# How to Make an MCMC Complaint About Harmful Content > How to report harmful online content to MCMC in Malaysia: report to the platform first, then file at aduan.mcmc.gov.my with URLs and dated screenshots. - URL: https://www.awarexone.com/research/mcmc-complaint-harmful-content-how-to - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-10-05 - Topics: Cross-platform, Content removal, Malaysia - Related service: Content removal: https://www.awarexone.com/social-media-recovery/social-media-content-removal ## Short answer Report the harmful content to the platform first, then file a complaint on MCMC's Consumer Redress Portal at aduan.mcmc.gov.my with the exact links and dated screenshots. Hacking, threats and personation also belong with the police. MCMC does not recover hacked accounts or unmask anonymous posters, and it gives priority to reports from the person affected. ## Summary - MCMC asks you to report harmful content to the platform, page owner or moderator first, and it gives priority to reports from the person affected. - If the platform does not act, you can file a complaint through MCMC's Consumer Redress Portal at aduan.mcmc.gov.my as an online content complaint. - Include the exact links, screenshots showing when the content was posted, sender and receiver IDs for chat apps, any police report and what you already sent the platform. - Under the Online Safety Act 2025, MCMC can instruct a licensed platform to make harmful content inaccessible, but hacking, threats, personation and defamation also go to the police. - MCMC does not recover hacked accounts, unmask anonymous posters or remove lawful content you simply dislike, and false or repeated complaints can be dismissed. - MCMC says it communicates through official channels, not private mobile numbers, so hang up on callers claiming to be MCMC officers and report them to 997 or the police. Someone has posted something about you, your family or your business that should not be online: an abusive video, a fake account using your photos, a scam page, or a stream of threatening messages. You reported it in the app, nothing happened, and now you are searching for how to complain to MCMC. The short answer: MCMC wants you to try the platform first, then file a complaint on its Consumer Redress Portal with specific links and dated screenshots. Some problems, such as hacking, threats and personation, belong with the police instead of, or as well as, MCMC. This guide walks through MCMC's own process, what it covers, what evidence to gather, what happens after you submit, and the limits worth knowing before you start. It is general information, not legal advice. Last checked: 5 October 2026. ## How Do You Make a Complaint to MCMC About Harmful Content? MCMC's [steps for online content complaints](https://www.mcmc.gov.my/en/faqs/online-content-problems/what-are-the-steps-required-for-me-to-lodge-a-comp) set out the order. First, report the content to the platform, content owner or moderator, using the platform's report tool if there is no contact detail. Second, lodge a complaint at [aduan.mcmc.gov.my](https://aduan.mcmc.gov.my/) with the specific URLs, screenshots showing the date and time the content was posted, sender and receiver IDs for WhatsApp, LINE or Telegram content, any police report, and copies of what you already sent the platform. Third, report to other agencies, such as PDRM, where the problem falls under their laws. MCMC says reports from the affected person are prioritised over reports from third parties. ## Urgent Situations: Put Safety Before Paperwork If someone has threatened to hurt you, knows where you live, or is pressuring you over intimate images, deal with your safety first. Call 999 if you are in immediate danger, and make a police report at the nearest station. MCMC's enforcement table lists threats to life or property under the Penal Code, enforced by PDRM. - Intimate images shared or threatened: use the platform's priority report option and see our guide to [removing intimate images shared without consent](https://www.awarexone.com/research/intimate-image-abuse-removal-malaysia) before anything else. - Content involving a child: report it on the platform and to the police. Do not download, forward or screenshot sexual material involving a child, even as evidence; describe where you saw it instead. - Threats or doxxing: keep the messages, do not reply, and take them to the police. Our guide to [making a police report for online harassment](https://www.awarexone.com/research/police-report-online-harassment-malaysia) covers what to bring. MCMC's [Online Safety Act FAQ](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-FAQ-English.pdf) says child sexual abuse material and financial fraud are classed as priority harmful content, which licensed platforms must make inaccessible as soon as possible. ## What MCMC Covers and What Goes to Another Agency MCMC is not the only agency that handles online content. Its [complaint page](https://www.mcmc.gov.my/en/make-a-complaint/make-a-complaint) and its content FAQ both say internet content is bound by every relevant Malaysian law, and that complaints can go to the agency responsible for that law. Picking the right one first saves time. *Based on MCMC's online content enforcement table and its Online Safety Act FAQ at the time of writing. The two MCMC pages word some entries differently.