Online sextortion — the threat to publish intimate images unless the victim provides further images, money, or compliance — has become one of the fastest-growing categories of cybercrime against children in Malaysia. Reported cases jumped from 30 in 2022 to 191 in 2023, and the trend has continued through 2024–2025. This article surveys the legal framework, the prosecution path, and the defence considerations on both sides.
The criminal framework
Sextortion typically engages several Malaysian statutes simultaneously:
- Sexual Offences Against Children Act 2017, sections 5 and 6 — where the victim is a child; sexual communication and child pornography
- Penal Code section 384 — extortion (penalty: imprisonment up to 10 years + fine + whipping)
- Penal Code section 503 — criminal intimidation (penalty: up to 7 years)
- Communications and Multimedia Act 1998 section 233 — transmission of obscene or menacing content with intent to harass
- Computer Crimes Act 1997 — unauthorised access to and modification of computer data, where the offender used hacked accounts or credentials
Prosecutors typically charge under multiple statutes to maximise sentencing exposure and prevent double-jeopardy escape routes.
The victim first steps
- Do not pay. Paying confirms the offender\’s leverage and rarely stops further demands
- Preserve evidence. Screenshot all messages with timestamps and platform metadata visible. Do not delete the messages
- Report to MCMC (via 1-800-22-4848 or aduan.mcmc.gov.my) and to the police
- Report the account to the platform — Meta, TikTok, X, and others have expedited workflows for sextortion involving minors
- Norwich Pharmacal application via counsel for an order compelling the platform to disclose the offender\’s information
- Counselling support — sextortion is psychologically devastating; engage support services early
The civil parallel — defamation and reputation protection
Where the offender carries out the threat and publishes the intimate images, parallel civil remedies are available. Norwich Pharmacal disclosure orders against platforms; interim injunctions for takedown; civil defamation for the reputational harm; potentially a claim for breach of confidence and misuse of private information. Damages awards in such cases are typically substantial, reflecting the emotional and reputational harm.
Why sextortion has surged
- Online intimate exchange normalised among teenagers — many sextortion cases begin with a consensual intimate exchange that the offender then weaponises
- Cross-border offenders — many sextortion offenders operate from outside Malaysia, complicating identification and prosecution
- Social media surfaces — Instagram, Telegram, Snapchat, anonymous chat apps each provide entry points
- Underreporting — until 2022, sextortion cases were significantly underreported; the surge in numbers reflects both real growth and improved reporting
For defence counsel — when the accused is identified
Sextortion prosecutions carry severe penalties. Defence considerations include: (a) attribution disputes — whether the accused was the actual user of the offending account; (b) intent — whether the communication was extortionate or merely importunate; (c) age of victim — knowledge of age is an element of SOACA offences; (d) jurisdiction — where the offender operates from outside Malaysia, jurisdictional defences may arise; (e) cooperation and remorse for sentencing mitigation.
For parents — prevention conversation
The single most effective prevention is open conversation. Children should know: (a) intimate images, once shared, are unrecoverable; (b) sextortion always escalates if paid; (c) parents and counsellors will respond with support, not punishment. The fear of parental anger is one of the principal reasons children comply with sextortion demands rather than reporting.
See also: SOACA Prosecution Trends 2024-2025 | 马来西亚的网络诽谤 | Norwich Pharmacal Disclosure
About the author
Dr Chee Hui Bing is a Malaysian Advocate & Solicitor and former medical doctor. Principal of 克里斯和伙伴律师事务所, Batu Pahat, Johor. Read full profile.