Tag Archives: GrabPay

GrabPay Scam : Don't Link Your Debit Card / Bank Account!

GrabPay Scam : Don’t Link Your Debit Card / Bank Account!

Beware of a new GrabPay scam that can quickly suck your debit cards and bank account dry!

Don’t link your debit card or bank account with GrabPay, and SHARE this warning with your family and friends!


GrabPay Scam Alert : Don’t Link Your Bank Account!

On 16 May 2020, Muhammad Syahir recounted how he was cheated of almost RM 900 through a GrayPay scam. Here is a brief summary of what happened :

  • The scammer created a new Instagram account, pretending to be the victim’s friend.
  • He messaged the victim asking for his phone number.
  • After receiving the victim’s phone number, he messaged him through Instagram to tell him about the GrabPay 8th Anniversary Campaign.
  • The victim was asked to look out for a GrabPay code, which would reveal what he won.

  • After sending the GrabPay code (not a TAC code) to the scammer, the victim saw RM 425 being debited into his GrabPay account. Unbeknownst to him, that money was from his own bank account!
  • A few minutes later, the victim received a notification that the RM 425 was paid to UNIPIN (M) SDN. BHD.
  • The scammer messaged him again on Instagram, asking for a second code that was sent to the victim.
  • The victim then received another notification from GrabPay stating that another RM 425 was paid to UNIPIN (M) SDN. BHD.
  • After that, the scammer blocked the victim on Instagram. That was when the victim got suspicious.
  • When the victim checked his bank account, he discovered that he lost RM 896.30 to the scammer.
  • In total, the scammer made 5 withdrawals through GrabPay – four from his debit card, and one from his bank account.

Another person – Patrick Saw – also fell for the same GrabPay scam, losing RM 405.


GrabPay Scam Alert : GrabPay Flaws?

Muhammad Syahir highlighted what he felt were major flaws with GrabPay :

  1. GrabPay allows credit / debit card transactions without CVV verification or OTP from the bank.
  2. GrabPay will not notify you about any first-time login attempt of a different gadget in a different location.
  3. GrabPay does not require users to set-up a secured PIN for any big transactions – e.g. more than RM100.
  4. If your bank account is linked to your GrabPay e-wallet, there won’t be any SMS notification for bank transfers to your e-wallet.

According to his experience, the scammer only needed to use the Grab Activation Code to withdraw money from all bank accounts / debit cards linked to your GrabPay app.


GrabPay Scam Alert : How To Avoid It?

To avoid falling prey to such a scam, here is what you should do :

  • NEVER accept a friendship request from a new social media account, until you have verified with your friend (through a phone call or face-to-face) that he/she created that new account.
  • NEVER send any code you receive to anyone. Even if it is a friend, why does he/she need the code that was sent to YOU?
  • Businesses will never give away free money for anniversaries. Don’t fall for such an old trick!
  • NEVER link your debit card or bank account to an e-wallet. Only link a credit card, because they are insured and protected against fraud. If you get scammed, you can call the bank to ask for a refund.


GrabPay Scam Alert : Original Post + Police Report

Here was what Muhammad Syahir posted earlier, together with his police report :

It happened to me last night and I have lost almost RM1K in a few minutes via Grab Pay.

The incident happened when one of my close friends re-created a new Instagram account and requested to follow me. He messaged me and asked for my phone number via Instagram message. Without any doubt, I gave him my phone number, knowing that he probably has lost my phone number.

He posted a few photos to his newly-created Instagram account so it does not look like a phishing account.

After that, he sent another message to me about GrabPay 8th year special campaign. He was telling me that I will send a message with a code to your phone and please let me know the code and I will see what you have won.

Grab Activation Code was sent to my phone number. It was an activation code not TAC code. I gave the activation code to him without any doubt because I know that he is my friend. Also, I was thinking of this is just an activation code, it has nothing to do with my bank accounts.

The tricks started here. I saw RM425 was debited to my GrabPay account and I did not know that it was from my bank account which was linked to the GrabPay account. After a few minutes, I received a new notification from the GrabPay that RM425 was paid to UNIPIN (M) SDN BHD.

The scammer then messaged me again on Instagram. Another activation code was sent to your phone, please let me know the code. Then, I have received another notification from GrabPay that another RM425 was paid to UNIPIN (M) SDN BHD.

When I was about to reply him a message, he blocked me up. That was the time that I know something fishy has happened. When I checked my Maybank2u, I have lost a total amount of RM896.30 from my bank account. The scammer has cleared all the money in my bank account and left RM60 balance to my GrabPay.

The scammer did a total of 5 transactions as you can see from my GrabPay activity picture below. 4 transactions were made directly via debit card which is linked to my GrabPay account and 1 transaction was made via Maybank2u. The scammer even managed to access my Maybank2u account from the GrabPay account.

