Malaysia's regulatory authorities have intensified efforts to combat the proliferation of deepfake videos and AI-generated misinformation, with Deputy Communications Minister Teo Nie Ching disclosing that over 11,600 instances of such harmful content have been successfully taken down since the start of 2024. The removals came after formal takedown requests filed by the Malaysian Communications and Multimedia Authority with social media platforms, underscoring the government's assertive stance on digital safety in an era of increasingly sophisticated artificial intelligence technologies.
The scale of the deepfake problem facing Malaysia has grown at an alarming rate, with official complaints surging more than eightfold within just eighteen months. The statistics paint a concerning picture: complaints numbered 917 in 2024, jumped to 3,612 in 2025, and had already reached 7,967 by mid-June this year. This explosive growth reflects both the accelerating accessibility of deepfake creation tools and greater public awareness of the threat posed by manipulated media, though it remains unclear how much of the increase stems from genuine proliferation versus improved detection and reporting mechanisms.
To address this challenge, the Malaysian government has implemented a comprehensive regulatory framework through the Risk Mitigation Code established under the Online Safety Act 2025. This legislation represents a significant shift in Malaysia's approach to platform governance, moving beyond reactive takedowns to imposing proactive obligations on licensed social media platforms. These requirements now mandate that providers establish and maintain specific risk mitigation measures targeting AI-generated content, establishing clear legal responsibility for platform operators in managing synthetic media on their services.
Teo's remarks during Parliament's Minister's Question time revealed that the MCMC is actively engaged with licensed platform operators to evaluate their compliance with these new obligations. This supervisory role extends beyond simple notification; the authority is conducting systematic assessments of how effectively platforms are implementing safeguards. The engagement process suggests a collaborative approach where regulators work with technology companies to develop practical solutions, though the emphasis on compliance verification indicates Malaysia is prepared to enforce consequences for non-compliance.
Beyond content removal, Malaysian authorities have adopted a multi-faceted strategy that leverages technical expertise and investigative resources. The MCMC provides crucial support to law enforcement agencies through technical assistance including the profiling of suspicious accounts and digital forensic analysis capabilities. Additionally, the authority conducts proactive monitoring of social media platforms specifically searching for AI-generated content, representing a shift from purely complaint-driven enforcement to anticipatory detection. This combination of reactive and proactive measures reflects an understanding that deepfake threats operate across multiple dimensions of social media activity.
The government has also tackled a related but distinct problem: fraudulent advertisements that prey on unsuspecting users. Licensed platforms are now mandated to implement identity verification procedures for advertisers, utilising official agencies such as the Companies Commission of Malaysia to confirm legitimacy. By preventing fake accounts from masquerading as legitimate businesses, these measures aim to disrupt the advertising infrastructure that enables scams. This approach recognises that deepfakes and fraudulent advertising often function in concert, with manipulated content amplifying deceptive commercial schemes.
The enforcement architecture backing these regulations carries substantial teeth. Platforms that fail to meet their obligations under the Risk Mitigation Code face significant legal consequences, with courts empowered to impose fines reaching RM1 million upon conviction. Beyond base penalties, regulators can levy additional financial sanctions totalling up to RM10 million, creating a powerful incentive structure for compliance. For multinational technology companies operating in Malaysia, these penalties represent material business risks that demand serious attention to local regulatory requirements.
The timing of Malaysia's regulatory push carries significance within the broader Southeast Asian context. As the region experiences rapid digital adoption and social media penetration, most neighbouring countries remain in earlier stages of formulating deepfake and AI-generated content policies. Malaysia's legislative approach under the Online Safety Act 2025 positions it as a regional frontrunner in establishing comprehensive digital safety frameworks, potentially influencing policy discussions across the Association of Southeast Asian Nations.
The exponential growth in complaints raises important questions about Malaysia's digital literacy landscape and the societal impact of deepfake proliferation. While the government has mounted an impressive technical and legal response, the underlying vulnerability—public susceptibility to manipulated media—requires sustained educational initiatives. The surge from 917 to nearly 8,000 complaints suggests that deepfakes are increasingly affecting ordinary Malaysians across political, commercial, and personal contexts, making this not merely a regulatory challenge but a broader threat to information integrity.
Looking ahead, Malaysia's deepfake enforcement approach will likely face evolving technical challenges as AI generation tools become more sophisticated and accessible. The current framework focuses on platform responsibility and content removal, yet it remains unclear whether these measures will prove sufficient as deepfake creation democratises further. Additionally, the distinction between regulated "licensed" platforms and emerging decentralised social platforms could create enforcement gaps, particularly if users migrate to less regulated alternatives.
The government's emphasis on platform accountability through the RMC represents a conscious decision to position technology companies as primary gatekeepers rather than relying solely on criminal enforcement against individual deepfake creators. This approach acknowledges both the practical difficulty of prosecuting thousands of individual offenders and the comparative efficiency of controlling content at the platform level. However, it also shifts significant compliance burdens onto service providers operating in Malaysia, potentially affecting their business models and content moderation costs.
