada 5 Jun 2026, smasa dalam perancangan untuk melawat lokasi permasangan, secara tiba-tiba Encik Azizudin telah membuat permintaan kecemasan untuk membeli sebuah Power Station bernilai RM12,000. Beliau turut merujuk kepada sebuah syarikat pembekal yang kononnya diiktiraf oleh jabatan beliau. Nama syarikat tersebut ialah MUSADIQ TRADING (SSM No. Pendaftaran: 202603123480 / 003850135-V). Susulan itu, saya terus menghubungi wakil pembekal yang dikenali sebagai Cik Sarinah melalui nombor telefon 014-2842297. Dalam perbincangan tersebut, pihak pembekal telah mengemukakan sebut harga bersama harga cadangan mark-up dan memaklumkan bahawa penghantaran boleh dibuat pada hari berikutnya sekiranya pembayaran RM12,000 dibuat sebelum jam 3.00 petang pada 5 Jun 2026.

Selepas pihak pembekal menghantar invois kepada kami, pada 5 Jun 2026 kira-kira jam 3.22 petang (1522 hrs), syarikat kami telah membuat pemindahan wang sebanyak RM12,000 dari akaun syarikat ketika berada di pejabat THUNDER ADVERTISING yang beralamat di Dataran Mentari, Tingkat 3, Jalan PJS 8/18, Bandar Sunway, 46150 Petaling Jaya, Selangor ke akaun OCBC Bank (Malaysia) Berhad No. 7051413253 atas nama MUSADIQ TRADING.

Kira-kira satu jam kemudian, Encik Azizudin sekali lagi menghubungi saya dan membuat permintaan tambahan untuk membeli dua (2) unit lagi POWER STATION dengan nilai keseluruhan RM22,000 (FUIYOHHH). Selepas menerima permintaan yang bersifat tergesa-gesa tersebut, saya mula berasa curiga dan mengesyaki bahawa Local Order (L.O.) yang diberikan itu agak mencurigakan. Saya kemudiannya menjalankan semakan bersama CFO saya dengan membandingkan dokumen tersebut dengan beberapa L.O. yang pernah diterima oleh syarikat kami daripada projek-projek terdahulu.

Hasil semakan tersebut, kami mengesyaki bahawa kami kemungkinan besar telah menjadi mangsa penipuan (scam) dan syarikat kami mengalami kerugian sebanyak RM12,400 termasuk kos berkaitan.
​
​Sekian, Harap Maklum

---

Let's Play A Game - Which one is Original L.O?
<< ​LEFT or RIGHT >>

Comment Below

---

Did you learn something now? If NO, let me breakdown... (Based on my Experience)

Step-by-Step Breakdown, How These Scammers Operate​

1. The scammer / syndicate of normally 2 to 5 people or more will do some research before contacts a representative (me) of the targeted company/victim and places an order. The request is usually urgent last minute, coming soon date usually with in a week which the event date is very near.
2. A Local Order (LO) or Purchase Order (PO) is then issued to the targeted (Us) company after they "approved" our Quotation. The document appears official, complete with a company letterhead, stamp, and/or authorized signature.​
3. The document looks legitimate and there are no obvious signs of suspicious activity. The scammer also communicates professionally, soft spoken and convincingly.
4. However! The LO or PO is merely bait and the initial trap for bigger "FISH".
5. The scammer then will inquires about gift packages, hampers and for our case is POWER STATION, claiming that they wish to add an urgent last-minute order.
6. Honestly, Most SME companies are unable to fulfill such requests due to time constraints, capital reserve or lack of expertise in supplying those items.
7. The scammer will then recommend a supplier that they claim to have used before, affordable option, one that is supposedly recognized and approved by their organization. The targeted company is encouraged to deal directly with this supplier. In reality, this is a MULE Company controlled by the scammer / syndicate.
8. If you want to meet them in person, they will come up with excuses such as not having made an appointment, being in the middle of an audit, being outstation, or attending a meeting—anything to avoid a face-to-face confrontation.
9. So, is where the financial transaction takes place. The mule company also issues an official-looking QUOTATION, making the transaction appear legitimate, with SSM Registered with Official Bank Account Details (No Company would dumb enough to transfer Huge amount Money to Individual Account right? How about Company Account, surely more legit right?!). The targeted company then transfers payment to the mule company to fulfill the urgent order.
10. Additional urgent orders may continue to be added once the victim is trapped, resulting in further payments being made by the victim.
11. When the Targeted company come to realize the unable to contact the both Customer and supplier, and conclude its a fraud... then the victim realizes they have been scammed. GG and FACEPALM!

