Defamation and confession pages — what "it was anonymous" does not fix

This is general information, not legal advice. Defamation cases turn on their particular facts. If you have received a letter of demand or a writ, speak to a lawyer before you reply.

Short answer. Yes — an admin who publishes an anonymous submission can be sued for defamation in Malaysia. Each repetition of a defamatory statement is a fresh publication, so the admin who approves a post is its publisher, and section 114A of the Evidence Act 1950 presumes as much. No name is needed if people who know the person would recognise them, and a disclaimer is not a defence.

The commonest misunderstanding among confession-page admins is that anonymity spreads to them — that because nobody knows who wrote a post, nobody is responsible for it. The law takes the opposite view. Someone caused the statement to be read by thousands of people, and that someone is the admin.

This guide explains how defamation works in Malaysia, in enough detail for you to recognise a risky submission when one arrives.

What defamation is

Defamation is the publication of a statement that damages a person's reputation. Malaysian law recognises two forms. Libel is defamation in permanent form — writing, images, and online posts and comments. Slander is defamation in transient form, mainly speech. Everything on a confession page is potentially libel.

Civil defamation is governed by the Defamation Act 1957 and by principles developed in case law. Separately, sections 499 and 500 of the Penal Code make defamation a criminal offence punishable by up to two years' imprisonment, a fine, or both.

What a claimant has to show

Someone suing for libel has to establish three things.

1. The statement is defamatory

The courts have put the test in several ways: whether the words would tend to lower the person in the estimation of right-thinking members of society generally; whether they would expose the person to hatred, contempt or ridicule; whether they would cause the person to be shunned or avoided.

Statements that typically meet the test include claims that a person committed a crime, was dishonest, is professionally incompetent, behaved in a sexually improper way, or has a disease that carries stigma.

The meaning is judged by how an ordinary, reasonable reader would understand the words — including what they imply. A defamatory meaning that arises by implication is called an innuendo. "I'm not saying the treasurer took the money, but the account is empty and he has a new motorbike" makes the accusation perfectly clearly.

2. The statement refers to the claimant

There is no requirement that the person be named. The question is whether people who know the claimant would reasonably understand the statement to be about them. A nickname, initials, a job title, a description, a photograph, or a combination of details can all be enough.

This is the point on which confession pages most often come unstuck. "A certain final-year student in the debating society who thinks she's better than everyone" names nobody and identifies someone to her entire circle.

Members of small groups can also be identified through a statement about the group. "One of the three lab technicians in block D is stealing equipment" casts suspicion on all three.

3. The statement was published to a third party

Publication means communication to at least one person other than the claimant. Posting to a page with followers satisfies this many times over.

Once these three elements are shown, the burden moves to the defendant to establish a defence.

Republication: why the admin is liable

Each repetition of a defamatory statement is a fresh publication, and the person who repeats it is liable as though they had originated it. This rule is an old one. Applied to a confession page, it means the admin who approves a submission is a publisher of it — arguably the principal publisher, since the anonymous author communicated it only to the admin, and it was the admin who communicated it to the world.

Adding "submitted anonymously", "admin is not responsible for content" or "allegedly" does not change that. A disclaimer is not a defence. If anything, it shows that you were aware the content might be a problem.

Section 114A of the Evidence Act 1950 goes further, by presumption: a person depicted as the owner, host, administrator or editor of a publication, or who facilitates its publication, is presumed to have published its contents unless the contrary is proved.

The defences — and why admins struggle with them

Justification (truth)

It is a complete defence to show that the statement is true, or substantially true. The burden of proving this, however, lies on the defendant, using admissible evidence. An admin who published an anonymous claim has no evidence whatever. They do not know who the author is, cannot call them as a witness, and have no first-hand knowledge of the facts. Believing a submission to be true is not the same thing as being able to prove it.

Fair comment

This defence protects honest expressions of opinion on matters of public interest. Broadly, it requires that the words be comment and not a statement of fact; that the comment be based on facts that are true; that it be one an honest person could hold; and that the subject be a matter of public interest. The defence is defeated by malice.

"The new timetable is a disaster and whoever designed it has clearly never been a student" is comment. "The registrar took a bribe to change the timetable" is an allegation of fact, and calling it an opinion does not make it one. Most problematic submissions are allegations of fact.

Privilege

Absolute privilege covers statements made in settings such as parliamentary and judicial proceedings. Qualified privilege covers statements made in the discharge of a duty to someone who has a corresponding interest in receiving them — a reference written for an employer, or a complaint made to the proper authority. Publishing to the general public on social media falls outside those situations in almost every case.

