# How to Remove Harmful Social Media Content in Malaysia > Match harmful content to the right removal route in Malaysia: platform forms, StopNCII, MCMC under the Online Safety Act 2025, the police, and when defamation needs a lawyer. - URL: https://www.awarexone.com/research/social-media-content-removal-malaysia - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-09-28 - Topics: Digital identity, Content removal, Malaysia - Related service: Social media content removal: https://www.awarexone.com/social-media-recovery/social-media-content-removal ## Short answer Save the evidence first: links, dated screenshots and the account that posted it. Then report the content in the app under the reason that matches exactly, such as privacy for doxxing or harassment for threats. Use StopNCII for intimate images, the police for threats or blackmail, and a lawyer for defamation. The platform makes the final decision. ## Summary - Save the evidence first: links, dated screenshots and the account that posted it, because posts get deleted and stories expire. - Report inside the app under the reason that matches exactly, such as privacy for your IC number or address, or harassment for abuse and threats. - For intimate images of an adult, also open a case at StopNCII.org, and never forward the images to anyone offering help. - Go to the police for threats, blackmail or doxxing, report to MCMC if a licensed platform leaves harmful content up, and speak to a lawyer about defamation. - If anyone lost money to a scam using your name or face, they should call their bank or 997 immediately. Treat anyone who contacts you first offering removal for a fee as a red flag. - The platform makes the final decision, lawful criticism may stay up, and nobody can promise that a post will come down. A customer tags you in a comment late at night. A Facebook post, shared into three local buy-and-sell groups, shows your shop's name, your mobile number and your home address, with a claim that you took deposits and disappeared. None of it is true, and the comments are getting worse by the hour. What you do next depends on what the content is, not on how bad it feels. That one post holds two separate problems: your private details, which platforms remove under their privacy rules, and a false accusation, which most platforms will not judge without a court order. Each has its own route, and a report filed under the wrong category is often closed without a proper look. This guide matches each type of harmful content to the platform form and the Malaysian channel that fits it, explains what the Online Safety Act 2025 now requires of platforms, and lists the evidence to save before anything disappears. Last checked: 28 September 2026. ## How do you get harmful content removed from social media in Malaysia? Save the evidence first: links, dated screenshots and the account that posted it. Then report the content inside the app under the reason that matches it exactly: privacy for your IC number, address or phone number, nudity or sexual exploitation for intimate images, harassment for abuse and threats, the copyright form for work you created, and the impersonation form for fake accounts. For intimate images of an adult, also open a case at StopNCII.org. Under the Online Safety Act 2025, licensed platforms such as Facebook, Instagram, TikTok and YouTube must acknowledge a harmful-content report within an hour, and you can also report to MCMC at aduan.mcmc.gov.my. Go to the police for threats, blackmail or doxxing, and call your bank or 997 at once if money was lost. For defamation, speak to a lawyer. The platform makes the final decision. ## Which removal route fits your content? Platforms sort reports by category, each with its own reviewers and rules, so name the problem precisely before you file. *Match the content to its route. One post can need more than one report.* | Content type | Best route | Evidence needed | | --- | --- | --- | | A fake account using your name, photos or brand | The platform's impersonation form. Our [impersonation evidence guide](https://www.awarexone.com/research/impersonation-removal-malaysia) covers it step by step | Profile URL, screenshots, your ID or business proof | | Your IC number, home address, phone number or other private details (doxxing) | In-app report under privacy or personal information; police report if it comes with threats | Post URL, a screenshot kept privately, date and time | | Intimate images or sexual deepfakes of you shared without consent | In-app report, a StopNCII.org case (Take It Down if you were under 18), police report | Post links and a written description. Do not forward the images | | False statements that damage