TLDR:
- Malaysia has its own influencer laws. FTC and GDPR don’t apply here, and local penalties are harsher than most creators realise
- The MCMC Content Code 2022 requires #Ad or #Sponsored at the start of every paid post, including free products and hotel stays
- The CMA 1998 (amended 2024) can fine individuals up to RM500,000 and jail them for up to 5 years for violations
- LHDN’s 2026 tax guidelines treat all influencer income (cash and gifts) as taxable business income, with 7-year record-keeping required
Table of Contents
1. Why Malaysian Law Is Different From What You’ve Read Online
Most articles on influencer marketing law cite the FTC Guides and GDPR. Neither applies in Malaysia.
The FTC is a US federal agency. GDPR is European. When a Malaysian beauty influencer posts a sponsored Shopee review, neither regulation has jurisdiction over her. What does apply (and what most guides quietly skip) is a domestic framework that is more specific, more enforceable, and in some areas, stricter.
Malaysia runs a co-regulatory model. The MCMC sets the statutory baseline through the CMA 1998. The Content Forum administers the Content Code 2022. LHDN handles tax. ASAM covers advertising ethics. From January 2025, the platforms themselves became licensed entities with compliance obligations.
Multiple bodies can come after you, at the same time, for the same post.
This guide covers all of them, with the actual penalty figures, real Malaysian cases, and the specific hashtags that will and won’t satisfy regulators.
2. MCMC Content Code 2022: The Ground Rules
The Malaysian Communications and Multimedia Content Code 2022 is the primary self-regulatory framework for online content in Malaysia. Registered under the Communications and Multimedia Act 1998, it applies to every piece of digital content distributed through networked platforms: Instagram, TikTok, YouTube, X, and Facebook.
Who Counts as an Influencer Under the Code?
The Content Code 2022 defines an influencer broadly: any person or group who advertises products or services on their own social media platform due to their influence on consumers. That definition covers more people than you’d expect.
It includes:
– Individual creators, from celebrities to housewives to niche hobby accounts
– Virtual influencers (computer-generated personas that promote brands)
– Object-based accounts (animated characters, brand mascots, fictional personas)
If your content influences purchasing decisions and you receive any benefit for it, you’re an influencer under Malaysian law.
Four Core Content Principles
Every marketing communication must be legal, decent, honest, and truthful. The Code specifically prohibits exploiting follower trust. You cannot promote products outside your actual knowledge or expertise, and you cannot omit material information that a consumer would need to make an informed decision.
Protections for Vulnerable Groups
The 2022 revision strengthened rules around content featuring children, Persons with Disabilities (PWDs), and sensitive social topics.
- Children cannot be exploited for credulity, and featuring them in unsafe or illegal scenarios is prohibited
- PWDs must be treated with dignity; content that ridicules disability is expressly forbidden
- Content crossing the 3Rs (Race, Religion, Royalty) is prohibited regardless of whether it’s a paid post
PRO TIP: The 3Rs rule applies to branded content too. A foreign brand briefing a local influencer is still bound by these standards. Brief your agency accordingly before campaigns go live.
3. Disclosure Requirements: Exactly What to Post and Where
This is where most violations happen. Not from bad faith, but from influencers using disclosure language that feels compliant but legally isn’t.
What Triggers the Disclosure Obligation
Paragraph 6.3 of Part 3 of the Content Code 2022 is the key provision. Disclosure is mandatory for any partnership involving:
– Cash payment
– Any “reciprocal arrangement in lieu of cash,” including free products, PR packages, complimentary hotel stays, discounted services, or gifts of any kind
A RM50 skincare sample counts. A fully hosted press trip counts. If you received something of value, you disclose it.
Labels That Actually Comply
These are the officially recognised, unambiguous labels:
| Compliant | Non-Compliant |
|---|---|
| #Ad | #sp or #spon |
| #Sponsored | #collab |
| #Advertisement | #client |
| #Adv | “Thanks [Brand]” |
| #PaidPartnership | “Ambassador” (standalone) |
The non-compliant labels are considered “stealth marketing.” Regulators and legal experts have explicitly called them out as insufficient.
