Malaysia has removed over 11,600 items of deepfake and false content generated through artificial intelligence misuse since the beginning of 2024, Deputy Communications Minister Teo Nie Ching revealed during parliamentary question time on June 30. The figure represents responses to nearly 12,500 complaints filed with the Malaysian Communications and Multimedia Commission (MCMC), demonstrating the scale of the nation's emerging crisis around AI-generated disinformation and its proliferation across digital platforms.
The trajectory of complaints paints an alarming picture for Malaysian internet regulators and policymakers. Deepfake-related grievances jumped dramatically from just 917 cases recorded during 2024 to 3,612 in 2025, before reaching 7,967 by mid-June this year. This eightfold explosion underscores how rapidly synthetic media technology is outpacing both public awareness and enforcement capacity in the region. The acceleration suggests that as awareness of deepfake risks spreads, citizens are increasingly reporting incidents—or alternatively, bad actors are deploying the technology with greater sophistication and frequency.
The MCMC's response mechanism relies heavily on formal takedown requests submitted directly to technology companies operating major social media platforms. This approach, while straightforward in theory, faces inherent challenges in enforcement given the cross-border nature of digital content and the resource constraints faced by regional regulators. The commission works reactively to complaints submitted by the public and verified through investigation, rather than deploying artificial intelligence systems that might proactively detect and flag suspicious synthetic content before it reaches massive audiences.
Recognising the limitations of complaint-driven enforcement, the Malaysian government has introduced a regulatory framework designed to shift responsibility toward platform operators themselves. The Risk Mitigation Code (RMC) codified within the Online Safety Act 2025 mandates that all licensed social media platforms establish comprehensive safeguards specifically targeting AI-generated content. This represents a significant departure from earlier regulatory approaches that treated deepfakes as a subset of broader misinformation concerns, instead recognising them as a distinct category requiring specialized detection and removal protocols.
Platform compliance with these obligations remains an active area of oversight. The MCMC has undertaken systematic engagement with licensed platform providers to evaluate whether they are meeting their mandated responsibilities under the RMC framework. This assessment phase is critical, as platforms must demonstrate not merely passive responsiveness to takedown requests, but proactive development of technical systems capable of identifying and flagging AI-generated content before harmful distribution occurs. The evaluation process will likely reveal significant capacity gaps, particularly among smaller regional platforms lacking the engineering resources of global technology giants.
Beyond content removal, the MCMC has positioned itself as a technical partner to Malaysia's law enforcement and intelligence agencies. The commission provides forensic analysis, digital profiling, and investigative support that extends the government's capacity to pursue criminal prosecutions of deepfake creators and distributors. This collaborative approach recognizes that while content takedown addresses the symptom, prosecuting the perpetrators addresses the root cause. However, the technical sophistication of advanced deepfake generation—including the use of increasingly realistic face-swapping algorithms and voice synthesis—presents formidable challenges for digital forensic teams operating within developing regulatory environments.
A secondary concern driving regulatory urgency is the weaponisation of AI-generated content for financial fraud. Licensed platforms are now required to implement advertiser verification systems that cross-reference identity information with government agencies such as the Companies Commission of Malaysia. These measures aim to prevent the creation of fraudulent accounts used to distribute scam advertisements to vulnerable users. The requirement creates friction in the platform user experience but represents a necessary trade-off between convenience and consumer protection, particularly as artificial intelligence makes the creation of convincing fake credentials increasingly feasible.
The enforcement teeth embedded in the RMC framework carry substantial financial consequences for non-compliance. Platforms convicted of failing to meet their obligations face fines up to RM1 million, with additional financial penalties reaching RM10 million in aggregate. These sanctions are designed to make regulatory non-compliance prohibitively expensive for platform operators, though questions persist regarding whether monetary penalties deter behaviour among multinational corporations for whom such fines represent manageable business costs. The threshold at which penalties become genuinely deterrent remains unclear in the Malaysian context, given that global technology companies operate across jurisdictions with vastly different regulatory regimes.
The emergence of Malaysia's deepfake crisis reflects broader Southeast Asian vulnerabilities to synthetic media manipulation. The region's high internet penetration combined with rapid smartphone adoption has created vast populations of digital consumers who may lack media literacy training to distinguish authentic from artificial content. Political polarization in several ASEAN nations amplifies the potential impact of strategically deployed deepfakes targeting electoral processes or public figures. Malaysia's regulatory response, therefore, carries implications extending beyond national borders, potentially establishing precedents that influence how other regional governments approach synthetic media governance.
Looking forward, the effectiveness of Malaysia's approach will depend substantially on whether platforms genuinely embed AI detection capabilities into their systems, or whether they deploy merely superficial compliance measures designed to satisfy regulatory scrutiny without meaningful investment in technology development. The MCMC's ongoing assessment of platform performance will reveal whether the RMC framework succeeds in reshaping corporate incentives. Additionally, the government faces the longer-term challenge of developing public awareness campaigns that equip citizens with the critical thinking skills necessary to identify deepfakes independently, rather than relying solely on platform enforcement and government takedown requests.
