Yes — in Malaysia, if someone uses your username and password to log in and buy stocks on Bursa Malaysia without your knowledge or consent, that is considered unauthorized access and could be both a criminal and financial matter.

You can take these steps:

1. Report to the police immediately

State clearly that someone accessed your online trading account without permission.

This can fall under Computer Crimes Act 1997 (Section 3 – Unauthorized Access) and Penal Code (criminal breach of trust