i think i have a daily limit of RM100, so when i need to use more than 100, will have to use other method to top up or spread it over to more than 1 day. knowing its not really a very secured system. rm100 per day losses still bearable, few k per day sure die lo if noticed like 48 hours later.

its also possible previous programmers left back door.

how do i know, most likely its not at payment gateway side, if payment gateway side then the transaction need not to go through grab, can direct d, most likely at grab side. we as user nothing much we can do, we should just set the limit to a number thats safe for us and still able to use the service.

most likely not in malaysia d when pulling out this trick, can easily trace back who did it 1, so if still in malaysia sure dont use the magic la.