The Malaysian Communications and Multimedia Commission (MCMC) has successfully taken down more than 11,600 items of false or deepfake content stemming from nearly 12,500 complaints related to artificial intelligence misuse received since the beginning of 2024. Deputy Communications Minister Teo Nie Ching disclosed this enforcement milestone during parliamentary question time on June 30, highlighting the government's intensifying efforts to combat the growing menace of AI-manipulated media circulating across digital platforms in Malaysia.
The sheer volume of content removal reflects an alarming trajectory in how deepfakes are proliferating within Malaysian society. Complaints about deepfake content have exploded dramatically over this relatively short timeframe, jumping from just 917 cases recorded in 2024 to 3,612 complaints in 2025, before surging further to 7,967 incidents as of mid-June this year. This more than eightfold escalation underscores how deepfake technology has transitioned from a niche concern to a widespread problem affecting Malaysian citizens, businesses, and public figures alike. The acceleration in complaint volumes signals both increased public awareness of deepfakes and potentially a genuine surge in their creation and circulation.
The MCMC's approach relies on coordinating takedown requests with social media platform providers, leveraging the regulatory framework now in place to compel these companies to act swiftly against malicious content. This reactive enforcement mechanism, while demonstrating tangible results in terms of content removal, illustrates the ongoing challenge authorities face in responding to the velocity at which synthetic media spreads across digital networks. Each takedown represents a successful intervention, yet the rising complaint numbers suggest the problem is outpacing removal efforts in real time.
To address the systemic nature of AI misuse, the government has anchored its strategy in the Online Safety Act 2025, specifically through the Risk Mitigation Code (RMC) framework. This legislative approach represents a significant regulatory evolution, as it now mandates licensed social media platforms to implement comprehensive risk mitigation measures that specifically target AI-generated content. By embedding obligations directly into the licensing conditions of major platforms operating in Malaysia, the government has shifted from purely reactive enforcement toward preventative governance structures. The MCMC has begun engaging with these licensed platform providers to audit and assess their compliance with these new obligations, creating accountability mechanisms that extend beyond simple content removal.
Beyond the legislative framework, the MCMC has positioned itself as a technical resource for law enforcement agencies investigating AI-related crimes. The commission provides critical support through profiling of suspect accounts, digital forensic analysis, and other investigative tools that help identify perpetrators and trace the origins of deepfake content. This collaborative approach recognizes that technical expertise housed within the regulatory body can amplify the investigative capacity of police and other enforcement agencies tasked with pursuing criminal charges. By combining regulatory oversight with investigative support, Malaysia's approach reflects a more sophisticated understanding of how digital threats operate across institutional boundaries.
Proactive monitoring represents another layer of the MCMC's defensive strategy. Rather than waiting for public complaints, the commission actively scans social media platforms for AI-generated content that may violate regulations or Malaysian law. This surveillance function attempts to catch problematic content before it achieves wider circulation and causes reputational or financial harm to victims. However, the exponential growth in complaint volumes raises questions about whether proactive monitoring capabilities can keep pace with the rate of new deepfake generation, particularly as AI tools become easier for malicious actors to deploy.
A related dimension of the deepfake crisis involves scam advertising on social media platforms, which often leverages fake identities and synthetic media to deceive consumers. Teo noted that licensed platforms are now required to verify the identities of advertisers using mechanisms such as registration checks through the Companies Commission of Malaysia. This requirement aims to prevent fraudsters from establishing legitimate-appearing accounts and running deceptive promotional campaigns. The identity verification requirement represents an important gate against one common vector for scam deployment, though sophisticated actors may find ways to circumvent such checks through stolen credentials or complex corporate structures.
Enforcement teeth are critical to the effectiveness of any regulatory regime. Platforms that fail to meet their obligations under the Risk Mitigation Code face prosecution in Malaysian courts, with convicted violators liable to maximum fines of RM1 million. Beyond this primary penalty, the legislation empowers authorities to impose additional financial penalties reaching up to RM10 million, creating a significant financial disincentive for non-compliance. For large technology companies operating across multiple jurisdictions, such penalties may represent meaningful costs that encourage genuine investment in content moderation and AI detection systems rather than token compliance efforts.
For Malaysian readers and businesses, the implications of this deepfake surge extend beyond abstract concerns about media manipulation. Deepfakes have been weaponized to damage reputations of business executives, create false evidence in disputes, manipulate stock prices through synthetic videos of corporate leaders, and facilitate romance and financial scams targeting vulnerable populations. The government's regulatory escalation reflects recognition that traditional defamation and fraud laws are insufficient when applied to synthetic media that can be generated in minutes by non-technical actors using freely available tools.
Regionally, Malaysia's approach to AI governance through the Online Safety Act and RMC framework positions it among Southeast Asian nations attempting comprehensive digital regulation. The specificity of deepfake-focused provisions and the aggressive enforcement posture may serve as a model for other ASEAN countries grappling with similar challenges, though implementation success will depend on continued investment in technical capacity and sustained pressure on global platforms to comply with local requirements.
Looking forward, the trajectory of complaint volumes suggests this remains a rapidly evolving crisis. While removing 11,600 pieces of content represents significant action, the pace of new complaints indicates that both supply and demand for deepfakes continue accelerating. The government's multifaceted approach—combining legislative requirements, platform compliance audits, investigative support, proactive monitoring, and escalating penalties—addresses the challenge comprehensively, yet the ultimate effectiveness will depend on how quickly AI detection technology can adapt to increasingly sophisticated generation methods and whether platform investment in these areas matches regulatory expectations.
