This image from: https://copilot.microsoft.com/
MALAYSIAN "SCRATCH & WIN"

A personal report written after consulting artificial intelligence


(Investigator 231, 2026 November)


I received an envelope from Malaysia, from an organization called Pure Vacation Holiday, with a colourful brochure and two "Scratch & Win" cards one of which wins USD 248,000. The card says "For any prize winnings, please contact our office…"
https://purevacationholiday.com is a professional-looking website offering "exclusive travel deals" across Europe and Asia. It gives the same office address, phone number and email contact as their brochure. The brochure is flawless in grammar and spelling, and crammed with self-recommendation such as "steadfast commitment", "unwavering dedication", "trailblazer", "unparalleled experiences", "thrilling endeavour", "rich diversity", "continuous innovation", "travel excellence", and so on.

The win of $248,000 reminded me of scam emails, years ago, that offered prize money for lotteries I didn't enter, or a share in inheritance money, or requests to help transfer foreign funds to Australia. The trick was that a transfer fee had to be paid, then further fees, and so on. 

Therefore I consulted the artificial intelligence Copilot regarding my Malaysian prize of $248,000.
COPILOT'S RESPONSE
Yes — based on everything we know, this is a well documented Malaysian scratch and win scam, and you should expect exactly the pattern you described: requests for fees, taxes, "membership charges," or personal identification, followed by escalating demands.
If you contact them, they will eventually ask you to pay fees (often thousands of dollars) or provide ID documents. You will never receive any prize money.

Multiple consumer protection agencies in Australia have issued warnings about Malaysian travel brochure + scratch-card scams that arrive by post.

The pattern is identical to what you received:
•    A colourful travel brochure
•    Two scratch cards
•    One card always shows a large "win"
•    The "winner" is told to contact the company
•    Dozens of fake company names have been used
What happens if you contact them

According to WA ScamNet and Consumer Protection:
•    You will be asked to send personal identification (passport, driver’s licence, etc.) used for 
     identity theft.
•    You will be asked to pay upfront fees, often around USD $5,000, supposedly for taxes,
     processing, or "club membership."
•    If you pay, they will ask for more fees.
•    You will never receive any prize money.
•    Some victims have lost thousands of dollars.

Authorities emphasise that no legitimate prize requires upfront payment.


Why it feels convincing
•    High quality brochures
•    Professional looking scratch cards
•    Registered mail
•    Fake websites
•    Fake "financial services" intermediaries
Inferences from the "Scratch & Win" card

1. The phone number:

This is a Malaysian mobile number. Scam operations almost always use:
•    Prepaid mobile numbers
•    Numbers that cannot be traced to a physical business
•    Numbers that change frequently

Legitimate travel companies in Malaysia use landlines or business VoIP numbers. A "USD 248,000 prize" being handled through a single prepaid mobile number is a major red flag.

2. The ISBN number: 983 9 37365 7

ISBNs are for books, not scratch cards. Scam groups often print fake ISBNs on their cards to make them look official.

The prefix 983 is used for Malaysian publications — scammers use it to appear legitimate. But:
•    No ISBN database lists scratch cards
•    No Malaysian publisher is associated with these scam brochures
•    The number format matches other scam cards reported in Australia

3. Serial number: SN: BM50093832

Every scam card has a serial number that looks official but is meaningless. Victims often report that:
•    Every "winning" card has a different serial number
•    But every card wins the same prize
•    The serial numbers do not correspond to any real prize registry

4. WhatsApp QR code

Scam operations increasingly use WhatsApp because:
•    It avoids traceable phone systems
•    It allows scammers to impersonate multiple "staff"
•    It lets them send documents, fake certificates, and ID requests
•    It is harder for authorities to monitor

Legitimate prize operations do not use WhatsApp as their primary contact channel.

6. The prize amount
USD 166,000 to USD 248,000 are amounts that appear repeatedly in scam alerts from WA ScamNet and Scamwatch. The number is chosen to be large enough to excite and small enough to seem plausible.

