Malaysia and Pakistan have opened formal follow-up talks over 130 Malaysians detained in Rawalpindi for alleged online scams, while in the same fortnight 33 Pakistanis were charged in Malaysia after an operation in Kulim. The arrests look like a mirror, but no authority has called them a swap or linked the cases.
What changed on November 2
On November 2, Malaysian Home Minister Saifuddin Nasution Ismail said Putrajaya and Islamabad were in talks to coordinate follow-up action over the 130 Malaysians. Speaking in Alor Setar, he said the Bukit Aman Commercial Crime Investigation Department, known as CCID, was in talks with Pakistani authorities, and that he had asked its director to start talks with relevant departments in Pakistan immediately.
He traced contact back about two weeks, to a call from Pakistan’s interior minister informing him that Malaysians suspected of online scams had been detained. No further meeting date has been announced, and neither side has said whether any of the 130 will be repatriated or charged in Pakistan first.
The Rawalpindi case, step by step
The Royal Malaysia Police confirmed on October 31 that 130 Malaysians had been detained in Rawalpindi over alleged involvement in a cybercrime syndicate. Inspector General Mohd Khalid Ismail said police were working through the Foreign Ministry for full details, that the case had been referred to the CCID director, and that an investigative team may be sent to Pakistan.
Pakistani media reported that the National Cyber Crime Investigation Agency, or NCCIA, raided a call centre at KASA Tower in Bahria Town Phase VIII, Rawalpindi, under a court warrant. The alleged method had three stages: callers posed as bank staff, claiming suspicious transactions; calls were passed to others posing as Malaysian police, some allegedly in uniform on video calls; victims were threatened with money laundering charges and pressured to transfer money. Proceeds were believed to have gone through the Touch n Go eWallet into cryptocurrency, and the syndicate was believed to be run by a Malaysian operating from Cambodia, with a Chinese national involved. Charges fall under sections 13, 14 and 16 of the Prevention of Electronic Crimes Act 2016, as amended in 2025, plus Penal Code provisions on extortion, impersonation, fraud and abetment.
The mirror in Kulim, and why it is not a swap
In the same period, Kedah police arrested 33 Pakistanis at Kulim Hi-Tech Park, along with several Indians, the home minister said. The 33 Pakistanis have been charged in court. He did not say Kulim targeted the same syndicate, victims or organisers as Rawalpindi, and no such link should be assumed from timing alone.
The legal stages already differ. The 33 in Malaysia are charged. The 130 in Pakistan remain under investigation, with Malaysian police still awaiting full profiles. A separate November 2 report also needs care: Pakistan’s high commission visited prisons in Johor Bahru to discuss Pakistani inmates and repatriation under the new Treaty on International Transfer of Prisoners. That concerned Pakistanis in Malaysia, not the 130, and no statement links it to them.
Three gaps the statements leave open
First, identity. Full profiles of the 130 had yet to be obtained, although all were confirmed as Malaysian passport holders from various ethnic backgrounds. The inspector general also said some had valid visas, while others had overstayed. A blanket overstay story would therefore be wrong on the police’s own account.
Second, scale. Victim losses, confirmed victim numbers, and money seized have yet to be disclosed, so the fraud’s size cannot be judged from the headcount alone. The same caution applies to the NCCIA’s month-long cybercrime drive that arrested 1,129 suspects: arrests are not proven losses or convictions.
Third, the controller abroad. Reports name Cambodia as the alleged base of a Malaysian controller, and a Chinese national in the money chain, but give no verified identity, arrest abroad, or court finding. Anyone receiving such a call should treat the caller as unverified, and can check how to check SIMs registered on your own CNIC legally in Pakistan as a first step.
What to watch next
Three checkable steps will show whether talks turn into action. Will Malaysia send a CCID team to Rawalpindi, and will it return with the missing profiles? Will Pakistan announce charges for the 130, or will the case stay at investigation? Will either government say anything specific about repatriation, beyond general coordination? Cross-border tips are not new for the NCCIA: how a foreign alert led the NCCIA to a Karachi household in the 764 network case shows the same pattern, but that outcome was a rescue, not a mass detention.
For now, keep the verified position narrow. Two countries are talking. One group of 130 is detained in Pakistan. Another group of 33 has been charged in Malaysia. No swap has been announced, no victim total has been published, and no controller abroad has faced a court in the public record. For continuing coverage, see more national news from Pakistan on PakMirror.