your reputation | In-app report if it also breaks platform rules; the platform's defamation form; a Malaysian lawyer | The exact words, URL, date, proof the statement is false, any loss it caused | | Your photos, videos or music reposted without permission | The platform's copyright form (owner or authorised agent only) | Link to your original, original files with dates, infringing URLs | | Your registered brand used to sell goods | The platform's trademark form | Trademark registration details, infringing URLs, product screenshots | | Scam ads or posts using your name or face | "Report ad" or a scam or fraud report; MCMC complaint if it stays up | Ad screenshot, advertiser Page URL, landing page URL | | Abuse, threats or a coordinated harassment campaign | In-app harassment report and block; police report for threats | Screenshots of each message or comment, account URLs, a dated log | ## Save the evidence before you report Posts get deleted and stories expire, and content that is gone is hard to show the police, MCMC or a lawyer. Capture it first: 1. Copy the link to each post, comment, video and the profile that posted it. 2. Take a full-screen screenshot of each item, with the account name and date visible. Screen-record videos and stories. 3. Write down the date and time you captured each item, in Malaysia time (MYT, UTC+8). 4. For an ad, also save the advertiser's name and Page link, and the address of the page the ad leads to. Do not enter any details on that page. 5. Keep everything in one folder and back it up somewhere other than your phone. 6. Log each report: the date, the reason you chose, any reference number and the platform's reply. > Warning: **Intimate images are different.** Keep what you need for your own report, but do not forward intimate images to friends, post them as proof or send them to anyone offering help. Describe them in writing, and let the police tell you what they need to see. ## Intimate images: StopNCII, platform reports and the police If intimate images of you have been shared, or someone is threatening to share them, report each post inside the app and open a case at [StopNCII.org](https://stopncii.org/) the same day. StopNCII is a free tool developed by Meta and the UK charity SWGfL. It creates a digital fingerprint, called a hash, of your image on your own device and shares only the hash with participating platforms, which use it to detect matching uploads. The image never leaves your phone. According to [StopNCII's FAQ](https://stopncii.org/faq/): - You must be the person in the image, have been 18 or older when it was taken, and have a copy of it. Sexual deepfakes of you count. - Participating platforms include Facebook, Instagram, Threads, TikTok, Reddit and Snap. Check the [partners page](https://stopncii.org/partners/industry-partners/), because not every platform takes part. - A cropped, filtered or clipped copy may not match the original hash, so it needs hashing separately. - It does not cover encrypted messaging services, so it cannot reach images passed around in private chats. - Your case number and PIN cannot be recovered if lost. Write them down somewhere safe. If you were under 18 in the image, use [Take It Down](https://takeitdown.ncmec.org/), run by the US National Center for Missing & Exploited Children, and report it to the police. > Warning: **If someone is demanding money or more images.** Do not pay and do not send anything else. Stop replying, keep the messages and make a police report. If you have already transferred money, call your bank's hotline or the National Scam Response Centre on 997 immediately. ## Private information and doxxing Doxxing means publishing someone's identifying details, such as an IC number, home address or phone number, to expose them to harassment. Report it under the platform's privacy category rather than general harassment, because privacy reviewers look for exactly this. Since 11 July 2025, Malaysia's Penal Code has specific offences for this. The [government's announcement](https://dmedia.penerangan.gov.my/upload/sm/11072025.1277949580.pdf) of the Penal Code (Amendment) Act 2025 says new sections 507B to 507G cover threatening, abusive or insulting communications meant to cause distress or fear, and that doxxing can carry up to three years in prison. If your details were posted alongside threats, or you fear for your safety, make a police report as well as a platform report. Afterwards, tighten who can see and contact you. Our guide to [securing your social media accounts in Malaysia](https://www.awarexone.com/research/social-media-security-malaysia) covers the settings. ## Scam ads and posts using your name or face Scammers put real people's