Foreign Hackers and Scammers Can Be Prosecuted, and Extradited, if They Target Malaysia

Hackers and scammers based overseas can be investigated, prosecuted and, if the requirements are met, extradited to Malaysia if their activities target local systems or Malaysian citizens, according to Deputy Prime Minister Datuk Seri Dr Ahmad Zahid Hamidi.

In a written parliamentary reply, he said this cross-border capability is built into Clause 2 of the Cybercrime Bill 2026, which recognises the borderless nature of digital threats.

Deepfakes and Voice Cloning Targeted Under New Cybercrime Law, Says Zahid

He was responding to Jempol MP Datuk Shamshulkahar Mohd Deli on whether existing laws are adequate against AI scams.

Zahid said older laws can no longer keep pace with deepfakes, which can produce fake video, images and audio that are nearly indistinguishable from reality. Berita Harian reported that the Bill passed Parliament in July and repeals the Computer Crimes Act 1997.

It targets AI-powered fraud, including deepfakes and voice cloning. Clause 23 widens digital impersonation offences to cover AI manipulation.

Because syndicates often wipe or move evidence within seconds, Clauses 38 to 41 give enforcement agencies powers to collect traffic data and intercept communications under oversight.

Clause 54 lets courts issue protective orders on a prosecutor’s application, even before a suspect is charged. These include stoppage and compliance orders, asset freezing orders and restitution orders to return recovered funds to victims.