Five warning signs
Be suspicious of lookalike domains with extra words or a different ending, login links sent by chat, requests for your one-time code, payments to personal bank accounts or e-wallets, and 'release fees' to unlock a withdrawal. Any one of these is enough reason to stop.
| Trick | Example | How to catch it |
|---|---|---|
| Lookalike domain | jkbjili-login, jkbjlli, jkbjili.vip | Only jkbjili.com is official |
| Chat login link | 'Your account is locked, log in here' | Never log in from a link |
| Fake support | Agent asks for your password or code | Real staff never ask for them |
| Fake APK | 'Download the JKB Jili APK' | JKB Jili has no APK; install the web app |
| Release fee | 'Pay 10% tax to unlock your winnings' | Legitimate sites never charge this |
A padlock in the address bar only means the connection is encrypted. Clone sites have padlocks too.
If you think you've been scammed
Act quickly. Change your password on the real site and any site where you reused it, then call your bank. In Malaysia, call the National Scam Response Centre on 997, because a fast report gives the best chance of freezing the money.
- Change your password on jkbjili.com and turn on two-factor security. See login safety.
- Call your bank's fraud line, and NSRC on 997 if you are in Malaysia.
- Report the fake site to us through support.