Malaysia is mounting a systematic examination of how to better safeguard victims of cybercrime and online fraud, with the Legal Affairs Division charged with developing a more robust framework for victim assistance and recovery. Datuk Seri Azalina Othman Said, Minister in the Prime Minister's Department (Law and Institutional Reform), outlined the initiative after attending the National Cyber Security Summit (NCSS) 2026 in Putrajaya, signalling renewed government focus on an increasingly urgent problem affecting citizens across the nation.
The current legal landscape leaves victims in a precarious position. While Malaysia's criminal justice system has well-established mechanisms for prosecuting perpetrators under the Penal Code and Criminal Procedure Code, the apparatus for protecting and assisting those who suffer financial or personal harm from digital crimes remains underdeveloped. Azalina acknowledged this asymmetry, noting that the existing framework concentrates on holding offenders accountable rather than facilitating victim recovery or providing meaningful support during the aftermath of fraud or exploitation.
A central focus of the ongoing study concerns the possibility of implementing victim compensation through banking channels, mirroring systems already operational in mature digital markets. In the United Kingdom and Australia, victims of confirmed online scams can often recover losses when their banks initiate refund protocols, shifting some financial responsibility onto financial institutions to maintain consumer confidence in digital transactions. Bank Negara Malaysia has not yet committed to such a mechanism, though the central bank is actively examining its feasibility as part of the government's broader review.
The comparative analysis extends beyond compensation mechanisms to encompass sentencing approaches that other jurisdictions have adopted. Singapore's use of caning as a supplementary punishment for cybercriminals presents one model, though Malaysia currently relies on fines and custodial sentences. The Legal Affairs Division will evaluate whether enhanced penalties—whether through increased imprisonment terms, larger financial penalties, or alternative sanctions—would serve as meaningful deterrents while remaining proportionate and constitutionally sound.
One of the study's most significant dimensions involves examining how victim rights are operationalised internationally. Different countries have developed distinct approaches to ensuring that those harmed by digital offences receive formal recognition, access to counselling or rehabilitation services, and a voice within criminal proceedings. Some jurisdictions grant victims the right to make impact statements during sentencing phases, while others provide dedicated victim advocates to guide individuals through the legal process. Malaysia's review will assess which practices align with local legal traditions and could be effectively transplanted into the Malaysian context.
The challenge of fund recovery particularly troubles policymakers, as many victims exhaust their remedies through initial police reports yet never retrieve their money. This outcome undermines public confidence in both law enforcement and the broader digital economy. When individuals lose savings to sophisticated romance scams, investment fraud, or phishing schemes and face no realistic path to recovery, they become vulnerable to further victimisation and may withdraw entirely from digital financial services, creating a drag on Malaysia's digital transformation agenda.
Azalina's remarks reflect growing recognition that the government must adapt its approach as cybercrime becomes more prevalent and financially damaging. The scale of online fraud in Malaysia has expanded considerably, with scammers utilising increasingly sophisticated social engineering, deepfake technology, and cross-border money laundering networks. Traditional prosecution alone cannot address the systemic vulnerabilities that allow such crimes to flourish or the accumulated suffering of victims who face financial ruin.
The study carries implications beyond individual cases. By developing comprehensive victim protection mechanisms, Malaysia can signal to both domestic citizens and international partners that the country takes digital security seriously—not merely as a law enforcement matter but as a consumer protection priority. Enhanced victim support frameworks often correlate with higher reporting rates, which in turn provides law enforcement with better intelligence about emerging fraud patterns and criminal networks operating across borders.
The timeline for completing the review remains unspecified, suggesting that the government is prioritising thoroughness over speed. This approach reflects the complexity of harmonising victim protection measures with existing legal structures, international conventions on mutual legal assistance, and banking regulations. Any new framework will require coordination among the police, Bank Negara, the Attorney General's Chambers, and the judiciary to ensure coherent implementation.
For Malaysian consumers navigating an increasingly digital economy, the study represents cautious progress toward a more protective environment. However, moving from analysis to implementation will require political will and resource allocation. Other Southeast Asian nations such as Thailand and Indonesia face similar challenges with cybercrime and have begun exploring victim-centric reforms, creating opportunities for regional knowledge sharing and potentially harmonised standards that facilitate cross-border cooperation.
The study also addresses a psychological dimension often overlooked in criminal justice discussions: the trauma and loss of confidence experienced by victims. When the state can demonstrate concrete support mechanisms—whether through financial recovery schemes, victim advocates, or enhanced penalties for offenders—it helps restore public faith in digital institutions. This restoration is particularly important in Malaysia, where trust in online banking and e-commerce platforms remains essential for economic growth and financial inclusion objectives.