7. The overall design

Your card matches the scam template:
•    "19th Anniversary" (they always claim 10th, 15th, 18th, or 19th anniversaries)
•    Glossy printing
•    Silver Prize
•    Scratch panel
•    "Contact our office"
•    Malaysian origin
•    Travel brochure included

This is the exact same format used by dozens of fake companies.
What we can infer with high confidence
The card is not a legitimate promotion. The phone number is not a business line. The ISBN is fake. The website is almost certainly disposable. The WhatsApp QR is a funnel to scammers. The prize amount matches known scam patterns.
Scam travel companies use newly registered domains with no ABN, no business registration, and usually registered for 1 year only.


Menara Maxis

Question to Copilot:

"The 8-panel brochure gives the address as: Menara Maxis, No 928, 9F, Jln Ampang, City Centre, 50450 Kuala Lumpur, Malaysia. Is this a genuine address? What would a prize winner find if he went there to discuss his prize in person?"


Copilot's Response
Menara Maxis is a well known landmark in Kuala Lumpur. It is a premium Grade A office tower and houses Maxis Berhad, one of Malaysia’s largest telecommunications companies, plus major multinationals. But the address on your brochure is not a real office location.

"No. 928" on the brochure does not exist. Menara Maxis has a single official address: Kuala Lumpur City Centre (KLCC), off Jalan Ampang There is no unit number 928 associated with the building.
•    The 9th floor of Menara Maxis is occupied by existing corporate tenants. Pure Vacation  
     Holiday does not appear in any tenant registry.

•    No Malaysian travel company by that name is registered. A legitimate travel agency must
     be registered with:
     SSM (Companies Commission of Malaysia)
     MOTAC (Ministry of Tourism, Arts and Culture)
     Pure Vacation Holiday does not appear in either registry.
If a "prize winner" physically goes to Menara Maxis security will stop them at the lobby. Menara Maxis has strict corporate security. Visitors must:
•    Register at the front desk
•    Provide identification
•    State the company they are visiting
When they say "Pure Vacation Holiday," security will tell them: "No such company is located here." They will not be allowed upstairs. Without a legitimate tenant name, the visitor cannot access any floor.

Menara Maxis has been used repeatedly as a fake address in scams. Security staff are familiar with people arriving with brochures or scratch cards. The address is used purely to create an illusion of legitimacy. Scam syndicates deliberately choose prestigious buildings.
They know victims will think: "This looks like a real business address." But they don't rent actual office space. They rely on the fact that most victims will never travel to Malaysia.
What the search shows
Recent scam alerts from Australian consumer protection agencies describe identical mail outs and every detail matches:

This sort of scam has been circulating for years. The "prize" is fake and the fees are the trap. Your scratch card and brochure match the pattern described in Malaysian government warnings about "scratch and win" scams:
  • Fake travel company
  • Fake address in a famous building
  • Fake prize
  • Real phone number leading to scammers
  • Requests for fees or ID if contacted
What you should do:

•    Do not send ID or bank details.
•    Do not pay any fees.
•    Dispose of the materials or report them to your local consumer protection agency (e.g., WA
     ScamNet or Scamwatch).

No prize winner would find anything at Menara Maxis except a security guard.
What about travel enquiries?
What happens if people make travel enquiries? Copilot here did not refer to Pure Vacation but to scratch-and-win travel-company scams generally:

Real travel enquiries are not handled at all—they are ignored, stalled, or redirected back into the scam funnel… The websites have no booking engine, no payment gateway, and no legitimate customer service… legitimate travel enquiries are treated as potential victims. All paths eventually lead to "contact us"… The scammers respond with requests for personal details. Their only goal is extracting fees, ID documents, or bank details — not selling holidays.


CONCLUSION
Copilot has not claimed that Pure Vacation is a scam or the prize money a lie. It has shown with only "high confidence" that the company "matches the scam template" and advised caution.
 (BS)
Investigator Magazine