The Malaysian Communications and Multimedia Commission has detected over 127,000 pieces of fraudulent content on social media platforms and demanded their removal by operators since the start of the year, Communications Minister Datuk Seri Fahmi Fadzil announced on Monday. The figures underscore the scale of online scam activity targeting Malaysian users through major global platforms, with the MCMC pursuing an aggressive compliance strategy to combat the rising tide of digital fraud.
Between January 1 and mid-August, Facebook hosted the largest proportion of detected scam posts at 53 percent, while TikTok accounted for 39 percent of flagged content. Together, these two platforms represent the overwhelming majority of harmful material the regulator has identified, reflecting both their massive user bases in Malaysia and their apparent vulnerability to coordinated fraudulent campaigns. The remaining eight percent of removals involved content from other social media services, indicating that while fraud is distributed across the digital ecosystem, it remains heavily concentrated on the two market-leading platforms.
The scale of the MCMC's removal requests places scam-related content among the agency's most pressing concerns. These 127,000 takedown requests constitute 27 percent of all content removal notices the commission has issued during the period, meaning that approximately one in every four regulatory actions targets fraudulent material rather than other categories of harmful speech. This ranking highlights how online financial scams have become a dominant feature of the harmful content landscape in Malaysia, outpacing other categories in terms of the regulatory burden they impose.
Fahmi emphasised that the proliferation of scam content relies on the systematic use of fake accounts to mask the identity of perpetrators and build false credibility with potential victims. This modus operandi creates particular challenges for platform enforcement, since merely removing individual posts does not dismantle the underlying infrastructure of fraudulent accounts. The reliance on deceptive account creation suggests that scammers have adapted their tactics to exploit the difficulty platforms face in authenticating user identities at scale, a problem that becomes more acute as the volume of accounts grows exponentially.
In response to the persistence of harmful content, the government has introduced new regulatory tools under the Online Safety Act 2025, which came into force on June 1. The legislation establishes two binding codes that social media platforms must implement: the Child Protection Code and the Risk Mitigation Code. These frameworks represent a more prescriptive regulatory approach than previous guidance, setting specific obligations for operators to suppress content that threatens users' safety and financial security. Major platforms identified as falling within the Act's scope have been granted a transition period of several months to achieve full compliance with both codes.
The Risk Mitigation Code specifically targets content that poses threats to property and personal safety, a category into which financial scams clearly fall. Under this framework, platforms must demonstrate active measures to identify, remove, and prevent the circulation of such material, rather than responding passively to user reports or government requests. This represents a significant shift in accountability, placing responsibility on operators to proactively police their own services rather than treating regulation as an external function imposed by authorities. The Child Protection Code similarly obligates platforms to safeguard minors from exploitation and harmful content designed to compromise their wellbeing.
Fahmi acknowledged that implementing such compliance requirements demands substantial organisational effort from both the MCMC and the platforms themselves. Each piece of content flagged for removal requires MCMC personnel to spend between 30 and 45 minutes completing documentation and submitting requests through formal channels to the relevant platform. Multiplied across 127,000 individual instances, this administrative burden represents a significant investment of public resources, illustrating why the regulator has opted to negotiate transition timelines rather than impose immediate penalties for non-compliance. The time-intensive nature of content removal also explains why platform cooperation is essential; without voluntary compliance mechanisms, the government lacks sufficient personnel to maintain effective oversight of the vast volume of material circulating online.
The financial and operational costs of managing this compliance process extend beyond the MCMC's internal operations. Platforms themselves must allocate resources to process removal requests, investigate flagged content, and implement technological systems to reduce the volume of harmful material reaching users in the first place. This mutual dependence on cooperation reflects a broader challenge facing regulators globally: the impossibility of policing the internet unilaterally without enlisting platform operators as enforcement partners. Malaysia's approach, negotiating compliance timelines rather than pursuing punitive measures immediately, reflects a pragmatic recognition that technological and administrative capacity constraints make gradualism more effective than confrontation.
Beyond regulatory enforcement, Fahmi directed the public to utilise existing fact-checking and verification resources to protect themselves from fraud. The government maintains the Sebenarnya.my portal and MyCheck platform specifically to assist citizens in authenticating information and identifying misleading or fraudulent claims. By combining these consumer-facing tools with platform-level content removal and the new regulatory codes, the government is attempting a layered defence against scam operations. This strategy acknowledges that regulation alone cannot eliminate fraud; instead, informed and cautious user behaviour, supported by reliable information sources, must form part of the overall response.
The persistence of scam content despite the detection and removal efforts also points to the adaptive nature of fraudster operations. As platforms improve their enforcement capabilities and the MCMC intensifies its oversight, scammers refine their tactics, developing new account creation methods and content formats designed to evade detection. This dynamic process of escalation and counter-escalation suggests that the 127,000 removals detected thus far represent merely the detected fraction of total scam activity, with unknown quantities of fraudulent material slipping through unnoticed. The regulatory environment in Malaysia and across Southeast Asia will likely remain characterised by this ongoing cat-and-mouse competition for years to come.
For Malaysian consumers and investors, the MCMC's enforcement activity offers limited reassurance. Awareness that authorities are identifying and removing scam content may reduce exposure slightly, but the underlying incentive structures that drive scam operations remain intact. The profitability of online fraud, combined with the difficulty of prosecuting offenders who operate across borders and use sophisticated anonymisation techniques, ensures that fraudsters will continue targeting Malaysian users. The new regulatory framework and removal procedures represent incremental improvements in the operating environment for users, but they do not address the fundamental challenge of protecting digital citizens from determined, organised, and adaptive criminal enterprises operating within a largely borderless online sphere.