Courts have also developed a defence for responsible publication on matters of public interest, sometimes called Reynolds privilege. It depends on the publisher having taken responsible steps: verifying the information, seeking the subject's response, and reporting in a fair tone. A confession page that publishes unverified anonymous claims without contacting the person concerned is doing none of this.

Unintentional defamation and offer of amends

Section 7 of the Defamation Act 1957 allows a person who published words innocently in relation to the claimant to make an offer of amends — an offer to publish a suitable correction and a sufficient apology. The conditions are specific, and this is an area in which legal advice is needed, but it reflects a practical truth: a prompt correction and apology count for a great deal.

Innocent dissemination

At common law, a mere distributor — a newsagent, a library — who neither knew nor had reason to know that a publication contained a libel may have a defence. An admin who reads and approves each submission before posting it is not a passive distributor. Pre-moderation, which is the very feature that makes a confession page safer for its community, also makes it difficult to claim that you did not know what you were publishing.

What a claim can cost

A successful claimant may be awarded damages, an injunction requiring removal and prohibiting repetition, and legal costs. Awards in Malaysian defamation cases vary very widely with the seriousness of the allegation, the extent of publication and the conduct of the defendant. For a student the damages may not even be the main burden: the cost and strain of defending proceedings is considerable whatever the outcome.

In Peninsular Malaysia the limitation period for a defamation claim is generally six years from the date of publication, so a post from your first year can still be sued on after you have graduated.

What reduces the risk

Before publishing

• Decline allegations of fact about identifiable people. This is the only measure that really matters; the others are for the occasions when it fails.
• Read for implication, not just for the literal words.
• Be especially careful about small groups and about people identifiable by their role.
• Distinguish a submitter's personal experience and opinion ("I found the service rude") from allegations of fact ("they overcharge foreigners").

After a complaint

• Remove the post promptly. Courts take into account how a defendant behaves once put on notice; continuing to publish after a complaint makes matters worse.
• Do not post about the complaint, mock the complainant, or invite your followers to comment on it.
• Do not admit liability in writing, and do not argue the merits yourself. Acknowledge the complaint, confirm removal, and take advice if a lawyer is involved.
• Keep copies of the post, the complaint and your reply.

As a habit

• Record borderline decisions and the reasons for them.
• Make sure every admin on the team understands that approving a post is publishing it.

Three short examples

"Prof X plagiarised his PhD." An allegation of serious professional misconduct against a named individual. Defamatory on its face; you cannot prove it; it is not comment. Decline.

"The food at the new cafeteria is overpriced and bland." An opinion about a business, drawn from personal experience, on a matter of interest to the community. Low risk.

"Everyone knows which committee member has been sleeping with a lecturer for grades." No name — but the committee is small, and "everyone knows" invites readers to make the identification. It alleges sexual impropriety and academic dishonesty. This is precisely the kind of post that produces a lawyer's letter. Decline.

The underlying principle

Defamation law asks a publisher to stand behind what they publish. An admin cannot stand behind an anonymous claim about a third person, because they do not know whether it is true and have no means of finding out. The honest and legally safe response is to decline to make that claim their own. The practical decision process is in When a submission names someone.

Common questions

Can a confession page admin be sued for defamation over an anonymous post?

Yes. Each repetition of a defamatory statement is a fresh publication, and the person who repeats it is liable as though they had originated it. The admin who approves a submission is a publisher of it, and section 114A of the Evidence Act 1950 presumes that the administrator of a publication published its contents unless the contrary is proved.

Does a disclaimer such as "admin is not responsible for content" protect the page?

No. A disclaimer is not a defence. Adding "submitted anonymously" or "allegedly" does not change who published the statement, and if anything it shows that you were aware the content might be a problem.

Can a post be defamatory if it does not name anyone?

Yes. There is no requirement that the person be named. The question is whether people who know them would reasonably understand the statement to be about them, and a nickname, initials, a job title, a description, a photograph or a combination of details can all be enough.

Is defamation a crime in Malaysia?

It can be both a civil wrong and a crime. Civil defamation is governed by the Defamation Act 1957 and by case law. Separately, sections 499 and 500 of the Penal Code make defamation a criminal offence punishable by up to two years' imprisonment, a fine, or both.

Is it a defence that the statement is true?

Yes — justification is a complete defence where the statement is true or substantially true. The burden of proving it lies on the defendant, using admissible evidence, and an admin who published an anonymous claim has none: they do not know the author and have no first-hand knowledge of the facts.

How long after a post can someone sue for defamation?

In Peninsular Malaysia the limitation period for a defamation claim is generally six years from the date of publication, so a post from your first year can still be sued on after you have graduated.