The Malaysian Communications and Multimedia Commission (MCMC) has intensified its crackdown on artificial intelligence-generated deception, successfully taking down over 11,600 items of deepfake or false content following requests filed under its compliance framework. Deputy Communications Minister Teo Nie Ching disclosed the figures during parliamentary proceedings, highlighting the scale of the digital manipulation challenge facing the nation as malicious actors increasingly weaponise AI technologies to spread misinformation and fabricated imagery across online platforms.
The spike in problematic content underscores a troubling trajectory of AI misuse within Malaysia's digital ecosystem. Complaints lodged with the MCMC have escalated dramatically over the past 18 months, jumping from just 917 cases in 2024 to 3,612 in 2025, and reaching 7,967 by mid-June this year. This nearly ninefold increase in complaint volume reflects both growing public awareness of deepfake threats and the accelerating deployment of generative AI tools by individuals seeking to deceive, defame, or manipulate public opinion through fabricated videos, images, and audio recordings.
The emergence of this crisis coincides with Malaysia's legislative response through the Online Safety Act 2025, which introduced a Risk Mitigation Code (RMC) framework specifically designed to address AI-generated harms. Under this regulatory architecture, social media platforms holding operating licences must now establish and maintain proactive measures targeting synthetic media content. These requirements represent a significant shift in platform accountability, moving beyond reactive content moderation toward predictive systems designed to identify and flag potentially harmful AI-generated material before it gains widespread distribution.
Teo explained that the MCMC has begun systematic engagement with licensed platform operators to assess their compliance with these new obligations. This oversight process involves evaluating whether platforms have implemented adequate technical infrastructure, content review policies, and detection mechanisms capable of identifying deepfakes and other AI-manipulated content. The commission's approach reflects international best practices seen in jurisdictions grappling with similar challenges, though Malaysia's implementation carries particular urgency given the region's vulnerability to election-related disinformation and cross-border influence campaigns.
Beyond content removal, the MCMC provides critical support to law enforcement agencies investigating AI-enabled crimes. The commission offers technical forensic assistance, including digital profiling and evidence analysis, enabling police and other enforcement bodies to build prosecutorial cases against deepfake creators and distributors. This collaborative approach acknowledges that combating synthetic media requires expertise spanning multiple domains—from computer science and digital forensics to criminal investigation and legal prosecution.
A parallel concern dominating recent parliamentary questioning involves fraudulent advertising on social media platforms, where scammers have exploited lax identity verification processes to launch deceptive promotional campaigns. In response, the RMC now mandates that licensed platforms implement mandatory advertiser identity verification protocols, drawing on official databases such as those maintained by the Companies Commission of Malaysia. This requirement aims to prevent bad actors from operating under false business identities and reduces the ability of scammers to launder fraudulent marketing campaigns through legitimate-appearing corporate accounts.
The regulatory teeth embedded within the Online Safety Act carry meaningful deterrent value. Platforms that demonstrate non-compliance with Risk Mitigation Code obligations face prosecution, with convictions triggering financial penalties up to RM1 million, supplemented by additional civil penalties reaching RM10 million. This graduated penalty structure—substantially higher than previous regulatory frameworks—signals government intent to enforce compliance seriously and creates economic incentives for platforms to invest in robust content governance systems rather than treating such obligations as token compliance exercises.
For Malaysia and the broader Southeast Asian region, this enforcement action addresses vulnerabilities that extend beyond simple content moderation. Deepfakes targeting political figures, ethnic or religious communities, or financial institutions pose threats to democratic processes, social cohesion, and economic stability. The pre-election environment in several neighbouring countries has demonstrated how synthetic media can weaponise voter psychology and erode institutional trust. Malaysia's proactive stance, therefore, carries implications for regional digital stability and may influence regulatory approaches adopted by other ASEAN members facing identical challenges.
The scope and sophistication of deepfake operations have evolved considerably. Early iterations focused on crude fabrications easily dismissed by discerning viewers, yet contemporary generative AI systems produce content of such fidelity that detection requires technical analysis rather than visual inspection alone. This technological advancement has forced regulators to shift from public awareness campaigns toward systemic platform-level interventions and forensic investigation capabilities. The MCMC's involvement in technical profiling and digital forensics reflects this evolution in approach.
Moving forward, the effectiveness of Malaysia's regulatory framework depends significantly on sustained platform investment and consistent enforcement. The 11,600 takedowns represent the backlog of already-published content; preventing future proliferation requires platforms to deploy detection systems operating at ingestion or shortly after upload. Additionally, cross-border coordination becomes essential, as deepfake creators operating in other jurisdictions can target Malaysian citizens or institutions while remaining beyond the MCMC's direct jurisdiction. International cooperation agreements and shared intelligence protocols with counterpart regulators in Singapore, Thailand, and other regional neighbours could amplify enforcement effectiveness.
The MCMC's strategic approach also reflects broader digital governance trends globally. Regulatory agencies are moving beyond content removal toward systemic accountability, requiring platforms to incorporate values such as truthfulness and user safety into core operational architecture rather than treating them as post-hoc compliance burdens. Malaysia's Risk Mitigation Code exemplifies this philosophical shift, placing emphasis on prevention and platform responsibility rather than government censorship. This distinction matters considerably for maintaining public confidence in the regulatory process and avoiding the appearance of authoritarian content control.
