LoginJoin Now
M2 promotional banner

How to Spot a Fake M2 Login Page

24 Sept 2026 · 4 min read

A cloned login page can copy M2’s orange buttons, banners and announcement word for word. What it cannot copy is the domain. These five checks take a few seconds and protect your balance.

Five checks before you type your password

  1. Read the domain. It must be exactly m2win001.com or m2win002.com. Read it from the end backwards so you are not fooled by a familiar start.
  2. Look for swapped characters: 0 for o, 1 for l, rn for m, extra dashes or words such as -login, -bonus or -my.
  3. Think about how you got there. Did you type it or use your bookmark? Good. Did you tap a link in a group chat, comment or ad? Close it.
  4. Check what it asks for. M2’s Sign In form asks for your username and password. A page that wants your OTP, IC photo or bank PIN to “verify” is fake.
  5. Watch for pressure. “Your account will be frozen in 10 minutes” or “claim your RM bonus now” are classic phishing hooks.

Tricks scammers use

  • “New official link” broadcasts in Telegram and WhatsApp groups.
  • Fake support agents who message you first and ask for your OTP.
  • Top-up agents who ask you to transfer money to a personal account.
  • Look-alike search ads that sit above the real result.

If you already typed your password

  1. Open the real site yourself and reset your password with Forgot Username/Password.
  2. Change the same password anywhere else you used it.
  3. Tell M2 support through LiveChat on the official site.

The easiest protection

Add the official link to your Home Screen once using the M2 App guide, then always open M2 from that icon. For a side-by-side checklist, see Real vs Fake M2 Links.

FAQs

Questions

What do fake M2 pages look like?

They copy M2's design, banners and buttons. Only the domain in the address bar gives them away.

Will M2 ask me to send my OTP?

No. You only type an OTP into M2's own register or recovery form. Never send it to anyone.

Are M2 links shared in Telegram groups safe?

Do not rely on them. Type the address yourself or use your own bookmark.

What if I typed my password on a fake page?

Reset it straight away with Forgot Username/Password on the real site, change it anywhere else you used it, and tell M2 support.

How do I avoid fake pages for good?

Add the official link to your Home Screen once, and always open M2 from that icon.

More guides