Placement Rules: Where the Label Goes
Getting the label right is only half the job. Where you put it changes everything.
The disclosure must be seen first. This means:
– It cannot be buried at the end of a long caption
– It cannot be hidden in a cluster of other hashtags
– It cannot sit “below the fold,” behind a “more” click
– On video content, it must appear within the video itself, not just the description box
– On live streams, it must be repeated periodically so viewers who join mid-stream see it
– The disclosure must be in the same language as the content; a Malay-language post needs a Malay-language disclosure
Virtual influencers carry an additional rule: the use of a computer-generated character must itself be disclosed, so consumers know they’re not watching a real person.
PRO TIP: On Instagram Stories, place the disclosure in the first 3 seconds as a visible text overlay, not as a sticker buried near the bottom. The “Paid Partnership” tag built into Instagram is a good complement, but don’t rely on it alone.
4. Consumer Protection Act 1999: When Influencers Become Liable Sellers
The Consumer Protection Act 1999 (CPA) and the Consumer Protection (Electronic Trade Transactions) Regulations 2012 add a second layer of liability, one that goes beyond disclosure.
The Core Right at Stake
The CPA grants every Malaysian consumer the right to accurate, non-misleading information about products and services. That right applies regardless of whether the person delivering the information is a brand, a retailer, or an influencer with 80,000 followers.
Personal Liability for False Claims
Where an influencer makes false or exaggerated claims about a product (“this supplement cured my PCOS,” “I lost 10kg in two weeks”) they may be held personally liable. Some regulatory interpretations treat influencers who drive direct commercial outcomes as sellers in their own right.
The health, beauty, and finance sectors attract the most enforcement attention. A claim you can’t back up isn’t just bad practice; it’s a legal liability.
5. CMA 1998: The RM500,000 Law Most Creators Don’t Know About
The Communications and Multimedia Act 1998 is where the real statutory teeth are. Most creators have never read it. Most of them are still subject to it every time they post.
Section 233: The Individual Conduct Provision
Section 233 governs the improper use of network facilities and targets individual behaviour. The 2024 CMA Amendment Bill expanded its scope and raised its penalties.
The amended Section 233 prohibits content that is indecent, obscene, false, menacing, or offensive with intent to annoy, abuse, threaten, or harass, and now includes an expanded intent to commit fraud or dishonesty. That last addition directly targets undisclosed paid promotions framed as genuine personal opinions.
The Actual Penalties
| Offense | Penalty |
|---|---|
| Section 233 violation | Fine up to RM500,000 and/or imprisonment up to 2 years |
| Victim is under 18 | Imprisonment up to 5 years |
| Continuing offense | Additional RM1,000–RM5,000 per day after conviction |
| Content Code breach (Content Forum) | Administrative fine up to RM50,000 |
Section 114A: The Hacked Account Problem
This provision catches most creators completely off guard.
Under Section 114A of the Evidence Act, the registered owner of an account or device is presumed to be the publisher of any content posted from it. If your Instagram account is compromised and the hacker posts offensive or fraudulent content, the legal burden falls on you to prove you weren’t the author.
Enable two-factor authentication. Not because it’s best practice. Because without it, you’re a presumed publisher of whatever anyone posts from your accounts.
PRO TIP: Document your 2FA setup with screenshots. If you’re ever challenged under Section 114A, evidence of active security measures strengthens your rebuttal.
6. LHDN Tax Guidelines: That Free Hotel Stay Is Taxable Income
On 14 January 2026, LHDN released formal guidelines on influencer taxation: earn anything from digital content, and you’re running a commercial activity. Every revenue stream is business income under Paragraph 4(a) of the Income Tax Act 1967.
What Counts as Taxable Income
Most influencers know sponsored post fees are taxable. Fewer know the full scope:
Cash income:
– Sponsored post fees, ambassador fees, appearance fees
– Platform revenue: AdSense (YouTube/Facebook), Patreon subscriptions, live stream tips and digital tokens
Non-cash income (income in kind):
This is where enforcement is heating up. LHDN requires non-cash benefits to be declared at their fair market value. That includes:
– Free products and PR packages
– Complimentary hotel stays and sponsored travel
– Vouchers, gift cards, and luxury items
– Discounted services received in exchange for promotion
Royalties:
– Income from licensing a virtual persona, digital character, or brand image
Overseas income is not exempt. If a Malaysian tax resident earns income from YouTube AdSense, Meta, or a foreign sponsor, it is still declarable.