* | What you are dealing with | Who handles it, per MCMC's table | Your first move | | --- | --- | --- | | Obscene, indecent, menacing, false or grossly offensive content | MCMC, under the Communications and Multimedia Act 1998 | Report on the platform, then complain to MCMC | | Harassment, distress, fear or alarm | Listed as harmful content under the Online Safety Act 2025; MCMC receives reports | Platform report, then MCMC; police as well if there are threats | | Threats to life or property | PDRM, under the Penal Code | Police report first | | Hacking of your account | PDRM, under the Computer Crimes Act 1997 | Platform's hacked account process and a police report | | Fake account or identity theft, cheating by personation | PDRM, under the Penal Code | Platform impersonation report, then police | | Defamation | PDRM under the Penal Code, or civil action under the Defamation Act 1957 | Keep evidence and speak to a lawyer | | Online scams and fraud | PDRM, Bank Negara Malaysia, KPDN and others depending on the law | Bank or NSRC on 997 if money moved, then police | | Copyright infringement | KPDN, under the Copyright Act 1987 | Platform copyright form | | Misuse of personal data or a data breach | The personal data protection authority, under the Personal Data Protection Act 2010 | Platform privacy report, then the data protection authority | The Online Safety Act lists nine harmful content categories, including financial fraud, obscene or indecent content, content that may cause harassment, distress, fear or alarm, and content that may incite violence. If what you are reporting fits none of them and breaks no other law, a complaint is unlikely to succeed. ## Step One: Report to the Platform First MCMC's [Reporting and Support page](https://www.mcmc.gov.my/en/onsa/information-hub/reporting-support) says you may report directly to licensed service providers such as Facebook, WhatsApp and TikTok through the platform or the post. Do it even if you expect nothing; MCMC's complaint steps ask you to include copies of anything you sent. The [Online Safety Act 2025](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/Online-Safety-Act-2025-Act-866.pdf) gives that report some weight. Section 21 says a licensed platform must acknowledge your report, tell you its status in writing, and assess it within a period set by regulations. If it dismisses the report, it must tell you, and you can ask it to look again and give your reasons. 1. Use the report option on the exact post, comment, video, profile or message, not just the account in general. 2. Choose the category that honestly fits, such as harassment, impersonation or nudity. 3. Screenshot the confirmation screen or save the confirmation email, with the date visible. 4. Check the platform's support inbox or report status page for the outcome, and screenshot that too. 5. If the report is dismissed and you believe that is wrong, use the review or inquiry option the platform offers. Which platforms carry these duties matters. MCMC's [duties page](https://www.mcmc.gov.my/en/onsa/information-hub/duties-under-onsa) says internet messaging and social media services with eight million or more users in Malaysia fall under the licensing framework from 1 January 2025. MCMC's [ONSA overview](https://www.mcmc.gov.my/en/onsa/information-hub/about-onsa) says the Act came into force on 1 January 2026 and is enforced by MCMC, and its FAQ adds that the Act applies to licensed service providers, not to individual users. ## Step Two: File the Complaint at aduan.mcmc.gov.my MCMC's Consumer Redress Portal is at [aduan.mcmc.gov.my](https://aduan.mcmc.gov.my/). MCMC's complaint page lists online content problems as one of the complaint categories it handles. The portal's layout and wording may change, so follow what it shows on the day. 1. Type aduan.mcmc.gov.my into your browser yourself, not a link someone sent you. 2. Choose the online content category, and register or log in with an email you check often. 3. Describe the problem in a few factual sentences: what the content is, where, since when, and how it affects you. 4. Paste every specific URL, one per line, rather than a single profile link. 5. Attach your screenshots, the platform report confirmation and any police report. 6. Say clearly whether you are the person affected or reporting for someone else, since MCMC prioritises self-reports. 