Age verification and child online safety are part of Malaysia’s regulatory agenda, driven by concerns about children’s exposure to harmful content, cyberbullying, sexual exploitation and scams. In late 2025, the Malaysian Parliament passed the Online Safety Act 2025, which came into force on 1 January 2026.
The Act empowers the Malaysian Communications and Multimedia Commission (MCMC) to regulate online services, require licences for major digital platforms and enforce age-related safeguards. The framework emphasises identity verification and age checks which may involve eKYC methods such as national ID or passport checks.
Officials have indicated that platforms must implement identity and age verification mechanisms as part of licensing and safety compliance.
Social Media
Minimum Age Requirements
Malaysia introduced a minimum age of 16 for social media account ownership on 1 June 2026, under the Child Protection Code and Risk Mitigation Code, issued under the Online Safety Act 2025.[1]
- Minimum age of 16: Users under 16 are not permitted to register for or maintain their own social media accounts.
- Age verification: Platforms must implement age verification mechanisms using official government issued documents, such as a MyKad, passport or other recognised document.
- Protection for existing users: Age verification for existing accounts is being introduced progressively, with a transition period of up to six months.
- Child safety measures: Platforms must implement age-appropriate protections and measures to reduce risks to children.
Platform Enforcement and Compliance
The Malaysian government has begun enforcing the new requirements and has made clear that social media providers must comply with national online safety laws.[2]
Key developments include:
- Enforcement from 1 June 2026: The age verification requirements came into force alongside the Child Protection Code and Risk Mitigation Code.
- Regulatory action: In August 2026, the Ministry of Communications confirmed that the MCMC had issued written notices to social media providers requiring explanations of potential non-compliance and the measures taken to implement age verification.
- Penalties for non-compliance: Under the Online Safety Act 2025, providers may face financial penalties and other enforcement action for failing to meet their legal obligations.
- Ongoing monitoring: The MCMC continues to monitor licensed providers’ implementation of age verification and child safety measures.
The measures form part of Malaysia’s wider approach to protecting children online, combining minimum-age requirements with platform accountability and risk-reduction obligations.
Adult and Harmful Content Controls
Age assurance requirements are linked to preventing children from accessing harmful or inappropriate online material. Under the Online Safety Act framework, platforms are expected to:
- Implement safeguards to restrict minors’ access to harmful or age-inappropriate content.
- Use identity and age verification systems to support access controls.
- Ensure content provided to users under 18 is age-appropriate.
These requirements are connected to broader child protection and online safety objectives.
Chatbots, AI and Interactive Applications
Malaysia is considering extending age verification and identity assurance measures to additional digital services. Policy discussions indicate that these may include:
- Interactive online applications
- AI-driven or conversational services operating as part of regulated online platforms
- Services that provide user-generated or algorithmically delivered content
Online Gaming and Other Digital Services
The government is also examining age verification requirements for online gaming and similar services. Discussions include:
- Potential licensing regimes for gaming and interactive platforms
- Application of identity verification and age assurance tools
- Expansion of compliance obligations beyond social media services
Authorities have also emphasised parental responsibility and digital safety education as complementary measures.
Enforcement Powers and Regulatory Oversight
Under the Communications and Multimedia Act and the Online Safety Act 2025, the MCMC has enforcement powers, including the ability to:
- Issue binding compliance directions
- Impose administrative fines
- Order suspension or blocking of non-compliant services
- Revoke licences in cases of persistent breaches
These powers make age assurance and child safety obligations legally enforceable rather than voluntary.
Technical Implementation and Standards
The MCMC has established a regulatory sandbox to test age assurance technologies with selected service providers[3]. The sandbox is intended to evaluate:
- Reliability and accuracy of age verification and age estimation technologies
- Resistance to fraud and circumvention
- Privacy and data minimisation safeguards
- User experience and accessibility
The results are expected to inform future technical standards or certification schemes.
Child Data Protection and Algorithmic Safeguards
Additional child-focused data protection measures are being discussed, including:
- Restrictions on targeted advertising to minors
- Limitations on behavioural profiling of child users
- Expectations that recommendation and discovery algorithms do not promote harmful content to children
These measures are intended to complement access controls and reduce risks after user access is granted.
[1] https://www.malaymail.com/news/malaysia/2026/08/04/social-media-age-verification-rules-in-force-since-june-1-says-communications-ministry/230205
[2] https://www.independent.co.uk/news/malaysia-kuala-lumpur-meta-youtube-tiktok-b2986883.html
[3] https://www.komunikasi.gov.my/en/public/news/27919-fahmi-government-to-roll-out-social-media-regulatory-sandbox-from-jan-1