Malaysia Mandates Age Checks for Social Media Users, ID Verification for Advertisers

Why It Matters

The rules protect children and consumers while imposing hefty compliance obligations on global platforms seeking to operate in Malaysia’s 35‑million‑user market.

Key Takeaways

• Under‑16s barred; new accounts need MyKad + facial verification
• MyDigital ID verifies age without storing biometric or ID copies
• Platforms must verify advertisers’ identities against government records
• Non‑compliance can incur fines up to RM10 million (≈US$2.5 million)
• Scams cost Malaysians RM680 million (≈US$171 million) Jan‑Apr 2024)

Pulse Analysis

Malaysia’s move to mandatory age verification reflects a broader regional push to secure digital spaces for minors. By leveraging the MyKad smart ID and the MyDigital ID platform, the government can confirm a user’s age through live facial biometrics while keeping personal documents and biometric templates out of private servers. This approach balances child protection with privacy, positioning Malaysia alongside Indonesia as one of the strictest jurisdictions for social‑media onboarding. The system also showcases how national digital‑identity infrastructures can be repurposed for online safety without expanding the data‑exposure surface.

The newly introduced Risk Mitigation Code (RMC) expands the safety net beyond age checks, targeting the full ecosystem of social‑media advertising and content moderation. Platforms must now verify the identity of every advertiser using government‑issued IDs such as MyKad, passports, or business registration documents, a step designed to choke the flow of fraudulent sponsored posts that have fueled investment scams and illegal gambling. In addition, the code forces platforms to conduct continuous risk assessments, flag deepfakes, and upgrade reporting tools, with penalties reaching RM10 million (≈US$2.5 million) for non‑compliance. These obligations raise operational costs for global tech firms but also create a clearer regulatory baseline for responsible digital commerce.

The combined age‑gate and RMC signal that Malaysia is positioning itself as a testbed for comprehensive online‑safety legislation in Southeast Asia. With online scams already costing the nation roughly US$171 million in the first four months of 2024, the government’s aggressive stance could pressure neighboring markets to adopt similar frameworks, potentially reshaping how multinational platforms design their compliance architectures. While the measures promise stronger consumer protection, they also raise questions about the scalability of centralized identity verification and the balance between enforcement and user privacy in a rapidly evolving digital landscape.