Communications Minister Datuk Fahmi Fadzil announced in the Dewan Rakyat today that social media platforms not complying with age-verification rules could face penalties up to RM10 million under the Online Safety Act 2025 (Act 866) [1, 2, 3, 4].

The Malaysian Communications and Multimedia Commission (MCMC) can issue notices of non-compliance to licensed application service providers who fail their obligations under Part III of the Act. Providers must either pay the penalty or submit representations to the MCMC for review [1, 2, 3, 4].

Section 30 of Act 866 empowers the MCMC to issue written directives regarding compliance. Failure to obey these directives is an offence punishable by fines up to RM1 million, plus additional fines up to RM100,000 for each day the offence continues after conviction, according to Fahmi [1]. He said, "Failure to comply with such directives constitutes an offence and, upon conviction, may result in a fine of up to RM1 million, as well as an additional fine of up to RM100,000 for each day the offence continues after conviction." [1]

Since January 2026, Malaysia's government has engaged social media companies more than 30 times through a regulatory sandbox initiative to discuss age-verification implementation. Fahmi said, "Each platform faces its own challenges and business objectives, but the government is proceeding with age-verification requirements in line with practices already adopted in more than 25 countries worldwide." [1, 2, 3, 4]

The age-verification measures aim to align with international standards already adopted by over 25 countries to improve online safety for users across Malaysia [1, 2, 3, 4].

Fahmi emphasized the consequences for non-compliance: "For non-compliance with Part III of Act 866, licensed service providers may be subjected to financial penalties of up to RM10 million as provided under Section 39 of the Act." [1]

The government’s efforts follow extensive consultations with social media providers, balancing enforcement with flexible compliance mechanisms. The MCMC will continue overseeing compliance and issuing penalties where necessary.

The regulatory sandbox and engagement sessions remain active to help companies implement age verification ahead of enforcement action [1, 2, 3, 4].