7. Submit, and save the complaint reference the portal gives you. MCMC's complaint page also lists the email aduanskmm@mcmc.gov.my and the MCMC Consumer Care Centre hotline on 1800-188-030, which it says runs from 8.30am to 5.30pm, Monday to Friday. ## Evidence Checklist for an MCMC Complaint MCMC's content FAQ names the items it wants. The list below adds what makes each item usable. Our guide to [collecting evidence before you report harassment](https://www.awarexone.com/research/collect-evidence-before-reporting-harassment) explains the capture steps in more detail. - The exact URL of each post, video, comment or profile. Copy it from the share option or the browser address bar. - Screenshots that show the content, the account name, and the date and time it was posted. Capture the page with the URL or app header visible where you can. - For WhatsApp, LINE, Telegram or similar: the sender's number or user ID, the receiving number or ID, and screenshots of the messages. If the problem is your own chats being posted, see [what to do when someone posts your private chat screenshots](https://www.awarexone.com/research/remove-leaked-private-chat-screenshots). - The username and display name of the account, written out in full, because names can change after you report. - Your platform report confirmations and any reference numbers or reply emails. - Copies of any letter or email you sent the site owner, page admin or moderator. - A police report, if you made one. MCMC lists it as supporting material, not a requirement. - A short dated timeline: when it started, what you reported where, and what happened after. > Note: **Keep the originals.** Back up your screenshots and recordings. Never crop out dates or annotate the originals; mark up a copy instead. ## What Happens After You Submit Section 24 of the Act lets any user report harmful content to MCMC, whether or not they reported it to the platform, and also covers harmful content on services that are not licensed platforms. MCMC must acknowledge the report, tell you its status in writing and assess it, within periods set by regulations. The Act does not give a number of days, and we will not guess one. - Dismissed: MCMC must dismiss a report it considers frivolous, vexatious, not made in good faith or trivial, or one about content already reported to it. It tells you in writing, and you can ask it to reconsider and give reasons. - Found harmful, on a licensed platform: under section 25, MCMC issues a written instruction requiring the platform to make the content permanently inaccessible to all users within a set period, and then notifies you of the action taken. - Found harmful, elsewhere online: MCMC can instruct a licensed network service provider to restrict access so the content becomes inaccessible. - Found not harmful: MCMC tells you in writing that it has decided the content is not harmful content. If you reported to both the platform and MCMC and they reach different conclusions, section 28 says MCMC's instruction or decision prevails. The Act also lets MCMC instruct a platform to make content accessible again, so the power cuts both ways. ## What an MCMC Complaint Cannot Do An MCMC complaint is a regulatory route for harmful content, not a fix for every online problem. - It does not recover a hacked account. That goes through the platform's own recovery process, with a police report for the hacking itself. - It does not reveal who runs an anonymous account. Do not try to unmask the person yourself; leave identification to the police if a crime is involved. - It does not remove lawful content you disagree with. Criticism, bad reviews and unflattering opinions usually stay up unless they break a law or fall into a harmful content category. - It does not settle defamation. MCMC's own table points defamation to PDRM or to civil action, and a civil claim needs a lawyer. - It does not promise removal or a timeline. MCMC and the platform make the decision. For a fuller picture of how a removal request moves through a platform's review, see [how content removal works in Malaysia](https://www.awarexone.com/research/how-content-removal-works-malaysia). ## Reporting a Fake Account to MCMC For a fake account, start with the platform's impersonation form, because the platform can remove the account directly. If it is cheating people in your name, MCMC's table lists cheating by personation and identity theft under the Penal Code, enforced by PDRM, so make a police report too. If it runs a scam, financial fraud is priority harmful content under the Online Safety Act, which strengthens an MCMC complaint. If a fake website or login page is involved, CyberSecurity Malaysia's [Cyber999 service](https://www.cybersecurity.my/portal-main/services/cyber999-overview) is the national point of contact for computer security incidents and accepts reports by online form, email, phone and its app. ## Mistakes That Weaken a Complaint - Skipping the platform report. MCMC's first step is the platform, and it asks for copies of what you sent. - Sending a profile link and "please take this down". Specific URLs and dated screenshots are what MCMC asks for. - Asking friends to file the same complaint. The Act lets MCMC dismiss reports about content already reported to it, so a pile of identical complaints adds nothing. - Exaggerating, or choosing a category that does not fit. The Act lets MCMC dismiss a report that is not made in good faith, and a false report wastes the time your real complaint needs. - Replying to the poster or posting about them in return, which escalates things. - Paying someone who promises a guaranteed takedown. No one outside MCMC and the platform controls the decision. > Warning: **Fake MCMC officers.