names and photos on fake investment ads, giveaways and endorsements. That is a content problem, not an account recovery problem. On Facebook and Instagram, tap the menu next to the ad, choose "Report ad" and follow the prompts. If the ad has gone from your feed, Meta's [ad reporting help page](https://www.facebook.com/business/help/162606073801742) explains how to find and report it in the Meta Ad Library. Report the advertiser's Page too, and add an impersonation report if it poses as you. Then warn your followers from your real accounts and tell them how you actually take payment. Anyone who has already paid should call their bank or 997 straight away. Financial fraud is priority harmful content under the Online Safety Act 2025 (see below). ## Copyright and trademark: only for content you own A copyright report fits when someone reposts photos, videos, music or writing you created. It only works for the owner or someone authorised to act for them. Our guide to [proving what is yours](https://www.awarexone.com/research/prove-social-media-account-ownership) covers the evidence that shows ownership. - A photo someone else took of you usually belongs to the photographer. Report it as a privacy or harassment issue instead. - Meta's [copyright help page](https://www.facebook.com/help/325058084212425) says it regularly passes the rights owner's name, your email and the report details to the person who posted the content. Use a business email, or another category if that would put you at risk. - TikTok's [copyright form](https://www.tiktok.com/legal/report/Copyright) warns that false information can lead to suspension from the form or legal consequences. - A trademark report fits when your registered brand is used to sell goods. A logo on a fake account is usually an impersonation case first. - Never file either claim against content you simply dislike. ## Defamation: why platforms usually need a court order Defamation is a false statement that damages someone's reputation. It is the hardest content to remove, because platforms do not decide what is true. Facebook's [defamation reporting form](https://www.facebook.com/help/contact/430253071144967) says that without a court order establishing the content is unlawful, Facebook is not able to act on it. YouTube's [defamation requirements](https://support.google.com/youtube/answer/6154216) ask for the exact statements, not "the whole video", and say the uploader will be notified. Many defamatory posts also break a platform rule, such as harassment or sharing private details. Report those parts under the matching rule, which platforms can act on without a court. For the defamation itself, MCMC's [FAQ on online defamation](https://www.mcmc.gov.my/ms/faqs/online-content-problems-2024/8-i-was-defamed-in-blog-social-media-site) encourages civil action in court, and says the platform can be asked for the poster's details once you have the necessary court orders. You can also complain to MCMC if the content is false, offensive or indecent. Whether a statement is defamatory is a legal question, so speak to a Malaysian lawyer before any demand letter or public response. ## Harassment and threats Report abusive comments and messages under the platform's harassment or bullying category, then block or restrict the accounts. Reporting the account, not just one comment, helps the platform see a pattern. Threats of violence, stalking and blackmail belong with the police. Bring your screenshots and links, and keep a copy of the report. ## What each platform's reporting route looks like Every platform starts with the "Report" option on the post or profile. These forms, correct at the time of writing, handle what in-app reporting does poorly. - Facebook and Instagram: Instagram's [privacy violation form](https://help.instagram.com/contact/512241091300432) covers images or videos of you on Instagram or Threads and needs a link to the specific content. Instagram's [intimate image guidance](https://www.facebook.com/help/instagram/1769410010008691) says Meta uses photo-matching to stop a removed image being shared again on Instagram, Facebook and Messenger. - TikTok: the [privacy portal](https://www.tiktok.com/legal/report/privacy) routes you to the right form for bullying, impersonation, intellectual property and privacy concerns. - YouTube: the [privacy complaint process](https://support.google.com/youtube/answer/142443) requires you to be uniquely identifiable in the content. Its [privacy guidelines](https://support.google.com/youtube/answer/7671399) say the uploader may first get time to trim or blur the video, and that AI-altered content that looks or sounds like you can be reported. ## What the Online