Malaysia's battle against artificially generated deceptive content has intensified dramatically, with authorities removing more than 11,600 deepfake items following formal takedown notices issued by the Malaysian Communications and Multimedia Commission to major social media platforms. The scale of the problem has become increasingly evident as the country grapples with the intersection of advancing technology and online harm, prompting a comprehensive regulatory response from the government.
The magnitude of the deepfake crisis is starkly illustrated by the trajectory of public complaints. Deputy Communications Minister Teo Nie Ching disclosed that reported instances of deepfake content have surged more than eightfold in recent months. The figures paint a concerning picture: complaints numbered just 917 in 2024, climbed to 3,612 in 2025, and reached 7,967 as of mid-June this year. This exponential increase suggests either a genuine proliferation of such content or heightened public awareness of the harm posed by synthetic media, or both factors working in tandem.
To address this escalating threat, Malaysia has implemented a comprehensive regulatory framework centred on the Risk Mitigation Code operating under the Online Safety Act 2025. Rather than relying solely on reactive enforcement, the government has shifted towards a proactive model requiring licensed social media platforms to establish internal safeguards specifically addressing artificially generated material. This represents a significant evolution in how Malaysian regulators approach digital harms, placing responsibility directly on platform operators to implement preventative measures before problematic content reaches users.
The MCMC has adopted an assertive compliance stance, actively engaging with licensed platform operators to evaluate whether they are adequately meeting their obligations under the new framework. This supervisory approach reflects a recognition that technology companies possess both the technical capacity and practical responsibility to identify and suppress synthetic media at scale. The commission's oversight function has become critical as platforms grapple with the technical challenges of distinguishing deepfakes from authentic content while processing billions of posts daily.
Beyond content removal, Malaysian authorities have developed a multi-layered enforcement strategy. The MCMC provides critical technical support to law enforcement agencies investigating AI-related crimes, deploying sophisticated digital forensic analysis and profiling information to strengthen cases against those creating or distributing malicious deepfakes. This collaborative approach recognises that addressing synthetic media requires both regulatory oversight and criminal prosecution capacity, creating a comprehensive deterrent system.
Proactive surveillance has become another pillar of the government's response. The MCMC now conducts continuous monitoring of social media platforms, actively hunting for AI-generated content rather than waiting for public complaints. This forward-looking stance acknowledges that deepfakes pose particular risks because they are often designed to deceive and spread rapidly before victims or authorities can respond, making preemptive detection and removal strategically important.
The deepfake challenge is fundamentally intertwined with broader concerns about artificial intelligence misuse. Government officials recognised early that regulating AI-generated content requires different approaches than traditional content moderation. Deepfakes can cause severe reputational harm to individuals, destabilise public institutions, interfere with democratic processes, and erode trust in media and information sources. Malaysia's approach treats this as a priority requiring specific technical measures and resource allocation distinct from general content governance.
A parallel concern driving regulatory evolution is fraudulent advertising and scam-related content on social media platforms. Teo revealed that licensed platforms now face mandatory requirements to authenticate advertiser identities through official channels such as the Companies Commission of Malaysia. This verification mechanism targets a common vector for online fraud where criminals establish fake accounts posing as legitimate businesses to solicit money from unsuspecting users. The requirement creates an additional friction point in the advertising process but significantly reduces the feasibility of large-scale scam campaigns.
The enforcement teeth behind these regulations are substantial. Platforms discovered to be non-compliant with their obligations under the Risk Mitigation Code face serious legal consequences. Convicted violators can be subjected to fines of up to RM1 million in initial penalties, with additional financial sanctions reaching RM10 million available to courts. These penalties represent significant financial exposure for major technology companies, creating powerful incentives for genuine compliance investment rather than token efforts to appear responsible.
For Malaysia's regional context, this regulatory framework carries implications beyond domestic boundaries. As a significant digital market and home to millions of social media users, Malaysia's enforcement actions and platform requirements influence how international technology companies operate across Southeast Asia. The precedent of requiring platform verification systems and AI content safeguards could inspire similar policies in neighbouring countries, potentially creating a more consistent regional approach to online safety governance.
The government's integrated strategy reflecting both technological and legal dimensions suggests an evolution in Malaysian regulatory thinking. Rather than treating deepfakes and AI misuse as isolated incidents manageable through traditional content moderation rules, policymakers have recognised these as systemic challenges requiring platform-level architectural changes, enhanced technical capabilities, criminal prosecution authority, and substantial financial penalties for non-compliance.
However, the continued surge in complaints despite removal efforts indicates that technological solutions alone prove insufficient. Education campaigns helping citizens identify synthetic media, media literacy initiatives building critical evaluation skills, and continued refinement of detection technology will likely remain necessary components of a comprehensive response. The exponential growth in deepfake complaints suggests this remains an evolving challenge where authorities, platforms, and civil society must continually adapt strategies as both threat actors and detection capabilities advance.
