Sent money to the wrong DuitNow ID? What to do next

Before you panic: what has actually happened

A DuitNow Transfer is instant. PayNet, which runs the service, states plainly that the funds are transferred instantly and credited to the recipient's account. There is no holding period in the middle where the payment sits and waits for you to change your mind.

So the money is now sitting in an account belonging to a real person or business. That is a different situation from a failed payment, and it shapes everything below. Your goal in the next few minutes is not to reverse the transfer yourself — you can't. It is to report it quickly and to preserve proof.

Step 1: Screenshot everything, right now

Before you close the app, capture the receipt screen. You want the reference number, the exact date and time, the amount, the DuitNow ID you keyed in, and the recipient name the app displayed. Screenshot the transaction history entry too.

Do this first, before making any calls. Apps get updated, sessions time out, and you will be asked for these details by whoever handles your case. Having them ready turns a long phone call into a short one.

Step 2: Work out which problem you have

These two situations look similar and are handled completely differently. Check properly first.

A transfer mistake

You authorised the payment yourself. You approved it with your own PIN, TAC or biometric. The only thing wrong is the destination — wrong digit in the phone number, wrong saved recipient, wrong NRIC. Nobody deceived you.

An unauthorised or scam transaction

Money left your account without your knowledge, or someone talked you into sending it — a fake seller, a fake officer, a fake investment, a link you shouldn't have clicked. The National Anti-Financial Crime Centre describes the 997 hotline as an emergency line for victims who realise money has been transferred out of their account without their knowledge. It is not a general complaints line.

If your situation is the second one, stop reading here and follow the scam route instead. Bank Negara Malaysia's guidance for scam victims is to immediately call your bank's scam hotline or the NSRC at 997, and lodge a police report. Our scams section covers that path in detail.

If it is the first one — an honest mistake — carry on to Step 3. Calling 997 about your own typo will not help you and takes an emergency line away from someone who needs it.

Step 3: Call your bank or e-wallet, using an official number

PayNet's own guidance for a wrong DuitNow ID is direct: contact your bank immediately for assistance. That is the correct first call, and the sooner the better.

Use the number printed on the back of your card, or the one inside your banking app. Don't search for a hotline on social media or click a number from a search advertisement — fake "bank support" numbers are a known trap, and someone who has just lost money is exactly who they are looking for.

When you get through, ask three things clearly:

• What is my case or reference number for this report?
• What will the bank do next, and by when should I expect to hear back?
• Do I need to lodge a police report for you to proceed?

Write down the case number, the officer's name and the time of the call. If the process runs long, that record is what keeps it moving. Each bank runs its own recovery procedure, so what your friend experienced at their bank may not match yours.

Why "instant" does not mean "instantly reversible"

This is the part people find hardest to accept. Once the money reaches a valid account, it belongs, on the face of it, to that account holder. Your bank cannot simply reach in and pull it back out.

Banks say so themselves. CIMB's published customer FAQ states that where funds have been transferred to a valid but wrong account number, the money will not be returned. Other institutions may word it differently or attempt to contact the receiving side on your behalf — but no Malaysian bank guarantees recovery of a payment you authorised correctly to the wrong person.

In practice, getting the money back usually depends on the person who received it agreeing to send it back. That is a request, not a button. Report it anyway and report it fast: a cooperative recipient, or an account that is dormant or already flagged, gives your bank something to work with. Just go in with realistic expectations rather than a promise nobody made you.

An illustrative example

Illustrative only. The following is a made-up example to show how the steps fit together. It is not a real case and not a prediction of what will happen to you.

Aisyah means to send RM450 to her contractor at 012-345 6789. She keys 012-345 6798 by mistake. The app shows a registered name she doesn't recognise, but she is rushing between meetings and taps confirm without reading it.

Two minutes later she notices. She screenshots the receipt, opens her banking app, and calls the hotline listed inside it. She reports the wrong transfer, gives the reference number and time, and gets a case number. The officer explains the bank will attempt to contact the receiving bank, that the recipient's cooperation is needed, and that there is no guaranteed outcome.

The lesson sitting inside that example is the name check. PayNet notes that the Name Enquiry feature exists precisely to reduce these errors by showing the registered name before you transfer. It only works if you actually read it.

Don't let a mistake turn into a scam

Within hours of posting about a lost transfer online, people often receive messages from accounts offering to "recover" the funds for a fee, or claiming to be from the bank or the authorities. This is a second scam aimed at someone already shaken.

Two rules make it simple. The NFCC states that the NSRC, PDRM, BNM and banking institutions will only contact you if you have already lodged a report with them — and that they will never ask for your username, password, PIN, TAC or OTP. Anyone who breaks either rule is not who they claim to be, no matter how official the caller ID looks.

Nobody legitimate charges you an upfront fee to recover your own money. See our scams guide for how these approaches are usually worded.

If your bank's response goes nowhere

If you are unhappy with how your case has been handled, the next step is your bank's own complaints unit rather than the phone hotline. The NFCC points consumers to Bank Negara Malaysia's financial service provider directory, at bnm.gov.my/regulations/fsp-directory, for the complaint-unit contact details of each institution.

Keep every case number, date and name from your earlier calls. A complaint with a clear timeline is treated differently from one without.