Malaysia's Communications and Multimedia Commission has flagged over 127,000 instances of scam-related content across various social media platforms since the start of 2024, according to Communications Minister Datuk Seri Fahmi Fadzil. The MCMC has submitted removal requests to the platforms concerned, representing a significant enforcement effort targeting what remains one of the most pervasive forms of digital crime in the country. The figures underscore the scale of fraudulent activity migrating to social channels, where sophisticated scammers exploit user trust and platform algorithms to distribute their schemes.
The distribution of these violations reveals a stark concentration on two dominant platforms. Facebook accounts for 53 percent of the detected scam content, while TikTok contributes 39 percent, together representing more than 92 percent of all infractions. The remaining seven percent spans other social media services, indicating that while fraud exists across the digital ecosystem, certain platforms with massive user bases and algorithmic recommendation systems have become primary targets for bad actors. This pattern mirrors global trends, where established platforms with mature user communities and higher purchasing power attract organised criminal networks seeking maximum reach and financial return.
These removal requests constitute approximately 27 percent of all content takedown applications filed by the MCMC during the same period, a proportion that highlights the dominance of financial crime among regulatory concerns. Beyond fraud, the commission contends with misinformation, hate speech, sexual exploitation material, and other categories of harmful content. The sheer volume of scam-related requests suggests both the intensity of criminal activity and the resource-intensive nature of content moderation, where each removal requires detailed documentation, evidence gathering, and formal communication with platform authorities.
The Communications Minister emphasised the resource constraints inherent in this enforcement model. Processing each content removal request demands between 30 to 45 minutes of MCMC personnel time, encompassing form completion and submission to relevant parties. Multiplied across 127,000 instances, this represents thousands of work-hours and considerable government expenditure. The time-intensive nature of individual takedowns has prompted the government to pursue systemic solutions through regulatory frameworks rather than relying solely on case-by-case interventions.
In response to these challenges, Malaysia has implemented new legislative instruments designed to address harmful content comprehensively. The Online Safety Act 2025, which came into force on June 1, established two mandatory codes for identified social media platforms: the Child Protection Code and the Risk Mitigation Code. These instruments represent a shift toward preventive regulation, requiring platforms to implement systems and policies that reduce harmful content circulation before it reaches massive audiences. Rather than react to problematic posts after publication, these codes mandate proactive measures by platforms themselves.
Platforms designated under the act face compliance deadlines spanning several months, during which they must demonstrate structural changes to content governance, user protection mechanisms, and reporting systems. This grace period reflects recognition that global platforms cannot instantaneously reconfigure their infrastructure, yet it also signals government resolve to enforce standards. The Child Protection Code specifically targets content that endangers minors, while the Risk Mitigation Code addresses material that threatens property or physical safety, both directly relevant to scam operations that devastate victims financially and psychologically.
The minister urged Malaysian citizens to adopt protective practices in their personal information consumption habits. The government has promoted two platforms specifically designed to counter misinformation and fraud: Sebenarnya.my, which fact-checks viral claims, and MyCheck, a verification portal offering credibility assessments of online content. By directing public attention toward these official resources and encouraging reliance on established news organisations, authorities hope to reduce vulnerability to scams that depend on rapid information spread and public credulity. This educational approach complements enforcement by building individual resilience.
The concentration of scam content on Facebook and TikTok warrants scrutiny regarding algorithmic recommendation systems. Both platforms employ machine learning to maximise user engagement, and scam content—particularly investment schemes and romance fraud—often generates high engagement rates through emotional appeals and illusory urgency. Financial incentives built into these algorithms may inadvertently privilege fraudulent content if it drives interaction metrics. The platforms face mounting pressure from regulators worldwide to acknowledge this potential misalignment between engagement optimisation and user safety.
For Malaysian users and businesses, the implications extend beyond individual victimisation statistics. Widespread scam activity erodes public confidence in digital commerce and financial transactions, potentially slowing economic participation in e-commerce and fintech services. Organised criminal networks operating from multiple jurisdictions exploit Malaysia's position as a developed economy with strong digital adoption but occasional regulatory gaps. The government's enforcement actions signal seriousness about protecting citizens and maintaining the integrity of Malaysia's digital ecosystem as a competitive advantage.
The broader context involves Malaysia's broader regulatory journey with technology platforms. Unlike Europe's comprehensive Digital Services Act or Australia's News Media Bargaining Code, Malaysia is charting a path that combines legislation with compliance timelines and industry dialogue. This approach requires sustained government capacity and political will to enforce standards, particularly as platforms test the boundaries of compliance and dispute enforcement determinations. The success of the Child Protection Code and Risk Mitigation Code will likely establish precedents for future regulatory efforts across Southeast Asia.
Moving forward, the MCMC's work demonstrates that detecting fraud is merely the initial step; achieving meaningful removal and prevention requires resources, legislation, and platform cooperation. The organisation's statistical documentation serves both as evidence of the problem's scope and as justification for expanding regulatory authority. For ordinary Malaysians, the figures offer a sobering reminder of digital risks while suggesting that institutional infrastructure for protection is developing, albeit imperfectly.
