How to Avoid Renovation Scams in Malaysia (2026)

The single most effective way to avoid a renovation scam in Malaysia is to make payment follow proof of work, never the other way around. Verify the contractor is registered with the Construction Industry Development Board (CIDB) for a grade that matches your project, sign a written contract with a clear scope and timeline, cap your deposit at 10-25%, and release every later payment only against a completed, inspected milestone. Do that and the most common scam, the large upfront deposit followed by disappearance, simply cannot run. Skip it and you join the homeowners who have collectively lost millions of ringgit, including one group of victims who lost more than RM1 million to a single fake renovation firm (EdgeProp.my).

This guide is educational and not legal advice. For a specific dispute, speak to a licensed lawyer.

Why is renovation fraud worse in Malaysia now?

Two things changed the landscape. First, demand for home upgrades stayed high after the pandemic. Second, the trust infrastructure thinned out. Kaodim, the largest local home-services marketplace, ceased all operations in July 2022 after years of lockdown disruption and rising costs (Ringgitplus). It had spent eight years (it launched in 2014) building a vetted layer between homeowners and tradespeople. When it closed, a lot of that vetting evaporated.

The gap got filled by Facebook groups, WhatsApp forwards, and cheap online ads, channels where a fraudster needs nothing more than a logo, a few stolen project photos, and a bank account. CIDB itself has reported roughly 30 renovation-fraud cases causing losses in the millions of ringgit, prompting it to push consumer education and standard agreement templates (CIDB).

Platforms like Recommend.my still operate and still vet their listed pros, and they remain a reasonable starting point. But in our view no platform badge replaces checking CIDB registration yourself. Treat any sourcing channel as a lead, not a guarantee.

What are the red flags of a renovation scam?

Most scams share a recognisable shape. The more of these boxes a contractor ticks, the harder you should walk away.

Red flag	Why it matters	What a legitimate contractor does instead
No CIDB registration	Working without registration breaches Section 25 of Act 520; you have no regulator to escalate to	Gives you a registration number you can verify online
Large upfront deposit (30-50%)	The classic scam pattern: collect deposit, do token hacking, vanish	Asks for 10-25% on signing, rest tied to milestones
No written contract	Nothing to enforce; “scope” lives only in WhatsApp	Provides a written scope, timeline, and payment schedule
Quote far below others	A price that undercuts every rival by 30%+ often hides a vanish-with-deposit plan or a midway “top-up” trap	Quotes within a sane band and itemises the work
No real portfolio	Stolen or generic photos; no site visits offered	Shows past jobs, site addresses, contactable references
High-pressure tactics	”Promo ends today” or “pay now to lock the team” rushes you past due diligence	Lets you take time to verify and compare
Cash-only, personal account	Hard to trace, no paper trail	Invoices to a company account with proper documentation

The deposit red flag deserves emphasis because it is where the money actually disappears. In reported Malaysian cases the script is consistent: the victim pays a 30-50% deposit “to purchase materials,” the contractor does some minimal hacking work to look busy, then goes quiet for months and the materials never arrive (Recommend.my). In the RM1 million case, the lead victim said he paid a 50% deposit before any real work began (EdgeProp.my). A widely cited guideline is to treat any deposit above 25% of total cost as a cause for concern.

How do I verify a contractor is real and registered?

Run these checks before any money moves. None of them cost anything meaningful.

1. Confirm CIDB registration. Since 20 July 1995, registration with CIDB under Section 25 of Act 520 has been mandatory for anyone carrying out construction work in Malaysia. Ask for the registration number and verify it on the CIDB portal at cidb.gov.my. Under Section 29 of the Act, a contractor who carries out work in breach of Section 25 can be fined between RM10,000 and RM100,000 on conviction, so a legitimate operator has every reason to be registered.

2. Check the grade matches the job. CIDB grades run G1 to G7 by tender value. For most home renovations a G1 contractor is the entry point; larger landed-house overhauls may warrant a higher grade.

CIDB grade	Tender value limit	Typical use
G1	Up to RM200,000	Small reno, repairs, condo unit refresh
G2	Up to RM500,000	Larger landed reno, small commercial
G3	Up to RM1,000,000	Mid-size reno and construction
G4	Up to RM3,000,000	Larger residential and commercial
G5	Up to RM5,000,000	Mid-size construction
G6	Up to RM10,000,000	Large construction
G7	No limit	Major projects

Grade limits per CIDB; verify the current grading table at cidb.gov.my.

3. Inspect a real portfolio. Ask for two or three recent jobs and, ideally, speak to those homeowners. Scammers reuse stock photos; a genuine contractor can point to addresses and people.

4. Cross-check the business. Look up the SSM company registration, read independent reviews, and search the company and the director’s name alongside words like “scam” or “tertipu.” In the RM1 million case, the victims later found the company was not registered with SSM at all and the named “owner” had borrowed a real carpentry firm’s identity. Five minutes of checking here has saved homeowners five figures.

5. Insist on a site visit and a written quote. A contractor who quotes a full renovation without seeing the unit, or who refuses to put anything in writing, is telling you something.

How should I structure payments to stay safe?