---

What to do if you get scammed? Sources >> ​https://www.facebook.com/seccommalaysia

What to Do If You Suspect You've Been Scammed​?

* Bear in mind that making these reports and notifying the bank does not guarantee that you will recover your money. However, your report will be recorded for investigation purposes and may serve as a valuable reference for public awareness and scam statistics.

​1. Call your bank's emergency hotline.

• Report the unauthorized transfer or payment.
• Request the bank to:
• Freeze your account if necessary.
• Trace the transaction.
• Attempt a fund recovery.
• Flag the recipient account for investigation.

2. Report to the National Scam Response Centre (NSRC)

Call 997 immediately - WEBSITE >>
The NSRC coordinates with banks, police, and financial institutions to help freeze scam-related accounts and recover funds when possible.

3. Make a Police Report & Collect Evidences

​Report the scam at your Nearest Police Station or through the official police reporting channels.

Report the WhatsApp / Telegram / Facebook or any online conversation that you engaged.
What to do in Account: 

• Open the chat.
• Tap the contact name.
• Scroll down and select Report.
• Block the number.

Save and Preserve All Evidence!
Do not delete:

• WhatsApp conversations.
• Images and documents.
• Voice messages.
• Call logs.
• Bank transaction records.
• Email correspondence.
• ​

​Check for Additional Exposure
If you shared:

• Bank account details
• Online banking credentials
• OTP codes
• Credit card information
• Company documents

​4. Inform Your Business Team or Family Member

If the scam involved your company:

• Notify management and finance staff.
• Alert procurement and sales teams.
• Inform business partners or family member who may also be targeted. 

---

Note: Don't bother call their Tel: 603-89113440, I called everyday from 3rd Jun to clarify is Mr Azziz a staff there yet until today (6th Jun) during working how, not a single fly answer the call.

Continue... To make the incident even more intriguing,

Pada 6 Jun all 3 of the scammers' contact numbers still had not blocked me. They continued replying to my messages and were still expecting me to meet them at the setup venue and deliver the POWER BLOODY STATION. Although I strongly doubted that Encik Azizudin would actually show up, a small part of me still hoped 1% that the case might be genuine.

Out of curiosity, and holding onto that remaining 1% hope that it was not a scam, I decided to travel to Putrajaya to verify the situation once more with the security personnel at the venue.

Guess what happened?

The security guard, along with two police officers who arrived shortly after, informed me that earlier that same morning, around 5:00 AM, another 2 suppliers had come looking for Encik Azizudin as well, showing same profile picture and numbers.

Yes, the rest is history.

What we learned from this experience is a valuable lesson about how sophisticated and adaptable scammers have become. They scrape information from your website, use AI to create convincing images and documents, replicate official-looking paperwork, develop carefully planned scripts, and patiently wait for the right opportunity. They study your business, learn your industry's terminology, and communicate in a way that builds trust and credibility.
More importantly, they exploit psychology. They identify weaknesses, create urgency, and manipulate emotions. The moment you let your guard down, they strike like cobra snake.

This experience serves as a reminder that in today's digital world, vigilance is not optional - it is essential.

---

My Final Take and 2Cents

it takes me 1 day+ to digest my anger, confusion, disappointment and guilt toward myself for letting down my company and business partner and along the way I try not to linger around the negative feeling because getting the money back might not happen depend how is the investigation result and how the bank resolve this fraud case. 

I just take my time to swallow this mistake and write this post to digest my discomfort and hoping this post able to reach for those still not KENA yet into this scams (hope you wont experience at all ofcause). I take my pride to see this as a learning curve not to easy let my guard down eventho in the past we never "KENA" before and thinking it will not happen, and I lucky enough compare to other victims that fell into more serios lost from hundred thousand to million, we consider "lucky"?

So What you will definitely gain is a lesson that teaches you to be more cautious in the future and helps you warn those around you to be more vigilant as well.