Malaysia's Deputy Communications Minister Teo Nie Ching has underscored the importance of full compliance with the Risk Mitigation Code as a critical mechanism for stemming the rising tide of online fraud that continues to plague the nation's digital ecosystem. Speaking at an event in Klang on August 20, Teo emphasised that the government's confidence in the existing legal framework rests on platforms' willingness to implement the verification protocols introduced under the Online Safety Act 2025 (Act 866), which formally took effect on June 1 this year.
At the heart of the Risk Mitigation Code lies a straightforward but potentially powerful requirement: online platforms must rigorously identify and verify all advertisers before permitting paid advertisements to appear on their services. This gatekeeping function addresses a fundamental vulnerability in Malaysia's digital advertising ecosystem, where bad actors have exploited the relative ease of placing ads to promote scams and distribute misleading content. The verification mandate aims to erect barriers that fraudsters find costly or impossible to circumvent, thereby reducing the volume of deceptive material reaching Malaysian users.
The severity of Malaysia's online fraud problem has prompted regulatory action, yet Teo's remarks reveal a pragmatic government approach centred on leveraging existing legislation rather than drafting entirely new laws. She noted that the current legal arsenal—comprising the Communications and Multimedia Act, the Online Security Act, and the Cybercrime Act—provides adequate tools to prosecute and prevent online crimes. This assessment suggests confidence that the problem lies not in legislative gaps but in the consistency of implementation and platform cooperation.
Early indicators of the code's impact appear encouraging. According to Teo, social media platforms have removed 99,693 pieces of fraudulent content as of mid-July, a figure that reflects both the scale of the fraud challenge and the emerging effectiveness of formal removal protocols. However, this statistic also highlights the sheer volume of harmful material continuing to circulate, underlining that compliance alone will not instantly solve the problem. The trend of rising removals could indicate either improved detection mechanisms or simply more fraudulent content being uploaded, suggesting the digital arms race between platforms and scammers continues to intensify.
Recognising that wholesale compliance will take time, regulators have granted online platforms a grace period extending through the end of 2025. This extended timeline reflects a pragmatic acknowledgement that platform infrastructure requires modification and that abrupt enforcement could disrupt legitimate advertising activities. The grace period also signals the government's willingness to work collaboratively with digital companies rather than imposing punitive measures, a strategy likely designed to encourage goodwill and proactive engagement from technology firms operating in Malaysia's competitive digital services market.
The implications of full Risk Mitigation Code adoption extend beyond fraud reduction to broader consumer confidence in Malaysia's digital economy. As e-commerce and online transactions become increasingly central to Malaysian commerce, consumer trust in digital platforms directly affects spending patterns and economic growth. When users feel protected from fraud, they engage more confidently with online services, benefiting retailers, payment providers, logistics companies, and the broader technology sector that underpins the digital economy.
Teo's comments also reflect awareness among policymakers that digital regulation requires balanced approaches. Rather than restricting online speech or imposing blanket content takedowns, the focus on advertiser verification targets the commercial infrastructure enabling fraud. This distinction matters because it allows legitimate users and content creators to continue operating while specifically disrupting the monetisation pathways that make large-scale fraud economically viable for criminal syndicates. The approach recognises that most online harms stem not from user-generated content per se but from bad actors leveraging platforms' advertising systems to reach victims at scale.
Beyond fraud mitigation, Teo highlighted the government's parallel interest in ensuring that Malaysia's digital infrastructure expansion proceeds in tandem with environmental sustainability. She praised SPX Express's deployment of electric delivery vehicles, framing this as consistent with government policy encouraging logistics companies to transition toward cleaner transportation. This dual focus—simultaneously advancing both digital safety and environmental responsibility—reflects a maturing national approach to technology governance that recognises complex interdependencies between digital adoption, commerce, and environmental management.
The connection Teo drew between online platform compliance and e-commerce growth underscores a critical insight: digital commerce depends fundamentally on consumer protection. The surge in online shopping has intensified demand for last-mile delivery services, creating pressure on logistics infrastructure and environmental resources. Yet this growth cannot be sustained if fraud erodes consumer confidence or if the logistics sector's environmental footprint becomes politically untenable. By encouraging both compliance with the Risk Mitigation Code and adoption of electric vehicles, the government aims to ensure that Malaysia's digital economy grows on foundations of trust and sustainability rather than becoming a source of widespread victimisation or environmental degradation.
For regional observers, Malaysia's approach to online fraud regulation demonstrates how Southeast Asian nations are beginning to move beyond purely reactive enforcement toward systematic, code-based governance frameworks. The Risk Mitigation Code represents an attempt to embed consumer protection standards directly into platform operations rather than relying solely on after-the-fact prosecution. Whether this model succeeds will likely influence how other ASEAN members design their own digital safety regulations in coming years.
Looking forward, the effectiveness of the Risk Mitigation Code will depend on several factors: the sincerity with which platforms implement verification procedures, the government's willingness to enforce compliance after the grace period expires, and whether scammers discover workarounds to circumvent advertiser verification systems. Teo's confidence that existing laws suffice to address online crimes suggests the government believes the primary challenge is execution rather than legislation—a view that will be tested as enforcement provisions take full effect in 2026. Malaysian consumers and businesses monitoring compliance developments in coming months will gain important insights into whether regulatory frameworks can meaningfully constrain digital fraud or whether this problem requires technological solutions that transcend legal mandates alone.