Safety Act 2025 requires of platforms The Online Safety Act 2025 (Act 866) has been in force since 1 January 2026, according to [MCMC's page for the Act](https://www.mcmc.gov.my/en/legal/acts/communications-and-multimedia-amendment-act-20-1). It places duties on licensed platforms, not on you. MCMC's [15 December 2025 statement](https://mcmc.gov.my/skmmgovmy/media/General/pdf2/MEDIA-STATEMENT_Internet-Messaging-and-Social-Media-Service-Providers-Deemed-Registered-Effective-1-January-2026_15-Dec-2025.pdf) said messaging and social media services with eight million or more users in Malaysia, including WhatsApp, Telegram, Facebook, Instagram, TikTok and YouTube, would be deemed licensed from that date. > Note: **General information, not legal advice.** This section summarises Malaysian law as published at the time of writing. It is not legal advice, and the law, its regulations and the list of licensed platforms can change. For your own situation, speak to a Malaysian lawyer. The Act's [First Schedule](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/Online-Safety-Act-2025-Act-866.pdf) lists nine kinds of harmful content, including financial fraud, obscene or indecent content, and content that may cause harassment, distress, fear or alarm. Child sexual abuse material and financial fraud are "priority harmful content". Defamation and copyright are not on the list. The [Online Safety (Period) Regulations 2025](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/Online-Safety-Period-Regulations-2025-P-U-A-465-2025.pdf) set the clock: - A licensed platform must acknowledge a report made through its official channel within one hour, then assess it and tell you its status in writing within 12 hours of acknowledging it. - Suspected priority harmful content must be made inaccessible immediately, for up to 24 hours while it is assessed, and removed for good within an hour of being confirmed. - Confirmed harmful content of other kinds must be removed for good within 12 hours of that decision. MCMC has also issued a Risk Mitigation Code under the Act. According to [Malay Mail's report of 1 June 2026](https://www.malaymail.com/news/malaysia/2026/06/01/malaysias-new-online-safety-rules-kick-in-today-what-changes-for-social-media-users/221673), the day it took effect, the code requires licensed platforms to offer easy reporting tools, verify paid advertisers against government-issued records, and protect the anonymity and confidentiality of users who report harmful content. > Note: **Not every platform is covered.** The deadlines apply only to licensed platforms. In January 2026 the Communications Minister said X was exempt because it reported fewer than eight million users in Malaysia, and that the threshold was under review ([Bernama, 22 January 2026](https://bernama.com/en/news.php?id=2515396)). Check MCMC for the current position. ## When the platform does not act: MCMC, the police and NSRC Use these when a platform ignores clearly harmful content, the content breaks the law, or money is involved. - MCMC: lodge a report on MCMC's [complaint portal](https://aduan.mcmc.gov.my/) under "Online Content". Section 24 of the Act lets you report harmful content to MCMC whether or not you reported it to the platform, and the Period Regulations give MCMC one hour to acknowledge and 24 hours to tell you the status. Attach your links, screenshots and the platform's replies. - Police (PDRM): make a report at a police station for threats, blackmail, stalking, doxxing or intimate images. Criminal laws that may apply include the new Penal Code sections 507B to 507G and section 233 of the Communications and Multimedia Act 1998, which covers communications that are obscene, indecent, false, menacing or grossly offensive, sent with intent to annoy, abuse, threaten or harass. - NSRC 997: if anyone has lost money to a scam using your name or face, they should call their bank's hotline or 997 immediately. Section 233 has changed recently. The Communications and Multimedia (Amendment) Act 2025 replaced "offensive" with "grossly offensive" from 11 February 2025, and on 6 February 2026 the Federal Court reversed a Court of Appeal ruling that had struck the words "offensive" and "annoy" out of the earlier version, holding section 233(1)(a) constitutional; counsel in the case said the judgment sets a high threshold for prosecution ([The Edge Malaysia, 6 February 2026](https://theedgemalaysia.com/node/792027)). Prosecution is for the authorities to decide; your part is a clear complaint with evidence. > Warning: **Fake takedown services target people in your position.