Scammers exploit RCS and iMessage as SMS hyperlink curbs take effect

Fraudsters in Malaysia are increasingly turning to Rich Communication Services (RCS) and iMessage to conduct online scams, according to warnings from the Malaysian Communications and Multimedia Commission (MCMC). The shift represents an adaptation by criminals responding to new restrictions on hyperlinks embedded in SMS messages, which have made traditional text-based fraud more difficult to execute.

The MCMC has detected a notable uptick in scam attempts using alternative messaging services, which offer richer media capabilities and broader reach than standard SMS. RCS, which provides enhanced messaging features similar to WhatsApp, and Apple's iMessage platform are increasingly being weaponized by scammers to distribute malicious links and fraudulent content to unsuspecting users.

The migration to these alternative channels highlights the cat-and-mouse dynamic between regulators and cybercriminals. While the hyperlink restrictions on SMS have proven effective in reducing one vector of attack, scammers have quickly identified and exploited loopholes in less-regulated messaging platforms. Authorities have urged Malaysians to remain vigilant across all digital communication channels and to exercise caution when receiving unsolicited messages containing links from unknown senders.

The MCMC has indicated that it is working with telecommunications providers and technology companies to implement additional safeguards across messaging platforms. Consumers are advised to verify requests for personal or financial information through official channels and to report suspicious messages to relevant authorities.