The Malaysian Communications and Multimedia Commission (MCMC) has uncovered an alarming surge in scam-related content proliferating across social media networks, with more than 127,000 fraudulent posts detected and formally requested for removal since the start of the year. Communications Minister Datuk Seri Fahmi Fadzil disclosed these findings at a Cabinet press conference in Putrajaya on Monday, highlighting the scale of a problem that increasingly threatens Malaysian internet users' financial security and personal data.
The distribution of these malicious posts reveals a stark concentration on two dominant platforms. Facebook accounts for 53 percent of the detected scam content, whilst TikTok hosts 39 percent, together representing 92 percent of all fraudulent material flagged by the MCMC. This pattern underscores how mainstream social media channels—despite their maturity and established content moderation infrastructure—continue to serve as primary laundering grounds for criminal schemes. The remaining eight percent spans other platforms, suggesting that whilst certain networks may employ more rigorous anti-fraud measures, the broader social media ecosystem remains vulnerable to coordinated abuse.
Fahmi noted that these removal requests constitute 27 percent of the MCMC's total content takedown activity, a proportion that starkly illustrates scam proliferation as a leading concern in Malaysia's fight against harmful online material. The prominence of fraudulent schemes—particularly those operating through fabricated accounts designed to impersonate legitimate businesses or institutions—reflects an evolving threat landscape where scammers leverage the anonymity and reach afforded by social platforms to cast wider nets for unsuspecting victims. The scale of the operation suggests this is not isolated criminal activity but rather an organised ecosystem of coordinated fraud attempting to exploit Malaysian digital citizens on an unprecedented scale.
Recognising the information-verification gap that enables such schemes to flourish, the government has actively promoted alternative channels for content authenticity checks. The ministry encourages Malaysians to cross-reference claims using the Sebenarnya.my and MyCheck portals, both designed as crowdsourced fact-checking resources, whilst simultaneously relying on traditional mainstream media outlets as trusted repositories of verified information. This dual strategy acknowledges that whilst social media algorithms naturally amplify sensational and false narratives, institutional gatekeeping remains critical in an environment where computational systems can be manipulated to spread fraud at scale.
Beyond reactive content removal, the government has established a more proactive regulatory framework through the Online Safety Act 2025 (Act 866), which introduced two foundational compliance codes effective from June 1. The Child Protection Code (CPC) and Risk Mitigation Code (RMC) mandate that identified social media platforms implement systematic safeguards against material that endangers user property or personal safety. These codes represent Malaysia's most comprehensive attempt to establish mandatory standards for platform accountability, shifting responsibility from individual users to corporate operators who profit from user engagement.
Fahmi explained that identified social media platforms have been granted a grace period spanning several months to achieve full compliance with both codes, a timeframe ostensibly designed to allow platforms time to deploy necessary technical and administrative infrastructure. The extended implementation window reflects acknowledgment that compliance demands substantial resource allocation, particularly for platforms operating across multiple jurisdictions with varying regulatory requirements. Malaysia's approach thus mirrors strategies adopted by other Southeast Asian nations, though the specificity of Malaysia's codes addresses local threat vectors more directly than generic international compliance frameworks.
The logistical and financial burden of content removal was emphasised by the minister, who illustrated the resource intensity embedded in this enforcement mechanism. Each removal request processed by MCMC personnel requires between 30 to 45 minutes of dedicated effort merely to complete administrative forms and submit them to relevant platforms—a labour-intensive process that translates into substantial government expenditure. This bottleneck reveals a critical vulnerability: the asymmetry between the speed at which malicious content can be generated and distributed versus the glacial pace at which regulatory mechanisms can respond. Scammers operating algorithmically can generate hundreds of posts daily, whilst government officials manually process takedown requests, creating a structural disadvantage that favours perpetrators.
This structural constraint has profound implications for Malaysian digital society. The time lag between content publication and removal represents a window during which vulnerable users—particularly older Malaysians with limited digital literacy and those unfamiliar with common fraud tactics—remain exposed to financial exploitation. Scammers need only maintain a post online for hours to reach sufficient audience and extract funds, making the 30-to-45-minute processing window largely irrelevant to their operational success. The MCMC's transparency about these resource limitations implicitly suggests that sustainable solutions require platform-level automation and AI-driven detection rather than government-led manual intervention alone.
The prominence of scam content on Facebook and TikTok also reflects deeper platform dynamics that create fertile ground for fraudulent schemes. Facebook's user base skews older in Malaysia, a demographic that research consistently shows is more susceptible to financial fraud. Meanwhile, TikTok's algorithm—whilst designed to maximise engagement through novelty and viral content—inadvertently amplifies scam videos because such content often generates high interaction rates as users share warnings and comments. The platforms' commercial incentive structures, which prioritise user engagement metrics, create perverse dynamics where harmful content receives algorithmic promotion precisely because it provokes strong user responses.
For Malaysian consumers and small businesses, the prevalence of these schemes represents a tangible threat to digital commerce adoption and financial inclusion. Fraud victims often become reluctant to conduct online transactions, undermining the digital economy's growth. Similarly, legitimate small enterprises operating through social media find their brands compromised when scammers impersonate their accounts to perpetrate fraud. This erosion of trust in digital commerce creates upstream economic consequences that extend far beyond individual victim losses, potentially constraining Malaysia's digital transformation agenda.
The MCMC's enforcement approach also highlights tensions inherent in regulating a digital commons that operates across national boundaries but remains subject to national law. Facebook and TikTok, as foreign-owned platforms, must balance compliance with Malaysia's Online Safety Act against operational demands from other jurisdictions with competing regulatory frameworks. This fragmentation means that resources devoted to Malaysian compliance cannot be wholly redirected from other markets, potentially explaining the gradual timeline for platform compliance. As digital regulation proliferates globally, the cumulative compliance burden on platforms may paradoxically reduce their capacity to address any single jurisdiction's specific concerns.
Looking forward, the MCMC's enforcement approach must evolve to match the sophistication and scale of organised fraud operations. Whilst the grace period allows platforms time for systematic compliance, the fundamental mismatch between automated fraud generation and manual removal processing suggests that sustainable progress requires deeper technological integration. Real-time detection systems, cross-platform information sharing, and coordinated international law enforcement remain critical to disrupting organised scam networks operating across borders. Malaysia's regulatory framework thus represents both a critical step toward platform accountability and an implicit acknowledgment that unilateral national action, whilst necessary, remains insufficient against transnational digital crime.
