Malaysia has mandated that licensed social media service providers must verify that users are at least 16 years old before allowing them to register accounts. Providers must use official documents such as MyKad, passports, or birth certificates to confirm users’ ages, according to the Child Protection Code (CPC), which took effect on June 1, 2026 [1, 2, 3, 4, 5].
The Malaysian Communications and Multimedia Commission (MCMC) oversees compliance with the CPC. Under the Online Safety Act 2025 (Act 866), licensed providers who violate the age verification rule face fines up to RM1 million plus RM100,000 per day, and MCMC can impose penalties up to RM10 million [1, 2, 3, 4, 5].
From January 2022 to July 2026, MCMC submitted 292,102 takedown requests related to online scams, paid ads, fake accounts, and harmful content. Approximately 96% (279,875) of these items were removed. During the same period, 20,114 takedown requests targeted unauthorized advertisements, products, and services, with an 86% removal rate (17,285) [1, 2, 3, 4, 5].
Additionally, 17,418 websites were blocked from 2022 to July 2026. Of these, 29% (5,103) were blocked under MCMC jurisdiction, while 71% (12,315) were blocked by other enforcement agencies [1, 2, 3, 4, 5]. Actions including content removal, account suspension, and website blocking rely on complaint assessments, platform guidelines, and applicable laws.
Between January 2022 and June 2026, MCMC also submitted 14,169 takedown requests for race, religion, and royalty (3R) content, with 62% (8,750) removed. During this time, 462 cases related to 3R content were investigated under Section 233 of the Communications and Multimedia Act, resulting in 22 prosecutions; 16 cases have concluded and 6 remain ongoing [2, 5].
The CPC’s age verification rule aims to prevent minors from accessing social media without proper safeguards. Licensed service providers must continue enforcing these measures under oversight by MCMC, with penalties for noncompliance set by the Online Safety Act 2025.
