Fake gaming websites, impersonated support agents and fraudulent payment messages can
expose your account credentials and financial information.
See more
Scammers may copy Kiss918 branding, claim
to offer special bonuses or create urgent account warnings to persuade users to click
unsafe links or transfer money.
Scams using gaming brands often rely on impersonation rather than a technical
failure in the application itself.
Find the situation that matches the message or request you received.
1. Fake Kiss918 WhatsApp or Telegram Agent
How the Scam Works
Someone contacts you using the Kiss918 logo, an agent-style profile name or a
copied support message. They claim to manage your Game ID and ask you to send money
or account details.
Warning signs & what to do
Warning Signs
The contact uses a new or unfamiliar number or username.
They claim your previous support agent has changed without independent
confirmation.
They request a password, OTP or banking login.
They pressure you to act immediately.
What You Should Do
Stop the conversation and verify the contact against an established account
channel or independently authenticated operator information.
Do not trust a profile name or logo as proof of identity.
2. Fake Bonus or Free Credit Offer
How the Scam Works
A message advertises a special deposit bonus, free spins or free credits and
directs you to an unfamiliar claim page.
The page may collect Game ID credentials, request payment or distribute an
unverified app.
Warning signs & what to do
Warning Signs
An unexpected bonus link arrives by direct message.
The offer requires an upfront verification payment.
The website requests your Game ID password.
The promotion cannot be located through an independently confirmed channel.
What You Should Do
Do not use the claim link. Check the exact promotion name and conditions
through a verified account contact.
A large promotional percentage or free-credit claim is not evidence that the
offer is legitimate.
3. Fake Withdrawal Release Fee
How the Scam Works
A person claims your withdrawal has been approved but requires an additional
deposit, tax, account-unlocking fee or security payment before funds can be
released.
Warning signs & what to do
Warning Signs
You must pay more money to access money you already requested.
The supposed release fee is sent to an unfamiliar recipient.
The agent repeatedly introduces new charges after earlier payments.
No verifiable transaction or fee record is provided.
What You Should Do
Do not make an additional payment.
Request the original withdrawal reference and a documented explanation through
the verified account provider.
If funds have already been sent to a suspicious recipient, contact your bank or
e-wallet provider immediately.
4. Fake Kiss918 Login Website
How the Scam Works
A website copies a Kiss918 login screen and asks for a Game ID, password or
verification code.
The site may use a similar-looking domain, altered spelling or deceptive URL.
Warning signs & what to do
Warning Signs
The web address differs from the one independently associated with your
account.
A login link was sent unexpectedly through a message or advertisement.
The page requests banking credentials or OTPs.
The site redirects to another domain without explanation.
What You Should Do
Do not enter credentials. Leave the page and open the verified account channel
independently.
Important: HTTPS and a padlock icon do not establish that a
website is legitimate.
5. Fake Kiss918 APK Update
How the Scam Works
A message claims that you must install a new Kiss918 APK to restore account access,
unlock VIP benefits or complete a withdrawal.
The file may be modified to collect credentials or request sensitive Android
permissions.
Warning signs & what to do
Warning Signs
The APK is sent through an unsolicited message.
Installation instructions require disabling Play Protect.
The application requests unrelated sensitive access.
The publisher or signing identity cannot be verified.
What You Should Do
Do not install the file. Verify the source, file fingerprint and signing
information before treating it as an authentic update.
A person sends replacement bank details or a new QR payment code, claiming the
usual payment channel is undergoing maintenance.
The destination may belong to a scammer rather than the intended recipient.
Warning signs & what to do
Warning Signs
Payment instructions change unexpectedly.
The recipient name differs from the expected payee.
A contact urges you to disregard earlier account information.
The QR code was forwarded without an authenticated source.
What You Should Do
Stop before payment. Confirm the recipient through an independently verified
account channel.
If the transfer has already been made, contact your financial institution
without delay.
8. Fake Account Recovery Service
How the Scam Works
Someone promises to restore a locked or suspended Game ID in exchange for payment,
login credentials or sensitive documents.
Warning signs & what to do
Warning Signs
The person claims to bypass all verification.
Recovery requires an advance transfer.
They request your existing password or OTP.
They cannot establish that they manage the account.
What You Should Do
Use only the recovery process provided by the account operator responsible for
your Game ID.
Do not pay an unfamiliar third party to unlock or restore an account.
How to Verify a Kiss918 WhatsApp or Telegram Agent
WhatsApp and Telegram can be useful account-support channels, but the platform
itself does not verify that a contact represents your operator.
Complete these checks before sharing account information or following payment
instructions.
Agent Verification Checklist
Checks recorded: 0 of
5
Verification incomplete
Check 1: Number or Username
Compare the full phone number or Telegram username with the established contact
information.
A similar display name is not enough.
Check 2: Contact Changes
If someone claims that the account agent's number or payment channel has
changed, confirm the update independently through the original contact or
authenticated account portal.
Check 3: Information Requested
A legitimate account-support process should not require you to disclose your
password, OTP or banking login credentials in a chat.
A request for those details is a reason to stop.
Check 4: Payment Instructions
Confirm the recipient and payment reference through an independently
authenticated channel before making a transfer.
Our Verdict: A logo, chat history screenshot, verified-looking badge
or claim of being an official agent is not sufficient by itself to establish
authenticity.
Spot a Fake Kiss918 Message Before Responding
Scam messages often imitate ordinary customer-service conversations.
