MCMC introduces mandatory biometric SIM registration standards, capping prepaid SIMs at 5 per Malaysian

PETALING JAYA: The Malaysian Communications and Multimedia Commission (MCMC) has introduced a new mandatory framework to strengthen prepaid SIM card registration in Malaysia to combat scams and identity-related crimes.

In a statement today, MCMC announced that it has registered the Commission Determination for the Mandatory Standards for the Registration of End-users of Prepaid Public Cellular Services, pursuant to Sections 55 and 104(1)(b) of the Communications and Multimedia Act 1998 (CMA 1998).

“The Mandatory Standards establish a future-ready framework featuring biometric authentication and MyDigital ID for self-registration, mandatory secure automated platforms to reduce fraudulent registrations, and stricter controls for non- Malaysian registrations including biometric-based passport verification,” the government body stated.

According to the commission, the enhanced framework adopts a balanced approach that takes into account security requirements, ease of user access and personal data protection.

Among the key improvements under the new standards is the introduction of biometric authentication and the use of MyDigital ID for self-registration. The framework also mandates secure automated registration platforms to minimise fraudulent or unauthorised registrations.

Stricter requirements have also been introduced for non-Malaysian registrations, including biometric-based passport verification to prevent misuse of foreign identities.

In addition to technological enhancements, the Mandatory Standards incorporate several consumer-centric safeguards.

For Malaysian citizens, permanent residents and temporary residents, SIM ownership will now be capped at five prepaid SIM cards per individual per service provider. For non-Malaysians, the limit has been reduced to two prepaid SIM cards per individual per service provider.

The standards also prohibit the registration of prepaid SIM cards for children below the age of 12.

For minors aged between 12 and 17, registration must be carried out by a parent or legal guardian. The parent or guardian’s information and consent must be recorded as part of the registration process.

To enhance transparency and efficiency, service providers are required to notify end-users of their registration status within 12 hours.

Tourist SIM cards will also be subject to tighter controls, as the SIMs will only be valid for a maximum of three months, after which they will be automatically terminated.

“Service providers and their appointed dealers are reminded to ensure full and timely implementation of the Mandatory Standards, as any non-compliance may result in regulatory action to safeguard a safer and more secure communications ecosystem. “

The commission also advised consumers to register prepaid SIM cards only through licensed service providers and authorised dealers.

 The Sun Malaysia