AskLegal.my

Before you post that video of the guy who parked like an idiot — read this

9 min read

Someone parks across two bays. Someone's contractor takes the deposit and vanishes. Someone shouts at a waitress. Your phone's already out.

Posting it feels like justice. In Malaysia it can also be a criminal offence, a civil suit, or both — and the law here has changed twice in the past two years, in opposite directions.

In February 2025, Parliament raised the bar: section 233 of the Communications and Multimedia Act was amended so that "offensive" became "grossly offensive". Then in August 2025, the Court of Appeal struck out "offensive" and "annoy" as unconstitutional entirely. Then in February 2026, the Federal Court put them back — while simultaneously making it harder to prosecute anyone under the section.

If you're confused, that's reasonable. Let's untangle it.

Section 233(1)(a) CMA is still law and still criminal — up to RM50,000, up to a year, or both, under the pre-amendment version. But after Government of Malaysia v Heidy Quah (6 February 2026), prosecutors must clear a much higher bar: the content must be genuinely grossly offensive, and there must be proven intent to annoy, abuse, threaten or harass. Meanwhile the bigger practical risk for most people isn't jail — it's a defamation suit, where Malaysian awards have ranged from RM50,000 to millions.

1. What the Federal Court actually decided

The case matters enough to explain properly, because it's the current law.

Heidy Quah, a refugee-rights activist, was charged in July 2021 over a Facebook post about conditions and Covid-19 spread in immigration detention centres. She separately went to the High Court asking that the words "offensive" and "annoy" in s.233(1)(a) be declared unconstitutional.

The High Court refused. The Court of Appeal agreed with her in August 2025, striking both words out as breaching Article 10(1)(a) — freedom of speech — and Article 8 — equality.

On 6 February 2026, a five-judge Federal Court panel partially overturned that. It held s.233(1)(a) constitutional and reinstated both words, reasoning that the provision protects people from harm arising from misuse of online communication in Malaysia's multi-ethnic society, and that Article 10 rights aren't absolute.

But — and this is the part that matters to you — the Federal Court also held that Quah should never have been charged. Her post consisted of matters of fact and opinion protected by Article 10(1)(a). It wasn't offensive, and the mens rea element of intent to annoy was absent.

Lawyers acting in the case, including Malik Imtiaz Sarwar and New Sin Yew, described the ruling as raising the bar for prosecution. The Federal Court indicated the section is aimed at things like hate speech, and at offensive comments made with intent to repeatedly annoy a person or to drive them to harm themselves — not at criticism, opinion, or factual claims someone in power dislikes.

Crucially, the guidance applies to both the old and amended versions of the section. So the higher standard carries over to "grossly offensive".

Civil society doesn't see this as a win. The Centre for Independent Journalism and ARTICLE 19 both criticised the reinstatement as a setback for expression, noting the pattern of s.233 investigations against journalists, satirists like Fahmi Reza, filmmakers and lawyers. That criticism is fair and worth knowing — but the operative law today is the Federal Court's.

2. So what does section 233 actually catch now?

Practical translation.

Probably not caught:

  • Factual criticism of a business, service or public institution
  • Opinion, even harsh opinion, on matters of public concern
  • A complaint about genuinely poor treatment you received
  • Political commentary and satire

Genuinely at risk:

  • Hate speech, especially anything touching race, religion or royalty (3R)
  • Sustained targeting of one person — repeated posts designed to wear them down
  • Content encouraging someone to harm themselves
  • Obscene or indecent material
  • Threats
  • Knowingly false content

The two ingredients now doing the work are gross offensiveness and proven intent. A one-off angry post about bad service is a very different thing from a three-week campaign against a named individual.

3R content is where enforcement is fastest. During the Johor state election campaign this month, MCMC received 29 complaints about online content — 17 fake news, 11 hate speech, nine of those involving race. That's the category where investigation happens quickly and where "I was just venting" carries little weight.

3. The risk that's actually more likely: defamation

Most Malaysians who get in trouble over a shaming post don't get charged. They get a letter of demand.

Defamation under the Defamation Act 1957 covers libel (written, including everything online) and slander. And the numbers are real:

The serious end:

  • Khairy Jamaluddin awarded RM2.5 million by the High Court in 2025 over false Covid-19 vaccine claims
  • Muhyiddin Yassin ordered to pay Lim Guan Eng RM1.35 million in 2024 over a Facebook post
  • A Pahang executive councillor won RM1.2 million in 2026

The ordinary end, which is where you'd be:

  • LE Global Services v Lai Zhen Yean (October 2025): a former employee's online campaign against his ex-employer and three of its executives. High Court ordered content removed, a public apology published, and RM50,000 to each of four plaintiffs — RM200,000 total.
  • MP RSN Rayer awarded RM100,000 in May 2026 over social media videos, plus RM4,000 costs. He'd sought RM500,000.

