A man aged 38 to 39 in Teluk Intan, Perak, Malaysia found his crypto assets drained in broad daylight. The victim discovered the loss of RM12.47 million, or about $3.05 million, at around 1:00 PM local time on October 9, 2026. The unauthorized transfer moved balances from his digital wallet during the course of regular daily activities.
The victim’s report immediately sparked a high-level investigation by Malaysian police. Perak Police Chief Mohd Alwi Zainal Abidin confirmed the investigation on October 10, 2026. The high-value case, representing tens of billions of rupiah, extended beyond the district police station as state authorities brought in a specialized crypto unit from Bukit Aman’s Commercial Crime Investigation Department (CCID).
Fraud Charges and Blockchain Tracing
Police are investigating the case under Section 420 of the Malaysian Penal Code, which covers cheating and fraud. This provision carries a prison term of between one and ten years, alongside caning and a fine for offenders.
The investigation’s primary focus is now centered on the public ledger. The victim’s assets were detected moving across blockchain networks to other addresses, with Bukit Aman specialists working to map out the recipient nodes. While on-chain movements are being traced, police have yet to confirm any wallet freezes, asset seizures, or recovery of funds for the victim. The entire digital fortune remains beyond law enforcement’s reach.
What Remains Unknown About the Breach
The official investigation is only a few days old and leaves many technical questions unanswered. Authorities have not announced which cryptocurrencies were stolen or which blockchain networks were used to transfer the funds. Police have also yet to detail the victim’s storage setup, whether it involved a non-custodial wallet, a centralized exchange account, or specialized hardware.
The mechanism used to breach the victim’s wallet security has also not been identified. It remains unclear whether the victim fell victim to phishing links, malware on personal devices, a leaked seed phrase, or manipulated transaction authorizations. Without knowing the intrusion vector, investigators must comb through digital footprints starting from the victim’s initial holdings.
Regional Cybersecurity Pressures
The loss in Teluk Intan adds to a growing list of digital asset security incidents across Southeast Asia. The incident comes as the region faces diverse crypto scam threats, including the circulation of counterfeit Ledger hardware wallets targeting users in neighboring countries.
For crypto holders, the Perak incident is a stark reminder that millions of dollars can vanish in an instant once wallet access is compromised. Once unauthorized on-chain transactions are executed, law enforcement faces a race against time to trace anonymous addresses before the funds disperse further into the decentralized ecosystem.
Reported by crypto.news.
Also read: Tron Activates Post-Quantum Defense on Testnet - Justin Sun Says Mainnet Ready Anytime
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