What You Can Deduct
Expenses incurred wholly and exclusively for producing income-generating content are deductible:
| Deductible | Not Deductible |
|---|---|
| Internet bills | Personal wardrobe |
| Filming equipment (cameras, lighting, mics) | General beauty treatments |
| Editing software subscriptions (Adobe, Canva) | Lifestyle expenses |
| Production-related travel | Clothing unrelated to specific shoots |
| Domain fees and hosting | Personal meals |
Compliance Requirements and Penalties
- Report all business income via Form B
- Estimated tax instalments (CP500) may be required every two months
- Maintain all financial records for seven years
Failure to declare income or file returns: fine of RM200 to RM20,000, imprisonment up to 6 months, or both.
PRO TIP: Start a simple spreadsheet tracking every item of value received: product, estimated market price, brand, date. At year end, it becomes your LHDN supporting document and takes under 5 minutes per receipt to maintain.
7. ASAM Guidelines: High-Risk Sectors That Attract Enforcement
The Advertising Standards Authority of Malaysia (ASAM) administers the Malaysian Code of Advertising Practice, the ethical floor for advertising across all media including social. Three sectors draw consistent enforcement attention:
Alcohol
Digital alcohol advertising is permitted but tightly restricted. Every post must:
– Be targeted exclusively at non-Muslims aged 21 and above
– Include a responsible drinking message
– Never portray alcohol consumption as contributing to social success, professional achievement, or sexual attractiveness
Any influencer promoting an alcohol brand without verifying their audience demographics is at risk.
Finfluencers
The Securities Commission Malaysia (SC) treats unlicensed financial advice as a serious offense. Promoting specific investment products, funds, or trading schemes without an SC licence (even through a “review” or “recommendation” framing) is illegal.
The SC has already acted against influencers promoting deepfake-driven investment scams. If you’re in the personal finance content space, the licensing question is not optional.
Health and Beauty
Claims that a product can cure, treat, or prevent any medical condition (cancer, diabetes, PCOS, eczema) are prohibited without clinical substantiation. Slimming products require specific approval from the Medicine Advertisements Board before an influencer can make efficacy claims.
“Helped me lose weight” is defensible. “Burns fat and cures insulin resistance” is not.
8. Platform Rules Have Changed: The 2025 Licensing Framework
On 1 January 2025, the MCMC introduced a licensing requirement for any platform with at least 8 million users in Malaysia. TikTok, WeChat, Telegram, and others applied for the Applications Service Provider Class (ASP(C)) licence.
Platforms now have skin in the game.
To protect their operating licences, platforms must:
– Enforce age verification (no access for users under 13)
– Deploy local content moderation teams capable of responding to harm reports within 24 hours
– Proactively flag non-disclosed sponsored content
That last point means influencer compliance is no longer just between the creator and regulators. The platform itself has regulatory incentive to surface undisclosed paid posts.
Platform-Specific Requirements
TikTok: High scrutiny on “organic-looking” ads. TikTok Shop requires explicit commission disclosure for affiliate content, more stringent than standard posts.
Instagram: The dominant platform for brand campaigns (83% of Malaysian brands use it). Instagram’s built-in “Paid Partnership” tag should be used alongside #Ad or #Sponsored hashtags, not as a replacement.
YouTube: Requires both spoken and superimposed visual disclosure in the video itself, ideally within the first two minutes. Description-only disclosure does not satisfy Malaysian requirements.
9. Four Real Malaysian Enforcement Cases
Case 1: Slimming Product Disclosure Fine
A prominent Malaysian influencer promoted a slimming product by framing the post as a personal weight-loss journey, without disclosing the commercial arrangement. Regulators determined the post was a paid endorsement and issued a fine. The reputational damage, covered across multiple media outlets, outlasted the financial penalty.
