A homestay scam in Malaysia usually follows the same pattern: stolen photos, a low price, pressure to pay a deposit quickly, then the "owner" disappears. Before paying, check the photos, the address, the account name and Semak Mule. If you have already paid and suspect a scam, call 997 immediately.
Year-end school holidays and festive seasons are when families are most desperate for a place, and several of the cases below happened in seasons like these. Losing the money is one thing. Worse is driving for hours with the kids to a house that does not exist, when everywhere else is already full.
We manage more than 100 homestay units in Johor Bahru and Desaru, so we have an interest: we would like you to book with us. This article also shows you how to check us, and when you should pay more and use a platform instead.
How do homestay scams actually happen? Five reported cases
| Year, source | What happened | Money lost |
|---|---|---|
| 2020, SAYS | A guest asked for suggestions in Facebook groups. A woman messaged offering a house with a pool in Port Dickson. After the deposit she demanded RM200 more or the deposit would be forfeited. The address given after payment turned out to be a graveyard | RM500 |
| 2022, Sinar Harian | A family booked online in Kuala Terengganu and paid in full. An email then asked for an extra RM100 deposit. On arrival, villagers said no such homestay existed. It was school holidays, nothing else was free, and the family drove back to Port Dickson | RM245 |
| 2022, Utusan | Mersing, Johor. A Facebook ad for a rental house; the suspect pressed victims on WhatsApp, saying many others were interested. The house was occupied by a family who had not advertised it | RM1,200 and RM500 (two victims) |
| 2024, Kosmo | Before Hari Raya, homestay ads used other people's photos. One owner in Tumpat said about 10 families turned up with fake bookings using photos of her place | RM600 and RM500 (two victims) |
| 2024, NST | A guest booked a villa for a family gathering on a well-known booking platform. The villa did not exist and the owner went silent | Not stated |
Two honest notes. We did not find a 2025–2026 report specifically about homestays in Johor Bahru, and we did not find an official count of homestay scams per year. That does not mean there are none. And case five shows a platform is not a full guarantee either.
What are the warning signs of a homestay scam?
Each sign comes from the cases above or from a published rule, not from theory.
| # | Sign | What to do |
|---|---|---|
| 1 | Cheap and still available on dates when everywhere else is full | Compare with other units in the same area on the same dates |
| 2 | Pressure: "many others want it", "today only" | Stop. A real booking can wait 30 minutes while you check |
| 3 | Address or building name only after payment | Do not pay. At least the building name or location must come first |
| 4 | A demand for more money after you paid, or a threat to forfeit the deposit | Do not add money to save old money. Check and report |
| 5 | Someone messages you first after you post "looking for a homestay" in a group | Search their name and photos outside Facebook |
| 6 | You are asked to leave Airbnb and pay by bank transfer | Report it to Airbnb. It breaks their policy |
| 7 | A personal account whose name has no link to the owner, or being told to pay cash at a deposit machine | A reason to check further. See the personal account section below |
How do you check a homestay before paying a deposit?
- Check the photos. Run them through Google Lens. If the same photos appear under another name or in another area, ask why. Kosmo reported scammers joining Facebook homestay groups to collect photos.
- Check the address. Mersing police advised people to check first whether the address exists. Look it up on Google Maps and Street View. For a condo it is normal to get the unit number later, but the building name should come early.
- Call, do not only message. Ask things that are hard to answer without the keys: which floor, where to park, how you enter the building. Ask for a recent photo or a video call. A real operator sometimes cannot do this at once if guests are in the unit, so "after the guests leave" is not automatically a scam. A flat refusal with no reason is different.
- Check the account and phone number on Semak Mule. The police portal at semakmule.rmp.gov.my searches account numbers, phone numbers and company names. If a record comes up, do not pay. If nothing comes up, it only means nothing has been reported yet. It does not mean safe.
- If it is a company, check the company. Ask for the full name and SSM registration number and look it up yourself. A registered company may still have nothing to do with that unit, so contact them through the number on their official website, not the number that messaged you.
- Read reviews outside the conversation. Search Google and the platforms. Screenshots of reviews sent by the seller are not proof.