This is the heart of self-protection. The principle is simple: money follows verified work.

• Deposit: 10-25% on signing. Lean to the lower end for larger jobs. Never pay 100% upfront, and treat anything above 25% as a warning.
• Staged payments tied to milestones: Break the balance into tranches released only when a defined, inspected stage is done. A staged structure protects you from contractor abandonment because funds move with visible progress, not promises.
• Retention: Hold back the final 5-10% until snagging is done and you have signed off. This is your leverage to get defects rectified before the contractor is fully paid.

Here is an indicative payment ladder for a typical Klang Valley condo or landed reno. Adjust the stages to your actual scope.

Stage	Trigger (work completed and inspected)	Indicative % of contract
Deposit	Contract signed, materials ordered	10-20%
Stage 1	Hacking, wiring rough-in, plumbing rough-in done	20-25%
Stage 2	Tiling, plastering, ceiling, carpentry carcass done	25-30%
Stage 3	Painting, fixtures, doors, finishes installed	20-25%
Retention	Snagging cleared, handover signed off	5-10%

To sanity-check whether a quote is even realistic, hold it against current market ranges. As of 2026, Malaysian renovation costs run roughly RM20-RM60 per sq ft for a minor refresh, RM120-RM200 per sq ft for a mid-range reno, and RM280-RM450 per sq ft for a major overhaul (approximate, check current quotes; Loanstreet). These bands vary widely with materials, location, and finish level. If a quote is wildly below the relevant band, ask exactly what is being cut, because the gap is often where the scam or the mid-job “top-up” demand lives.

What must be in the written contract?

A handshake is not a contract. CIDB has been explicit that both parties should sign a written agreement before work starts to avoid uncertainty and disputes, and it has promoted standard agreement templates and the CIDB Standard Form of Contract for Building Works for exactly this purpose (CIDB). Using a recognised template tilts the terms toward fairness rather than whatever the contractor drafts.

At minimum, get all of this in writing:

• Full scope of works, itemised room by room, with materials, brands, and finishes specified (not “tiles” but the exact tile, size, and grade).
• Timeline with a start date, key milestone dates, and a completion date.
• Payment schedule mapped to those milestones, with the retention amount stated.
• Variation clause so any change to scope is priced and signed off in writing before it happens. This kills the “surprise top-up” tactic.
• Defects liability period (commonly 6-12 months) during which the contractor fixes faults at no charge.
• Both parties’ full details, including the company’s CIDB registration and SSM number.

If a contractor resists putting the scope or timeline in writing, that resistance is your answer.

What do I do if I have already been scammed?

Act fast and keep everything. Your options, roughly in order:

1. Preserve evidence. Save the contract, quotes, receipts, bank-transfer records, photos of the unfinished work, and every WhatsApp or email exchange. This is what every channel below will ask for.

2. CIDB e-Bantuan. For construction-related grievances, CIDB runs an online assistance platform (the e-Bantuan form) plus a helpline (reported as +603 5567 3300) for reporting issues and seeking help (CIDB). This is the construction-specific route and worth using early.

3. Tribunal for Consumer Claims (TTPM). For claims up to RM50,000, you can file at the TTPM under KPDN for a small fee (often around RM5), no lawyer required, and you can file online (KPDN). The tribunal handles services paid for but not delivered, which covers a vanished contractor. Note that renovation cases can get technical, so present your evidence cleanly.

4. Police report. If there is clear deception (fake identity, fake company, money taken with no intent to perform), lodge a police report. Fraud is a criminal matter, and a report also strengthens your other claims.

5. Civil claim. For losses above RM50,000 or where you want damages beyond the tribunal’s scope, a civil suit through a lawyer is the route. This is slower and costlier, which is precisely why prevention matters so much more than cure.

Recovery is real but partial and slow. In the RM1 million case, victims went public and pressed authorities precisely because getting money back from a vanished operator is hard (EdgeProp.my). Every ringgit you do not pay upfront is a ringgit you never have to chase.

The verdict

Renovation scams in Malaysia are not sophisticated. They are almost always the same trick: extract a large deposit, perform just enough to look real, then disappear. The defence is therefore equally simple and entirely within your control. Verify CIDB registration, sign a CIDB-style written contract with scope and timeline, cap your deposit at 10-25%, tie every payment to an inspected milestone, and hold back a 5-10% retention. A contractor who agrees to all of this has nothing to hide and a strong reason to finish well. A contractor who pushes back on any of it has just shown you the door.

This approach is for anyone hiring a contractor they did not personally know before, sourcing from Facebook, WhatsApp, or ads, or handing over five figures or more. It is the default everyone should use.

It is arguably overkill for a tiny RM2,000-RM3,000 job with a tradesperson you have used for years and trust, where a lighter deposit and an informal arrangement may be reasonable. Even then, a one-page written scope costs nothing.

Honest contractors welcome these terms because the terms protect them too, by tying payment to documented progress and reducing disputes. The only party that loses under a milestone-based, CIDB-verified contract is the one who was never planning to finish the job.

Educational only, not legal advice. Verify current CIDB rules and TTPM limits with the official sources, and consult a licensed lawyer for any active dispute.