Malaysian Courts Can Freeze Assets and Order Disclosure — Even Against Unknown Cyber Fraudsters
26 May 2026 | For businesses, financial institutions, and commercial litigators
What Happened
In 2020, a German chemical manufacturer was tricked into paying approximately €123,000 into a Malaysian bank account. The fraudsters had infiltrated email exchanges, impersonated a business partner, and even intercepted courier‑shipped documents to manipulate a payment instruction. The real perpetrators remained unidentified. The victim, Zschimmer & Schwarz GmbH, applied urgently to the Malaysian High Court — not against named individuals, but against “Persons Unknown.” In December 2020 and February 2021, the court granted a series of novel orders: a proprietary injunction, a Mareva freezing injunction, substituted service by email and Dropbox, and Malaysia’s first Spartacus Order requiring the anonymous fraudster to identify himself within seven days or face contempt. The injunctions were later extended to new recipients as the money moved through other accounts. The case established that victims of cyber fraud can obtain urgent, effective relief even when the perpetrators’ identities are unknown.
Why It Matters
- Injunctions are available against unknown fraudsters. Malaysian courts can grant freezing orders and proprietary injunctions against defendants identified only by their actions — such as the email addresses they used or the bank accounts they controlled. A fraudster’s anonymity is no longer a shield.
- Substituted service can be digital. Court papers can be served via the very communication channels used in the fraud, including email and cloud‑storage links. This ensures the fraudsters receive notice even if their physical whereabouts are unknown.
- A Spartacus Order turns the table. The court can order an anonymous defendant to identify themselves publicly — typically by responding to a newspaper advertisement — or risk committal for contempt. It is a powerful, and now available, tool.
- Remedies can follow the money. When funds are transferred from the initial account to others, further injunctions can be obtained against the new recipients. The relief is dynamic, not static.
What You Should Do Now
- Have a cyber fraud response plan. The window for freezing assets is measured in hours, not days. Pre‑appoint legal counsel, know which banks to contact, and have a communication protocol ready.
- Preserve everything immediately. Emails, payment instructions, courier records, chat logs — all of it may become evidence. Instruct staff not to delete any communication once fraud is suspected.
- Contact the receiving bank without delay. Request that the account be frozen pending investigation. Speed is critical; funds can be dissipated within minutes.
- Instruct counsel to seek urgent injunctive relief. Proprietary and Mareva injunctions against Persons Unknown are available in Malaysia. Substituted service by email and a Spartacus Order can also be sought if the fraudster’s identity remains concealed.
→ Need help with a cyber fraud response or compliance protocols?
© Justiciable. For general information and educational purposes only—not legal advice.
justiciable.media