** Anyone who contacts you first offering to get content removed for a fee is a red flag, and MCMC's complaint portal warns about callers posing as MCMC officers. Real platforms and agencies never ask for your password or a login code. Our guide to the [fake Meta support scam in Malaysia](https://www.awarexone.com/research/fake-meta-support-scam-malaysia) shows what these approaches look like. ## What to expect: the platform decides, and lawful content may stay up - A report asks the platform to apply its rules. It does not oblige the platform to agree with you. - Criticism, genuine negative reviews, opinion and news reporting often stay up, even when they hurt. - Removal on one platform does not remove copies elsewhere, including screenshots in private chats. > Note: **The platform decides.** Only the platform can remove content from its service, subject to Malaysian law and any MCMC instruction. Nobody outside it, including AwareXone, can promise that a post will come down or how quickly. ## Content removal checklist - Content type named and matching route picked from the table. - Link, dated screenshot and profile URL saved for every item. - Each item reported in the app under the most accurate reason. - Intimate images: StopNCII.org case opened, case number and PIN stored safely. - Defamation: a Malaysian lawyer consulted before any public reply. - Threats, blackmail or doxxing: police report made and a copy kept. - Harmful content left up by a licensed platform: report lodged with MCMC. - Every report, reference number and reply logged in one place. ## When SocialSafe by AwareXone can help Try an accurate report yourself first. If reposts keep appearing across several platforms, or a platform keeps rejecting the report, SocialSafe by AwareXone, our recovery and digital identity service, reviews the case before anything is agreed, then helps you pick the right category, organise the evidence and file through official forms. Our [content removal service](https://www.awarexone.com/social-media-recovery/social-media-content-removal) explains the process, and [reputation and PR support](https://www.awarexone.com/services/reputation-pr) covers problems that spread beyond a few posts. We are not a law firm: defamation claims and court orders need a Malaysian lawyer, and we will say so. Read [how we work and what we never ask for](https://www.awarexone.com/trust). If your account itself was taken over, start at our [recovery hub](https://www.awarexone.com/all-types-of-social-media-problem-solutions). ## Frequently Asked Questions ### Can MCMC remove a post for me? MCMC does not delete posts itself. Under the Online Safety Act 2025, if it decides reported content on a licensed platform is harmful, it can instruct the platform in writing to make that content permanently inaccessible. For content elsewhere online, it can instruct network providers to restrict access. Defamation and copyright disputes still go through platform legal forms or the courts. ### Will the person who posted it know I reported them? Standard in-app reports for harassment, nudity or privacy are not shown to the person reported, and Instagram says photos can be reported anonymously. Legal forms work differently. Meta's copyright process regularly passes your name and email to the poster, and YouTube notifies the uploader of a defamation complaint. YouTube says it does not share your name with the uploader in a privacy complaint. ### Does StopNCII need me to upload my intimate image? No. StopNCII creates the hash on your own device, and only that hash is sent to participating platforms. StopNCII's FAQ says your image never leaves your device and is never stored. Keep your case number and PIN safe, because StopNCII cannot recover them, and without them you cannot check or withdraw your case. Updates can take three to five days to show. ### Is a bad review of my business defamation? Not necessarily. A negative review based on a real experience, or an honest opinion, usually does not break platform rules and may not be defamatory at all. Whether a statement is defamatory is a legal question that depends on the facts, so speak to a Malaysian lawyer. Meanwhile, you can report any part of the post that breaks a rule, such as your private phone number or address. ### Can I report content on X to MCMC? Yes. The Online Safety Act 2025 lets you report harmful content to MCMC even when it is not on a licensed platform. The Act's platform duties and deadlines, however, only bind licensed platforms, and in January 2026 the minister said X was exempt because it reported fewer than eight million Malaysian users, with the threshold under review. Check MCMC for the current position. Report on X first, then to MCMC if the content is harmful. ### Someone keeps reposting the same content. Do