Hit reset for 2026 – Turn digital habits into your strongest firewall

by Philip Ling, Head of Sustainability

Scams today don't hack systems, they hack trust. Malaysians paid RM5.62 billion for that lesson between 2023 and 2025.

What's most alarming? More than 95% of these losses reportedly came from authorised transactions. People have unknowingly approved the scam transactions via One-Time Passwords (OTPs), multi-factor authentication (MFA), and account confirmations.

Precisely because these split-second clicks have become blind spots, is why we need to immediately hit reset! Scammers know that advanced laws, innovative technology and robust security have raised the bar against their schemes, so they turn to exploit human habits. We must pair strong infrastructure with a more conscious, deliberate and mature digital behaviour to create a powerful defence.

What does "reset" means?

A digital reset simply means reviewing the essentials and tightening what matters, from your privacy and security settings to app permissions and adopting the right practice when using technology and going online. Take small, deliberate steps. Behavioural research shows that breaking actions into daily chunks makes change stick. So, here's a Digital Reset Toolkit that lays out a practical seven-day plan that can build a strong defence and safeguard you online.

Your 7-Day Digital Reset Starter Kit ‍

• Day 1: Enable MFA - start here because MFA is the strongest shield - blocking up to 99% of account hacks. Add it to banking, email and social accounts.

• Day 2: Review privacy settings & app permissions - reduce exposure by limiting what apps and platforms can access. Apps don't need access to everything - ask if access to contacts, photos, or location is necessary. Remove unused apps and tighten social media privacy controls.

• Day 3: Turn on transaction & login alerts - real-time alerts help you catch suspicious activity fast. Activate notifications in your banking and e-wallet apps to stay ahead of fraud.

• Day 4: Clean-up SMSes & emails - stop clicking any links in SMS - MCMC has banned all URLs in SMS. Unsubscribe from non-essential emails. Delete old messages with sensitive information threads that be risky if your device or account is compromised.

• Day 5: Install anti-phishing tools - add browser extensions or security apps that flag fake sites and malicious links. This extra layer protects you while browsing or transacting online. There are trusted free options available for use.

• Day 6: Audit your digital footprint - review your online presence and what the world sees about you. From your social media profiles, old posts and information you have made public. Delete outdated or any sensitive contents, remove any details that expose your personal and family details. Oversharing gives scammers clues they can use for social engineering and identity theft.

• Day 7: Be kind & conscientious online - be mindful of what you do and how you interact online. Be respectful and empathetic and build trust online. Share responsibly and verify information before posting. Strengthen personal safety and help others be safe and responsible digital citizens.

What to do if you suspect or encounter a scam?
While resetting digital habits is a powerful defence, taking the right steps immediately in the first hour can limit losses:

• Freeze your account - contact your bank's emergency hotline or use the banking apps to report and stop further transactions. Under updated procedures, banks and police can restrict suspect accounts and even seize mule accounts to halt the money flow.

• Call 997 - it's the hotline of the National Scam Response Centre (NSRC), which operates 24/7 and connects you to police, Bank Negara Malaysia, MCMC, banks and telcos. Inform NSRC to log the case in the National Fraud Portal. This helps reduce fund-tracing time.

• File a police report - Ensure that you share as much evidence to the police i.e. screenshots of messages, phone number, transaction IDs, suspicious links and communications with scammers.

• Update credentials & MFA - finally secure your accounts. Change passwords for banking, emails, and social platforms. Re-enable your MFA to prevent repeat attacks.

Prevention and quick response can help restore control over your digital life after such an encounter. But the bigger shift that we must make for 2026 is in building a culture of digital mindfulness, where every click is a conscious choice.

Every click, every share, every approval is a choice-and those choices shape trust online. 2026 is the moment to lead with intention. Start with the seven-day reset, share it with your circle, because while technology connects us, it's our behaviour that protects us.

Start 2026 Smart. Let's reset and build a trusted digital society together. Click HERE to download your starter kit.

‍