KUALA LUMPUR – The Malaysian Communications and Multimedia Commission (MCMC) has introduced a new regulatory framework aimed at addressing the misuse of prepaid SIM cards for online scams and identity-related fraud.
The revised guidelines establish a “future-ready” verification process as part of the new Mandatory Standards for prepaid SIM registration.
These updated standards, which fall under the Communications and Multimedia Act 1998, incorporate biometric authentication and MyDigital ID for self-registration. Additionally, non-Malaysian individuals will be subject to mandatory biometric passport verification.
The new rules limit SIM ownership to five prepaid cards per individual for Malaysian citizens and residents, while non-Malaysians are restricted to two cards per service provider.
To further strengthen protections, SIM card registrations for children under 12 are prohibited. Minors aged 12 to 17 must have their accounts registered by a parent or guardian, with recorded consent required.
Tourist SIM cards will now have a maximum validity of three months, after which they will be automatically deactivated.
Additionally, service providers must notify end-users of their registration status within a 12-hour window.
“The implementation of Mandatory Standards takes into account a balanced approach between security requirements, easier user access and the protection of personal data,” said MCMC in a press release.
The commission also issued a warning that service providers and authorised dealers must adhere to the new standards, with non-compliance potentially leading to regulatory action.
Consumers are encouraged to register their prepaid SIM cards only through licensed providers and authorised dealers to avoid the risk of unauthorised registrations. – February 26, 2026