I report each copy? Yes. Each copy is a separate post, so report each one and log every link. Some forms, such as Instagram's privacy form, let you enter several links in one report. For intimate images, remember that an edited, cropped or clipped copy may not match your StopNCII hash, so it needs its own case. ### The platform rejected my report. Is that final? Not always. Check that you chose the category that matches the content, add clearer evidence and report again, or use the review option if one is shown. Under the Online Safety Act 2025, a licensed platform must tell you in writing if it dismisses a harmful-content report, and you then have 15 days to ask it to reconsider. If a licensed platform still leaves clearly harmful content up, lodge a report with MCMC and attach the rejection. ### Should I post publicly that the content is false? Think before you do. A short, factual note on your official channels can reassure customers, but repeating the accusation or arguing with the poster often spreads it further. Never repost the harmful content or share the poster's personal details in return. If defamation is involved, get legal advice first, because what you say publicly can matter later. ### Can AwareXone get a post taken down? No one outside the platform can take a post down, and we do not claim otherwise. SocialSafe by AwareXone reviews the case first, helps you choose the right route and prepare the evidence, and files through official platform forms. We never ask for your password or login codes. Where a case needs a court order or criminal complaint, we point you to a lawyer or the police. ## Official sources - [MCMC: Online Safety Act 2025 [Act 866], in force 1 January 2026](https://www.mcmc.gov.my/en/legal/acts/communications-and-multimedia-amendment-act-20-1) - [MCMC: Online Safety Act 2025 (Act 866), full text including First and Second Schedules](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/Online-Safety-Act-2025-Act-866.pdf) - [MCMC: Online Safety (Period) Regulations 2025, P.U. (A) 465, 30 December 2025](https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/Online-Safety-Period-Regulations-2025-P-U-A-465-2025.pdf) - [MCMC: Media statement on providers deemed registered from 1 January 2026 (15 December 2025)](https://mcmc.gov.my/skmmgovmy/media/General/pdf2/MEDIA-STATEMENT_Internet-Messaging-and-Social-Media-Service-Providers-Deemed-Registered-Effective-1-January-2026_15-Dec-2025.pdf) - [MCMC: Consumer complaint portal](https://aduan.mcmc.gov.my/) - [MCMC FAQ: I was defamed in blog/social media site](https://www.mcmc.gov.my/ms/faqs/online-content-problems-2024/8-i-was-defamed-in-blog-social-media-site) - [Malay Mail: Malaysia's new online safety rules kick in today (1 June 2026)](https://www.malaymail.com/news/malaysia/2026/06/01/malaysias-new-online-safety-rules-kick-in-today-what-changes-for-social-media-users/221673) - [Bernama: Social media licence threshold to be reviewed (22 January 2026)](https://bernama.com/en/news.php?id=2515396) - [Legal Affairs Division (BHEUU), Prime Minister's Department: Enforcement of the Penal Code (Amendment) Act 2025 and Criminal Procedure Code (Amendment) Act 2025 on cyberbullying (11 July 2025)](https://dmedia.penerangan.gov.my/upload/sm/11072025.1277949580.pdf) - [The Edge Malaysia: Federal Court decision on Section 233 (6 February 2026)](https://theedgemalaysia.com/node/792027) - [StopNCII.org: Frequently asked questions](https://stopncii.org/faq/) - [StopNCII.org: Industry partners](https://stopncii.org/partners/industry-partners/) - [NCMEC: Take It Down](https://takeitdown.ncmec.org/) - [Facebook: Defamation reporting form](https://www.facebook.com/help/contact/430253071144967) - [Facebook Help Center: How do I report copyright infringement on Facebook?](https://www.facebook.com/help/325058084212425) - [Meta Business Help Centre: Report an ad](https://www.facebook.com/business/help/162606073801742) - [Instagram: Report a violation of your privacy on Instagram or Threads](https://help.instagram.com/contact/512241091300432) - [Instagram Help Center: If someone shares an intimate photo of you on Instagram](https://www.facebook.com/help/instagram/1769410010008691) - [TikTok: Privacy portal](https://www.tiktok.com/legal/report/privacy) - [TikTok: Report copyright infringement](https://www.tiktok.com/legal/report/Copyright) - [YouTube Help: Privacy complaint process](https://support.google.com/youtube/answer/142443) - [YouTube Help: YouTube privacy guidelines](https://support.google.com/youtube/answer/7671399) - [YouTube Help: Defamation complaint requirements](https://support.google.com/youtube/answer/6154216) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.