THE Malaysian Communications and Multimedia Commission (MCMC) has officially introduced a new Mandatory Standards framework for the registration of prepaid mobile users, aimed at addressing long-standing vulnerabilities that have enabled SIM card misuse for online scams and identity fraud.
The initiative introduces stricter safeguards for consumers while maintaining accessible mobile services.
The Commission Determination, issued under sections 55 and 104(1)(b) of the Communications and Multimedia Act 1998, marks a significant regulatory step in modernising Malaysia’s prepaid SIM registration system.
It establishes a future-ready framework incorporating biometric authentication, MyDigital ID self-registration, secure automated platforms to prevent fraudulent sign-ups, and enhanced verification processes for non-Malaysian users through biometric-based passport checks.
“MCMC emphasises that the implementation of the Mandatory Standards balances security, ease of access, and personal data protection,” the Commission said, highlighting the dual goal of preventing fraud while ensuring convenient service for users.
The new framework also introduces a series of consumer-focused measures.
Malaysian citizens, permanent residents, and temporary residents are now limited to five prepaid SIM cards per service provider, while non-Malaysians may register up to two SIMs per provider.
Registration for children under 12 is prohibited, while minors aged 12 to 17 must have their SIMs registered by a parent or guardian, with consent and supporting information recorded.
End-users will receive confirmation of their registration within 12 hours, and tourist SIM cards will remain valid for a maximum of three months before automatic termination.
Service providers and authorised dealers are urged to fully comply with the Mandatory Standards, with non-compliance potentially resulting in regulatory action to maintain a secure communications environment.
Consumers are advised to register prepaid SIMs only through licensed channels and remain vigilant against unauthorised registration outlets. - February 26, 2026
