Image: Sarawak Energy via DayakDaily

The fake messages misuse company branding and employee identities to appear legitimate. Their aim may be to obtain personal details, passwords or one-time passwords, persuade a customer to pay an unauthorised account, or make the recipient open a malicious link or attachment.

A practical verification routine

Sarawak Energy said its official email uses the @sarawakenergy.com domain, but the visible sender name alone is not enough. Expand the sender details and read the full address. Even when an address looks familiar, do not use phone numbers or links supplied inside an unexpected payment email.

Sarawak Energy says it will not request passwords or OTPs by email and will not direct customers to personal bank accounts or unauthorised payment channels. Check a bill through SEB cares or contact the company independently before paying.

If you receive a suspicious message:

• Do not reply, click links or download attachments.
• Take a screenshot and preserve the full sender address.
• Verify through the official Customer Care Centre at 1300-88-3111, customercare@sarawakenergy.com, or SEB cares.
• If money has already been transferred, contact the bank and Malaysia's National Scam Response Centre at 997 immediately.

Sources: DayakDaily report · Sarawak Energy official site