Malaysia's crackdown on artificial intelligence-generated deception has intensified sharply, with Deputy Communications Minister Teo Nie Ching disclosing that authorities have successfully removed over 11,600 deepfake videos and images from social media platforms in the past 18 months. The removal campaign reflects mounting public concern about manipulated content flooding digital spaces, as the Malaysian Communications and Multimedia Authority (MCMC) works with international tech platforms to enforce compliance with local regulations.
The scale of the problem has become alarmingly apparent through official complaint data presented in Parliament. Deepfake-related complaints filed with authorities have climbed dramatically from just 917 cases in 2024 to 3,612 in 2025, and further surged to 7,967 by June 15 this year—representing more than an eightfold increase in less than two years. This trajectory suggests deepfakes are becoming an increasingly prevalent form of digital manipulation in Malaysia, with potential implications for public trust in online information and the integrity of political discourse.
The government has moved to establish a clearer legal framework addressing this emerging threat. Under the Risk Mitigation Code, a component of the Online Safety Act 2025, licensed social media platform providers now operate under mandatory obligations to implement specific risk mitigation measures. These requirements explicitly target AI-generated content and require platforms to deploy detection systems, content moderation protocols, and enforcement mechanisms designed to identify and remove deepfakes before they spread widely. The legislative approach represents a recognition that traditional content moderation policies were insufficient to handle the sophistication and speed of modern synthetic media.
Teo explained during parliamentary questioning that the MCMC has begun a systematic assessment process, engaging directly with licensed platform providers to evaluate their compliance with these new obligations. This supervisory role positions the regulator as an active monitor of platform behaviour rather than a passive recipient of complaint reports. The engagement appears designed to identify gaps in platform defences and ensure companies allocate adequate resources to detecting and removing deepfake material. For Malaysian internet users, this represents a shift toward more proactive government oversight of the information ecosystem.
Beyond reactive takedowns, authorities are employing advanced technical methods to trace and investigate deepfake origins. The MCMC provides critical support to law enforcement agencies through digital forensic analysis and profiling information that helps investigators identify perpetrators. This partnership between communications regulators and police forces recognises that deepfakes often serve as tools for larger crimes—spreading false information about public figures, creating non-consensual intimate imagery, or undermining trust in institutions. The technical assistance capability positions Malaysia's regulatory infrastructure as relatively sophisticated compared to some regional peers.
The deepfake challenge exists within a broader context of AI misuse that extends beyond synthetic media. As artificial intelligence tools become more accessible and user-friendly, their weaponisation for fraud, deception, and manipulation has accelerated across Southeast Asia. Malaysia's experience mirrors concerns raised in neighbouring countries about AI-enabled scams, fake endorsements, and synthetic identities. The sharp rise in complaints may reflect not only increased deepfake creation but also growing public awareness and willingness to report suspicious content to authorities.
Concurrently, the government has tackled another dimension of online deception by requiring social media platforms to implement stricter advertiser verification protocols. Licensed platforms must now confirm advertiser identities through official channels including the Companies Commission of Malaysia. This requirement aims to prevent fraudsters from creating fake accounts and running scam advertisements that exploit users' trust in established platforms. The measure addresses a practical vulnerability that bad actors have exploited, using deepfakes or misleading sponsored content to direct victims toward fraudulent schemes.
Enforcement mechanisms have been significantly strengthened to ensure platform compliance. Companies that fail to meet their obligations under the Risk Mitigation Code now face serious legal consequences, including prosecution in court with potential fines reaching RM1 million plus additional financial penalties of up to RM10 million. These substantial penalties create financial incentives for platforms to invest in compliance infrastructure rather than risking expensive litigation. For major technology companies operating in Malaysia, these stakes make regulatory compliance a significant business consideration that may influence their resource allocation decisions.
The legislative framework also reflects Malaysia's attempt to balance innovation with public safety. Rather than banning AI outright, the Risk Mitigation Code approach establishes guardrails that permit beneficial uses while restricting harmful applications. This regulatory philosophy differs from more restrictive approaches taken by some jurisdictions and reflects a pragmatic recognition that AI tools have legitimate commercial and creative applications. However, the success of this balanced approach depends entirely on platform compliance and the MCMC's capacity to monitor violations effectively.
For Malaysian citizens and businesses, the implications are multifaceted. The surge in deepfake complaints suggests these synthetic media are becoming increasingly prevalent in domestic information flows, potentially affecting everything from political reputation to consumer trust. Individuals may need to develop stronger scepticism about online videos and images, particularly those of public figures or celebrities. Businesses face risks that deepfakes could be weaponised against them through fake endorsements or compromising content attributed to executives. The regulatory response signals government commitment to addressing these harms, though questions remain about whether current enforcement capacity can match the exponential growth in AI capabilities.
Regionally, Malaysia's experience provides a case study for other Southeast Asian nations grappling with similar challenges. The dramatic rise in complaints and the legislative response demonstrate both the severity of deepfake proliferation and the potential for structured regulatory intervention. As other countries in the region develop their own AI governance frameworks, Malaysia's approach—combining technical oversight, platform accountability, and graduated penalties—may serve as a model for balancing innovation with consumer protection in the AI era.