It happened to me in a blink of an eye where you were blinded by this scammer who cat fished your close friend to do this scam.

On top of that, let me highlight the flaws of the GrabPay app:

1) Grab allows credit/debit card transaction without the bank’s authorization OTP and also the CVV verification.
2) Grab does not notify the user via email for any first-time login attempts of different gadgets in different location.
3) Upon registering this app for the past few years, Grab did not put a clause for the users to mandatorily set up their secured pin for any big transactions that are more than RM100.
4) Your bank account that is linked to your GrabPay will not notify you via sms for any debit transaction from the bank to the GrabPay.

*The scammer just need the Grab Activation Code and he can take all the money from your linked bank accounts on the Grab app. Such a flaw app!

Please be aware of this scam and help me to share this news. I have also tag a person who has faced the same case last week. You may also check on his Facebook profile. Patrick Saw has lost RM405 from the scammer who has approached him the same way as mine.


Recommended Reading

Go Back To > Cybersecurity | SoftwareHome


Support Tech ARP!

If you like our work, you can help support our work by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Exclusive Tour Of New Grab Regional Centre of Excellence!

Grab just launched their new Regional Centre off Excellence in Malaysia! With it came the rare opportunity to check out the new office space, so join us for our exclusive tour of the new Grab Regional Centre of Excellence!


The New Grab Regional Centre of Excellence

Officiated by YB Datuk Ignatius Darell Leiking, the Minister of International Trade and Industry, the 54,000 square feet Grab Regional Centre of Excellence will house their core business strategy and operational functions, including legal, customer experience, financial services as well as creative services.

This Grab Regional Centre of Excellence follows the launch of Grab’s 7th R&D Centre, which would jointly create at least 400 new high-value jobs. This would bring their total employee count to 1,000.

The Grab Regional Centre of Excellence Team

The legal team will provide advice on regulatory, policy and legal issues that impact the entire region; while the customer experience team will provide quality customer support for several countries.

The creative and design team will develop  creative assets for regional marketing campaigns and projects; and the financial services team will implement financial, procurement and risk management policies across all countries where Grab operate in the region.

The Grab R&D Team

The tech and engineering team in Malaysia’s R&D Centre will focus on building trust and safety solutions and capabilities that not only solve safety issues for citizens in Malaysia, but also across the whole of Southeast Asia.


Exclusive Tour Of The Grab Regional Centre of Excellence

The Grab Regional Centre of Excellence spans two floors, with a combined floor space of 54,000 square feet. Let’s check out what it looks like on the main floor.


Recommended Reading

[adrotate group=”2″]

Go Back To > Business + Enterprise | Home


Support Tech ARP!

If you like our work, you can help support our work by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

The Future Of Grab – An Everyday App For Consumers

Grab today unveiled The Future of Grab – their vision of a future of seamless mobility, on-demand food delivery, logistics, cashless payments and financial services – all within their mobile app. Here are the full details!


The Future Of Grab – An Everyday App For Consumers

After hitting their 1 billion ride milestone across Southeast Asia, they surveyed 500 of their customers. A majority responded that they wanted an everyday app that would complement their daily lives. Six months later, Grab is ready to share their vision of the future in this video :

Here is a summary of the services that will be forthcoming :


Grab will focus on serving the first- and last-mile needs of a multi-modal transportation system in the future. Consumers will be able to mix and match different transportation option, based on their travel preferences and budget.

With better integration of public and private transportation options in one platform, consumers can ride and pay for multiple modes of transportation through the Grab app. For example, they will be able to take an on-demand shuttle bus to the MRT, and finally take a JustGrab taxi to their final destination – arranged and paid through the app.


GrabPay will see expanded use as a mobile wallet, with consumers enjoying the benefits of going cashless, while accumulating benefits through GrabRewards. GrabPay and GrabRewards will also become revenue drivers for micro-entrepreneurs and small businesses.

[adrotate group=”2″]

Financial Services

Their fintech offerings will create new economic opportunities for unbanked and underbanked consumers, drivers and small businesses across Southeast Asia. Grab plans to add another 100 million micro-entrepreneurs by 2020.


The future will see most of a consumer’s daily needs for on-demand transportation, food and delivery fulfilled by a single app.


The Future Of Grab Starts Soon

Consumers in Malaysia will soon be able to start seeing the Future of Grab materialise with GrabFood and GrabPay.

GrabFood is currently being beta-tested, and will be formally launched at the end of May 2018. It will allow consumers to order and pay for their food to be delivered to their doorsteps, while enjoying GrabRewards points for every order.

Grab will also expand the use of GrabPay beyond transportation and food, turning it into a mobile wallet for use with traditional, cash-based merchants in coming months.

Go Back To > Enterprise & Business | Home


Support Tech ARP!

If you like our work, you can help support our work by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!