- Get the details in writing before paying. Dates, number of guests, final total, deposit, cancellation terms and the name of whoever receives the money. If they avoid this, that is also an answer.
Does a personal bank account mean it is a scam?
Not necessarily. Some small owners do use their own accounts, and we have no data on how many. In the Kosmo report, the owner whose photos were stolen said rent should go to the homestay's business account, yet some guests still transferred to someone's personal account.
The question is not just "personal or company" but: does the account name match the person you have already verified? If it is a different name, ask why and verify first. If you are told to pay cash at a deposit machine for no good reason, stop.
Which booking channel is safer?
| Channel | If something goes wrong, you can go to | When it fits |
|---|---|---|
| Airbnb, Agoda, Booking (paying inside the platform) | The platform and its policy | You do not know the operator yet. Easiest for a first time |
| An operator's own website, with a company you can check | That company, then TTPM | You have checked the company and want to avoid platform fees |
| Transfer to a company account | That company and your bank | After a full check |
| Transfer to a personal account, or cash at a deposit machine | Hard, if the person vanishes | Only if you really know the person |
Airbnb's own help page says hosts may not ask you to take a booking off the platform, that paying outside it loses AirCover protection, and that a wire or bank transfer may be a fraudulent reservation.
We often say booking direct is cheaper, and on fees it is. But if you cannot yet verify who is behind an offer, including us, paying a little more on a platform beats losing everything. Platforms also have clear cancellation policies; see how much refund you get when you cancel.
Already paid: what should you do if you were scammed?
- Call 997 immediately. The National Scam Response Centre (NSRC) has run 24 hours a day since 17 November 2025. The government spokesman said in March 2026 that a separate police report is no longer needed, "997 is enough". If the officer on the line asks for a police report in your case, follow that.
- Call your bank too, especially if the transfer was recent.
- Keep the evidence. Screenshots of the ad, the chat, phone numbers, receipts, account numbers. Do not delete anything out of embarrassment.
- Do not pay anything more. That includes anyone who messages offering to "recover" your money for a fee.
- Tell the real owner of the photos if you find them. They are a victim too and can report the ad.
Speed matters. In examples the spokesman gave, a late report saved only RM170,000 of RM1 million, while a victim who called straight away got nearly all of it back. That is no guarantee, and a small case may go differently, but waiting does not help.
If the other side is an identifiable business that refuses a refund, that is not necessarily a scam. TTPM may be the right route; see the cancellation article above.
What if you arrive and the house is not there?
Call the day before you leave and confirm the address and how to get in. In the Terengganu case the family had no fallback because of the school holidays. In peak season, know your nearby options first. The school holiday calendar and when to book helps you plan earlier.
If the house is missing or someone else lives there, do not argue with the occupants. They may be victims too. Take photos, call 997, then find the family somewhere to sleep.
How do you check us?
Do not trust us because of this article. Check:
| Item | Our details |
|---|---|
| Company name | Antlerzone Sdn Bhd (HomestayJB by Antlerzone) |
| Registration no. | 202201032222 (1477919-V) |
| Phone and WhatsApp | 016-962 9627 |
| Website | www.antlerzone.com |
| Facebook, Instagram | facebook.com/antlerzone, instagram.com/homestay.jb |
Direct bookings with us are made on our booking page, and the payment methods are shown there. Our deposit is usually RM200, paid on check-in day; see the first-time check-in steps.
What we cannot promise: we cannot be sure nobody has ever copied our photos or name. If someone uses our name and asks you to pay an account you are not sure about, do not pay. Contact the number above or our contact page first. If you do not know us and do not feel comfortable, booking our units through a platform is perfectly fine.
This article is general information, not legal advice.
Summary
- Main signs: cheap on full dates, pressure to hurry, address only after payment, demands for more money.
- Before paying: Google Lens, Street View, a phone call, Semak Mule, reviews outside the chat, details in writing.
- No record on Semak Mule does not mean safe.
- Cannot verify the operator? Use a platform and pay inside it.
- Already paid? Call 997 immediately.
Once you have checked and feel comfortable, see the units and the real total for your dates on our booking page.