The Malaysian Communications and Multimedia Commission (MCMC) has successfully taken down over 11,600 items of false and deepfake content responding to complaints received since the beginning of 2024, Deputy Communications Minister Teo Nie Ching disclosed to Parliament on June 30. The figures reflect the regulator's intensifying efforts to combat artificial intelligence misuse across digital platforms, with the removals occurring after formal takedown requests were submitted by MCMC to social media platform operators. This action represents a critical escalation in the government's regulatory response to what has become an increasingly serious threat to information integrity and public security in the region.
The trajectory of complaints reveals the alarming pace at which deepfake technology is being weaponised for harmful purposes. Beginning with 917 complaints recorded in 2024, the volume surged dramatically to 3,612 cases during 2025, before accelerating further to 7,967 reports as of mid-June this year. This eightfold increase underscores how the sophistication and accessibility of AI-generated content tools have fundamentally transformed the threat landscape for Malaysia's digital ecosystem. The exponential growth pattern suggests that without sustained intervention, the volume of malicious deepfakes could continue its upward trajectory as these technologies become increasingly user-friendly and harder to detect.
To address this burgeoning challenge, the Malaysian government has leveraged new legislative frameworks to impose binding obligations on digital platforms. The Risk Mitigation Code (RMC) established under the Online Safety Act 2025 now mandates that licensed social media platforms implement specific risk mitigation measures targeting AI-generated content. These requirements represent a substantial shift toward holding technology companies accountable for content governance, moving beyond voluntary compliance models that have proven insufficient in managing the rapid proliferation of harmful AI applications. The MCMC has begun engaging systematically with licensed platform providers to evaluate their compliance with these obligations, establishing a structured oversight mechanism.
Beyond content removal, the regulatory framework encompasses broader safeguarding measures designed to disrupt the infrastructure supporting fraudulent activities. Licensed platforms are now required to verify the identities of advertisers through official channels such as the Companies Commission of Malaysia, a requirement intended to prevent bad actors from establishing fraudulent accounts and deploying scam-related advertisements. This particular measure addresses a critical vulnerability in the current digital advertising ecosystem, where criminals have traditionally exploited weak identity verification protocols to launch deceptive campaigns. By tightening advertiser authentication standards, Malaysia is attempting to close a significant loophole that has facilitated financial fraud and reputational harm.
The MCMC's role extends beyond reactive content removal into proactive intelligence work that supports law enforcement operations. The commission provides technical assistance to enforcement agencies investigating AI misuse cases, including profiling of suspects and digital forensic analysis capabilities. This collaborative approach between regulatory bodies and criminal investigators reflects a recognition that combating sophisticated deepfake operations requires integrated expertise spanning both technical and investigative domains. The profiling information and forensic analysis furnished by MCMC enables investigators to trace the origins of malicious content and identify patterns indicative of organised campaigns.
Enforcement mechanisms embedded within the new legislative framework provide substantial deterrents against platform non-compliance. Companies that fail to satisfy their obligations under the RMC face prosecution with potential penalties reaching RM1 million in fines, with additional financial sanctions of up to RM10 million possible. These escalating penalty structures represent a significant departure from previous enforcement approaches and signal the government's determination to exact meaningful consequences for inadequate governance. The substantial financial exposure created by these penalties provides platforms with strong financial incentive to invest in robust content moderation systems and AI-detection technologies.
The significance of these developments extends beyond Malaysia's borders, offering important lessons for other Southeast Asian nations grappling with similar challenges. The region has emerged as a prime target for deepfake campaigns due to factors including diverse linguistic communities, rapid digital adoption, and complex political dynamics that make populations susceptible to misleading content. Malaysia's integrated approach combining legislative requirements, platform accountability, technical support for law enforcement, and meaningful penalties provides a template that neighbouring countries may adapt to their particular contexts. The model emphasises coordination between government agencies and private technology companies, acknowledging that no single entity possesses sufficient tools to address this challenge unilaterally.
The legislative and enforcement responses also reflect evolving international norms around platform responsibility. Rather than treating content moderation as a voluntary corporate social responsibility initiative, Malaysia has embedded specific requirements into binding legal frameworks, effectively shifting the cost of enforcement from the government to technology companies. This approach aligns with emerging global consensus that platforms bear responsibility for the ecosystem they host, particularly when that ecosystem has become a vector for serious harms including election interference, financial fraud, and harassment campaigns. The principle that platforms cannot simply claim neutrality while profiting from user attention has gained considerable traction among policymakers.
However, the escalating numbers of complaints also raise important questions about detection and reporting mechanisms. The eightfold increase in complaints may reflect not only growing creation of deepfakes but also enhanced public awareness about reporting channels and improved mechanisms for identifying and flagging suspicious content. Whether the removal rate of approximately 93 percent of reported content represents comprehensive success or whether significant quantities of harmful content remain undetected remains an open question. The sustainability of these efforts will depend partly on whether platforms invest adequately in automated detection systems capable of identifying novel deepfake techniques as they emerge.
Looking forward, Malaysia's experience demonstrates both the possibilities and limitations of regulatory approaches to AI misuse. While legislative frameworks and penalties can incentivise platform action and support law enforcement efforts, the underlying technological race between those creating deepfakes and those detecting them continues to accelerate. As AI generation tools become more sophisticated, detection methodologies must equally advance, potentially requiring investment in academic research, international cooperation on technical standards, and collaboration with technology companies on developing detection and authentication tools. The current trajectory of complaints suggests that the regulatory gains achieved so far may represent only a temporary advantage in what is likely to be a sustained technological competition.