Use the examples below to identify requests that should trigger additional
verification.
Suspicious Message: Withdrawal Release Fee
Your withdrawal is approved. Transfer RM150 for security clearance to
release your funds immediately.
Assessment: High Risk
An unexpected upfront payment to release a withdrawal is a major financial-fraud
warning.
Recommended Action: Do not pay. Verify the original withdrawal
request and report the demand.
Suspicious Message: Urgent APK Update
Your Kiss918 account will be blocked in 10 minutes. Install this update
from the attached link.
Assessment: High Risk
The message combines urgency with an unverified installation request.
Recommended Action: Do not open the link. Confirm the app
version and update source independently.
Suspicious Message: Password Verification
Support needs your Game ID password and SMS code to verify your bonus
eligibility.
Assessment: High Risk
A support contact should not request passwords or one-time verification codes.
Recommended Action: End the exchange and report the contact.
Unverified Message: New Support Number
Our previous WhatsApp number is inactive. Use this new number for all
deposits.
Assessment: Unverified — Do Not Proceed
A contact change may be genuine, but the message itself cannot prove that.
Recommended Action: Verify the new contact through an
independently authenticated channel before using it.
What Should a Proper Support Request Look Like?
A legitimate enquiry should identify the issue, use an established contact channel
and request only the information necessary for the relevant process.
For example, an account agent investigating a missing deposit may ask for a Game ID
and redacted transaction reference.
That still does not eliminate the need to authenticate the contact.
Our Verdict: Judge a message by the action it requests and the
evidence supporting the sender's identity—not by its professional wording or
branding.
What to Do If You Already Clicked, Shared or Paid
The correct response depends on what information or access may have been exposed.
Situation A: You Clicked a Suspicious Link
If you opened a suspicious website but did not enter information or download
anything:
Close the page.
Do not grant permissions or install files.
Check whether any downloads were triggered.
Preserve the URL for reporting.
Review the device for unexpected changes.
Priority: Stop further interaction and check for downloads.
Situation B: You Entered Your Game ID
Password
If you submitted your password to a suspicious website:
Stop using the suspicious page.
Change the password through your authenticated account provider.
Request a review of unfamiliar sessions or account changes.
Check for unexpected transactions.
Change reused passwords on other services.
Priority: Protect the account and investigate unauthorised access.
Situation C: You Shared a Banking Password or
OTP
If you disclosed financial login details or a verification code:
Contact the bank immediately through its official fraud hotline.
Request appropriate account protection or transaction restrictions.
Change affected credentials using a trusted device.
Check transaction history for unauthorised activity.
Follow the bank's fraud-reporting procedure.
Priority: Contact the financial institution immediately.
Situation D: You Transferred Money to a Suspicious
Recipient
If you sent funds to a potentially fraudulent bank account or e-wallet:
Contact your financial institution immediately.
Provide the transfer reference, recipient, amount and date.
Request an urgent fraud investigation or transfer-recovery review.
Preserve messages and receipts.
Report the incident to the relevant authorities.
Priority: Financial-fraud reporting comes before routine website
support.
Recovery is not guaranteed. Acting promptly improves the opportunity for
investigation.
Situation E: You Installed a Suspicious APK
If you installed an unverified application:
Stop entering credentials on the device.
Review and revoke suspicious permissions where safe.
Remove the suspicious application.
Run the available device-security checks.
Secure affected accounts using a separate trusted device.
Contact your bank if financial information may have been exposed.
Priority: Contain possible device compromise.
Report a Suspicious Kiss918 Contact or Website
Report suspected fraud directly to the appropriate official
organisation. Do not rely on a gaming website or account agent to make a
report on your behalf.
1
Stop All Communication and Payments
Do not send additional money, share credentials or click further suspicious links.
2
Preserve the Evidence
Save the suspicious messages, contact details, website URLs, receipts and
transaction references.
3
Report Through the Appropriate Official Channel
If you have transferred money to a suspected scammer:
Call your bank immediately and contact the National Scam Response
Centre (NSRC) at 997.
If you need to make an official report:
Lodge a police report with the Royal Malaysia Police (PDRM) as
soon as possible.
If the incident involves suspicious financial activity:
Keep the official case number and follow up with the relevant financial institution
or investigating authority.
Kiss918 Scam & Phishing FAQs
Is a WhatsApp or Telegram account
legitimate because it has a familiar profile photo?
No. Display pictures and account names can be copied. Verify the complete contact
identity independently.
Can a phishing website use
HTTPS?
Yes. HTTPS encrypts the connection but does not establish that the business behind
the website is legitimate.
Should I pay a fee to recover a frozen
account or withdrawal?
Treat an unexpected upfront recovery or release payment as a serious warning. Do
not send money merely because an unfamiliar contact demands it.
Can a scammer use a genuine-looking
receipt?
Yes. Images can be edited or reused. Verify payment status with the bank or
e-wallet rather than relying solely on a screenshot.
Is blocking a suspicious agent enough
after sharing my password?
No. Blocking stops further conversation but does not invalidate credentials already
disclosed. Change the password and request an account-security review.
Can a fake APK steal information even if
it opens normally?
Potentially. A functional login screen or game interface does not establish that
the application is safe.
Will sending more money help recover an
earlier scam payment?
No reliable recovery follows from sending additional funds. Recovery-fee demands
are a common warning sign of further fraud.