A caution in the other direction: courts do moderate excessive claims. In 2025 the Court of Appeal cut one MP's award from RM2 million to RM75,000. Big claims aren't big awards.

Things people get wrong about defamation:

Sharing is publishing. Forwarding someone else's defamatory post can make you a publisher of it. "I just shared it" is not a defence.

WhatsApp groups count. A defamatory message seen by others in a group is published. "Private" doesn't mean protected.

Jokes aren't automatically safe. Rosmah Mansor filed a defamation suit against comedian Harith Iskander in June 2026 over a routine performed in Melaka; his July defence says the recordings circulating online didn't show the full performance and that context matters. The court hasn't ruled, so it sets no precedent yet — but it illustrates that satire doesn't come with automatic immunity if an audience could take it as a factual allegation.

Truth is a defence — if you can prove it. Justification requires evidence in court, not just your certainty. Fair comment protects honest opinion on matters of public interest, but it has to be recognisable as comment rather than a stated fact.

4. When calling someone out is fine

None of this means you can't complain publicly. Malaysians have every right to criticise businesses and services.

Lower-risk approach:

  • State facts you can prove, with receipts, dates and documentation
  • Describe your own experience rather than making accusations about someone's character
  • Frame conclusions as opinion: "I wouldn't use them again" rather than "they're a scammer"
  • Avoid allegations of crime — "cheat", "scammer", "thief" — unless there's a conviction or you can genuinely prove it. These are the ones that attract serious damages.
  • Don't identify uninvolved people. Faces of bystanders, other people's children, plate numbers of unrelated cars.
  • Consider whether the complaint channel works better. Tribunal for Consumer Claims, the relevant regulator, or a police report often achieves more than a viral post, and carries no legal risk to you.

Special caution with videos of strangers. Recording in public isn't itself prohibited in Malaysia. But posting a video that identifies someone alongside an accusation converts a recording into a publication about them — and if the accusation is wrong, or the context is missing, that's where liability starts.

The parking-space video is the classic case. You don't know if the driver was dropping off someone disabled, or having a medical emergency, or whether the car was even theirs. Malaysians have been wrongly identified in viral clips more than once, and the person who posted it is the one holding the exposure.

What to actually do

Before you post:

  • Can I prove every factual claim with evidence?
  • Am I stating opinion, or alleging a crime?
  • Have I identified anyone who isn't involved?
  • Is there a proper channel that would work better?
  • Would I be comfortable defending this in front of a judge?

If you've received a letter of demand:

  • Don't ignore it. A default judgment can be entered against you if you don't respond — that happened to a defendant in a suit brought by Saifuddin Nasution Ismail, whose attempt to set it aside was thrown out with RM8,000 in costs in July 2026.
  • Don't post about the letter. That usually makes it worse.
  • Get a lawyer. Early apology and removal can substantially reduce damages; courts have noted that the absence of apology or retraction pushes awards up.

If you're being defamed:

  • Screenshot everything with URLs, timestamps and visible engagement figures
  • Get a lawyer to send a letter of demand
  • Report to the platform
  • Consider a police report if it crosses into s.233 territory

FAQ

Is it illegal to post a video shaming someone in Malaysia?

Not automatically. It becomes a problem if it's grossly offensive with intent to annoy or harass under s.233 CMA, or if it defames someone by making false allegations that damage their reputation.

Did the Federal Court make section 233 stricter or looser?

Both, in a sense. It kept the words "offensive" and "annoy" in the law, but set a higher threshold for prosecuting anyone — requiring genuine gross offensiveness and proven intent. Lawyers in the case described it as raising the bar.

What's the penalty under section 233?

Under the version applied in reported cases, up to RM50,000, up to a year's imprisonment, or both. Verify the current figure against the amended Act text.

Can I be sued for sharing someone else's post?

Yes. Republishing defamatory content can make you liable as a publisher.

Does it count if it's in a private WhatsApp group?

Yes, if others in the group saw it. Publication to third parties is what matters, not whether the platform feels private.

What if what I posted is true?

Truth (justification) is a defence — but you must be able to prove it in court with evidence. Being right isn't the same as being able to demonstrate it.

Someone posted lies about my business. What can I do?

Preserve evidence with screenshots and timestamps, get a lawyer to issue a letter of demand, report to the platform, and consider a police report if it's criminal in nature.

This article is general legal information, not legal advice, and reading it does not create a lawyer–client relationship.

Section 233 of the CMA was amended in February 2025 and interpreted by the Federal Court in February 2026, so much of the older Malaysian commentary online is now out of date — and defamation outcomes depend entirely on the specific words, context and evidence in each case, so the damages figures here are illustrations rather than predictions. If you've received a letter of demand or are being investigated, speak to a lawyer promptly.

Spot something outdated or wrong? Tell us — we’ll verify and correct it, with the correction noted.

Key sources (10) — how this was verified