The Malaysian government has moved aggressively to combat artificial intelligence-generated deception, removing more than 11,600 deepfake videos and images from social media platforms following formal requests from the Malaysian Communications and Multimedia Commission. Deputy Communications Minister Teo Nie Ching disclosed the scale of the crackdown during parliamentary question time, underscoring the escalating threat posed by manipulated media to Malaysia's information ecosystem.
The trajectory of deepfake-related complaints paints a stark picture of accelerating misuse. In 2024, the MCMC received 917 reports concerning deepfake material. That figure mushroomed to 3,612 in 2025, and by mid-June this year, complaints had jumped to 7,967—a surge exceeding eightfold growth across just eighteen months. The exponential rise reflects both increased public awareness of deepfakes and their proliferation across Malaysian digital spaces, where social media remains the primary vector for distribution of manipulated audio and video content targeting public figures, businesses, and ordinary citizens.
Understanding the regulatory framework that now governs this domain is crucial for Malaysian businesses and digital platform users. The Online Safety Act 2025, which came into force with significant provisions regarding AI-generated content, introduced the Risk Mitigation Code—a mandatory compliance instrument binding all licensed social media platform operators. Rather than relying solely on reactive enforcement after content appears, the RMC establishes proactive obligations requiring platforms to implement technological and procedural safeguards specifically designed to detect, prevent, and remove AI-generated deepfakes before they circulate widely.
The MCMC's engagement with licensed platform providers represents an ongoing audit of compliance with these new standards. Ministry officials have been systematically assessing whether Meta, TikTok, X, YouTube, and other major social media operators are genuinely meeting their obligations to implement risk mitigation measures. This supervised approach acknowledges that technology companies possess superior capability to identify and filter manipulated media at scale—capabilities that government bodies alone cannot replicate. The MCMC functions not as the sole enforcement agent but as a coordinator ensuring platforms deploy their technical infrastructure toward Malaysia's public interest.
Beyond content removal, the government has recognized that combating deepfakes requires complementary strategies addressing the infrastructure underlying fraudulent activities. Licensed social media platforms now face mandatory requirements to verify the identities of advertisers, drawing on official databases maintained by the Companies Commission of Malaysia and other authorized agencies. This verification requirement specifically targets scammers who previously exploited the ease of creating fake accounts to peddle fraudulent schemes. By closing this avenue, regulators hope to disrupt the financial incentive structures motivating some deepfake creators, who often weaponize manipulated content for extortion, romance scams, or investment fraud.
The enforcement teeth embedded in the RMC are substantial. Platforms that breach their obligations now face potential prosecution in court, with convicted operators liable for fines reaching RM1 million, supplemented by additional financial penalties up to RM10 million. For multinational technology companies accustomed to regulatory fragmentation across global markets, Malaysia's penalties establish clear economic consequences for negligence. This framework transforms platform compliance from a voluntary corporate responsibility initiative into a legal imperative with six-figure financial stakes.
Malaysia's approach reflects broader Southeast Asian trends toward regulating social media platforms more stringently. While neighboring countries remain in earlier regulatory stages, Malaysia's Online Safety Act 2025 represents one of the region's more comprehensive frameworks specifically addressing AI-generated content. The legislation acknowledges that deepfakes pose distinct challenges compared to conventional misinformation—deepfakes leverage synthetic media technology to create seemingly authentic audio-visual evidence of events that never occurred, rendering them particularly persuasive and difficult for untrained audiences to identify as fabrications.
The technical assistance the MCMC provides to law enforcement agencies underscores government recognition that identifying deepfakes demands specialized expertise. Digital forensic analysis, device profiling, and metadata examination reveal traces of AI generation invisible to casual observation. By maintaining in-house capacity for these investigative techniques, the MCMC enhances the entire enforcement ecosystem, enabling police and other agencies to prosecute deepfake creators rather than merely removing content post-hoc. This upstream intervention strategy addresses root causes rather than symptoms.
For Malaysian citizens and businesses, the implications are multifaceted. The heightened scrutiny of social media platforms should theoretically reduce exposure to deepfake-based scams and reputational attacks. Simultaneously, the verification requirements for advertisers provide some assurance that commercial content circulating through licensed platforms has undergone identity confirmation. However, the speed of technological change and the global distribution networks through which deepfakes spread mean that regulatory measures inevitably lag behind capability. Deepfake creators operating internationally can still target Malaysian audiences, though the friction introduced by the Online Safety Act 2025 raises the difficulty and cost of such operations.
The surge in complaints ultimately reflects a maturing awareness among Malaysians that deepfakes represent a genuine threat. Public education initiatives coordinating with academic institutions and civil society have helped normalize reporting suspicious content to the MCMC. This reporting culture, while sometimes creating administrative burden, generates valuable intelligence about emerging threats and attacker methodologies. The government's responsiveness in publicizing removal numbers and enforcement actions reinforces that reporting produces tangible outcomes, potentially encouraging further disclosure of manipulated content.