** Some scam calls come from people claiming to be MCMC officers. In a [public notice](https://www.mcmc.gov.my/skmmgovmy/media/General/PressRelease/NOTIS_PEMBERITAHUAN_PANGGILAN_SCAM_INDIVIDU_MENYAMAR_PEGAWAI_TRIBUNAL.pdf), MCMC said it has no body called the "MCMC Tribunal", and that its announcements go through its official website and social media, not personal names or private mobile numbers. Hang up and report suspicious calls to the NSRC on 997 or the police. The [NSRC FAQ](https://nfcc.jpm.gov.my/index.php/en/about-nsrc) adds that NSRC, PDRM, MCMC, BNM and banks will never ask for your username, password, PIN, TAC or OTP. ## When a Case Review Makes Sense Most people can file a platform report and an MCMC complaint themselves. A second opinion helps when the content spans several platforms, uses a business name, or does not clearly fit one route. SocialSafe by AwareXone looks at the links first and tells you plainly which official routes are open, including when the honest answer is that the content is lawful and likely to stay up. You can read how we approach [content removal cases](https://www.awarexone.com/social-media-recovery/social-media-content-removal), and our [Trust Center](https://www.awarexone.com/trust) explains what we never do, from filing false reports to asking for your passwords. ## Frequently Asked Questions ### Can I complain to MCMC without reporting to the platform first? Yes. Section 24 of the Online Safety Act lets you report to MCMC whether or not you reported to the platform. MCMC's own guidance still recommends the platform first and asks for copies of what you sent. ### Can MCMC take down a post on Facebook or TikTok? MCMC does not delete posts itself. If it decides content on a licensed platform is harmful, it can issue a written instruction requiring the platform to make it permanently inaccessible. ### Can I report someone else's problem to MCMC? You can, but MCMC says reports from the affected person are prioritised over third-party reports. If you are helping a friend or relative, encourage them to file in their own name with your support. ### Is it free to make an MCMC complaint? MCMC's complaint pages do not mention any charge for filing through aduan.mcmc.gov.my. Be wary of anyone who asks for money to submit a complaint on your behalf. ### Does MCMC handle defamation? MCMC's enforcement table points defamation to PDRM under the Penal Code, or to civil action under the Defamation Act 1957. For a civil claim or an injunction, speak to a lawyer. ## Official sources - [MCMC: What are the steps required for me to lodge a complaint regarding online content? (read 5 October 2026)](https://www.mcmc.gov.my/en/faqs/online-content-problems/what-are-the-steps-required-for-me-to-lodge-a-comp) - [MCMC: Make a complaint, including the online content enforcement table (read 5 October 2026)](https://www.mcmc.gov.my/en/make-a-complaint/make-a-complaint) - [MCMC: Online Safety Act 2025, Reporting and Support (read 5 October 2026)](https://www.mcmc.gov.my/en/onsa/information-hub/reporting-support) - [MCMC: Consumer Redress Portal (read 5 October 2026)](https://aduan.mcmc.gov.my/) - [MCMC: About ONSA (read 5 October 2026)](https://www.mcmc.gov.my/en/onsa/information-hub/about-onsa) - [MCMC: Duties under ONSA (read 5 October 2026)](https://www.mcmc.gov.my/en/onsa/information-hub/duties-under-onsa) - [MCMC: Frequently Asked Questions, Online Safety Act 2025 (read 5 October 2026)](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-FAQ-English.pdf) - [Laws of Malaysia: Online Safety Act 2025 (Act 866), sections 21 to 28 (read 5 October 2026)](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/Online-Safety-Act-2025-Act-866.pdf) - [MCMC: Notice on calls from individuals posing as MCMC Tribunal officers, 2 February 2023 (read 5 October 2026)](https://www.mcmc.gov.my/skmmgovmy/media/General/PressRelease/NOTIS_PEMBERITAHUAN_PANGGILAN_SCAM_INDIVIDU_MENYAMAR_PEGAWAI_TRIBUNAL.pdf) - [NFCC: National Scam Response Centre FAQ (read 5 October 2026)](https://nfcc.jpm.gov.my/index.php/en/about-nsrc) - [CyberSecurity Malaysia: Cyber999 overview (read 5 October 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.