The Bank Says You Authorised It
Your bank believes you approved the transfer, but you say a scammer tricked you.
Updated 2026-09-29 · Independent resource. Legal review pending.
Why the bank calls it “authorised”
Banks classify a transaction as authorised when it was completed using your genuine login, PIN, or one-time password, even if you were deceived into providing it or approving it. This is different from a transaction made without any action from you at all.
This distinction matters for how the bank investigates, but it does not automatically mean the loss was your fault. Many scams are built specifically to get a real approval out of you.
This can feel unfair when you were clearly deceived from the start. Understanding the bank’s terminology still helps, since it lets you frame your dispute in a way the investigation process responds to. That is more useful than arguing against a label the bank is unlikely to change.
How deception fits into an “authorised” transfer
If a call, message, or fake app convinced you to enter your details, confirm a transfer, or approve a login, the deception is the core of the case. It is not a side note. Describe exactly what you were told and shown at each step.
Common tactics include a caller posing as bank security staff, a fake app that mirrors your banking app, or a message with a link to a fraudulent login page. The page is designed to look convincing while it captures your details.
This is common in account takeover cases, where the scammer walks the victim through steps that look routine, such as a “security verification” that is actually an approval.
Building a stronger dispute
Write a clear timeline: what the caller or message said, what you were asked to do, and when you realised something was wrong. Attach screenshots, call logs, or messages that show the deception, not just the transaction itself.
Submit this formally through your bank’s dispute or fraud process, and ask for written confirmation that your complaint has been logged.
If you have the caller’s phone number, the fake app’s name, or the website address used, include these details specifically, since they can sometimes be matched to other reported cases.
Escalating if the first answer is no
If the bank rejects the dispute, ask for the reasons in writing and escalate through the bank’s formal complaint channel. Unresolved eligible disputes can go to the Ombudsman for Financial Services for an independent review.
Ask specifically what evidence the bank considered and what would change the outcome, rather than accepting a general rejection. A specific question often produces a more detailed response.
What to do next
Keep a police report on file, since it supports both the bank dispute and any later steps. If the amount is significant, an honest view of whether legal action is worth it can help you weigh what comes after the bank process.
Your bank dispute and any police report can proceed in parallel, since each serves a different purpose and neither needs to wait for the other to conclude.
If your bank says you authorised a transfer that a scammer actually tricked you into, tell us what happened and we will help you see the realistic next step.
Common questions
What does it mean when a bank says a transaction was authorised?
It means the transfer was approved using your correct login, PIN, or one-time password, which the bank treats differently from a transaction made without your knowledge at all. Being tricked into approving it is a different situation from never touching the app.
Can I still dispute a transfer I technically approved myself?
Yes, if you were deceived into approving it, such as through a fake call, message, or app that led you to enter your details or confirm a transfer. Explain clearly how the deception worked, not just that you regret it.
What if the bank rejects my first complaint?
You can escalate through the bank's formal complaint process and, if unresolved, to the Ombudsman for Financial Services for eligible disputes. Keep every message and reference number from each stage of your complaint.
Read next
Account takeover: taking back control
If someone else has control of your bank app or email, here is how to contain the damage and start a dispute, without carrying the blame alone.
Read thisHow to escalate a bank complaint
If your bank has not resolved a scam-related complaint, here is how to escalate to Bank Negara Malaysia and the Ombudsman for Financial Services.
Read thisAccount takeover
Account takeover is when a scammer gains full unauthorised control of your bank, email, or social media account using stolen access.
Read thisHow a bank recall can help
If you sent money to a scam by bank transfer, here is how a bank recall and a hold on the receiving account work, and how fast to act.
Read thisIf your bank says you authorised a transfer that a scammer actually tricked you into, tell us what happened and we will help you see the realistic next step.