Case 2: The RM740,000 Donation Freeze (July 2024)
Malaysian authorities froze RM740,000 linked to an influencer couple investigated for an alleged online donation scam. The case centred on the transparency of charitable funds raised through social media. It is now a frequently cited example in MCMC guidance materials.
Case 3: Copyright Infringement in a Brand Campaign
A Malaysian brand used an influencer’s image in campaign materials beyond the scope of their original agreement, without obtaining proper IP licensing. The resulting damages settlement was substantial. IP clauses in influencer contracts are non-negotiable, not administrative boilerplate.
Case 4: The Esha Tragedy and the 2025 Platform Licensing Push
The suicide of TikTok influencer Esha, attributed to severe online harassment, triggered an immediate government response. It became the primary catalyst for the 2025 ASP(C) licensing framework and the strengthened penalties under the CMA 1998 amendment. The case is now referenced in every major piece of Malaysian digital governance discussion.
10. Compliance Checklist for Brands and Influencers
For Influencers
- [ ] LHDN tax file active: Report all income (cash and in-kind) via Form B
- [ ] Gift ledger running: Log every PR product, stay, or voucher with fair market value; keep for 7 years
- [ ] #Ad or #Sponsored placed first: At the start of the caption, before any other hashtags
- [ ] In-video disclosure confirmed: Visible within the video, not just the description
- [ ] Live stream reminders scheduled: Disclosure repeated for late viewers
- [ ] Claims substantiated: Any health, financial, or efficacy claim can be backed by evidence
- [ ] 2FA enabled on all accounts: Protects against Section 114A presumption of publisher liability
For Brands
- [ ] Written contract for every collaboration: Includes explicit disclosure obligations and IP usage rights
- [ ] Market value of all gifted items recorded: Required for e-invoicing compliance and LHDN audit trails
- [ ] Influencer vetting completed: Check for prior Content Code violations or enforcement history
- [ ] Post-publication audit scheduled: Verify disclosure label placement meets MCMC standards
- [ ] Sector-specific restrictions checked: Alcohol, health, and finance campaigns have additional requirements
- [ ] Malaysian cultural sensitivity review: Content respects the 3Rs and multicultural community norms
Key Takeaways
Disclosure is broader than most creators assume. A free product or hotel stay triggers the same obligation as a cash payment. The label must be visible before anything else. Not buried, not “below the fold.”
The CMA 1998 applies to individuals, not just platforms. Section 233’s RM500,000 fine and 2–5 years imprisonment targets the creator, not just the company. The 2024 amendment expanded this to include fraud and dishonesty, which covers undisclosed paid promotion.
LHDN treats influencer income as a business, not a hobby. Non-cash income (gifts, travel, vouchers) must be declared at fair market value. Records must be kept for seven years. The penalties for non-disclosure include criminal prosecution.
The 2025 platform licensing framework makes non-disclosure harder to hide. Platforms now have regulatory incentive to flag undisclosed paid content. The days of hoping a buried #spon goes unnoticed are over.
IP protection belongs in every influencer contract. The copyright case in Section 9 illustrates a simple truth: goodwill is not a substitute for a written agreement defining exactly what rights a brand has, for how long, and on which channels.
The era of plausible deniability in Malaysian influencer marketing is over. The regulatory framework is specific, multi-layered, and actively enforced. A visible #Ad is three characters. The alternative is a RM50,000 Content Forum fine, a Section 233 prosecution, or a tax audit covering seven years of undeclared PR gifts. Considerably more expensive.
If you’re running influencer campaigns in Malaysia and want to build them on a compliance-first foundation, get in touch with Specflux: we help brands structure campaigns that are both effective and legally sound.
Sources: MCMC Content Code 2022 (Paragraph 6.3); Communications and Multimedia Act 1998 as amended 2024 (Sections 211, 233); Evidence Act 1950 (Section 114A); Consumer Protection Act 1999; Consumer Protection (Electronic Trade Transactions) Regulations 2012; LHDN Guidelines on Taxation of Income Derived by Social Media Influencers (January 2026); Malaysian Code of Advertising Practice (ASAM); Securities Commission Malaysia.
Leave a Reply