Malaysia recorded 35,470 online fraud cases in 2024, resulting in RM1.5 billion in losses [1, 2]. The number of cases more than doubled in 2025 to 74,744, with losses increasing to RM2.9 billion [1, 2]. In the first four months of 2026, 23,367 fraud reports amounted to RM680.3 million in losses nationwide [1, 2].
E-commerce fraud accounted for 2,566 cases from January to April 2026, while telecommunication fraud made up 1,369 cases, signaling diverse threats to consumers and businesses [3]. There are over 1 million micro, small, and medium enterprises (MSMEs) in Malaysia, mostly in the service sector, relying on digital platforms for market access [3].
Since 2022, Malaysian Communications and Multimedia Commission (MCMC) submitted 59,290 takedown requests for harmful content online, including cyberbullying and fake news [1, 2]. Platforms removed 44,676 pieces of such content following MCMC actions [1, 2].
Malaysia launched a nationwide Safe Internet Campaign in January 2025, conducting over 11,000 activities and reaching more than 1.8 million participants by April 2026 [1, 3]. In Sarawak, 114,608 people joined, including 26,616 students in Kuching and nearby areas [1, 3].
On May 22, 2026, Deputy Minister Teo Nie Ching announced two new codes under the Online Safety Act: the Child Protection Code (CPC) and the Risk Mitigation Code (RMC), which came into effect June 1, 2026, aiming to protect children and vulnerable users online [2]. She said, "This shows that the threat of cybercrimes is becoming more serious and requires comprehensive action" and noted the codes "set clear expectations and responsibilities for service providers in dealing with harmful content" [2].
The Communications Ministry also runs Tabung Kasih@HAWANA, a welfare fund established in 2023 that has disbursed RM2.24 million to 766 media personnel nationwide, including 45 in Sarawak [3].
The increase in fraud cases highlights the challenges faced by Malaysian consumers and digital businesses. The new online safety codes will start binding service providers from June 1, 2026, aiming to strengthen digital protections.
