I've had this happened to me twice (Maybank as well).

Background:


Anyway, if you didn't press the kill switch for that card on MAE as soon as possible as you get the notification for the transaction, then that money is your tuition fees for this unfortunate lesson.

After the kill switch, go to your nearest Maybank branch and tell the people at the counter and they'll guide you through the process and how to fill up the forms. It's a relatively quick process receiving a new card although you'll need to create a new MAE account. Do remember to screenshot or print the transaction history because you'll need the details of the unauthorised transaction for the dispute form.

Honestly, I don't know if the dispute form helps besides documentation because it's been 3 years since it first happened to me and I've not received that money back which I kind of expected. However, the 2nd time it happened, I pressed the kill switch immediately and thankfully, the transaction didn't go through.

If I recall correctly what the branch manager told me, transactions made on these overseas websites don't have 3DS authentication that we have for transactions. That is why they're able to bypass the 2FA of MAE because they already have your card details; they don't need the Secure2U code.