Prepaid SIM registrations must adhere to MyDigital ID standards – MCMC

The Malaysian Communications and Multimedia Commission (MCMC) has reaffirmed that prepaid SIM registrations will be anchored to a single, secure verification framework, centered on the government-backed, MyDigital ID.

The commission explained that the suggestions by some telecommunication companies that alternative or fallback verification methods should be introduced would risk weakening the consistency and security of the registration process.

Such a view was outlined in the recently published public inquiry paper on the proposed Mandatory Standards for the Registration of Prepaid End-Users, following an inquiry that was held from October to November 2025.

“Allowing fallback verification pathways would undermine the integrity, consistency and assurance objectives of the Mandatory Standards and create enforcement ambiguity,” stated MCMC in the 157-page report.

As such, the Commission continued, service providers are therefore expected to ensure their systems are ready to operate fully in line with the prescribed requirements and may not rely on system contingency as “a basis for deviation.”

In the paper, MCMC also stressed that while MyDigital ID is a key verification tool, it does not replace service providers’ statutory obligations under the Communications and Multimedia Act “to ensure compliant registration, record keeping, traceability and auditability.”

“Regulatory accountability for prepaid registration therefore remains with Service Providers. Enforcement action will continue to be directed at regulated entities, without prejudice to lawful inter-agency cooperation,” read the paper.

The public inquiry received 15 submissions, including responses from both service providers and members of the public.

In a press statement announcing the publication of the paper, MCMC pointed out that weaknesses in the current registration system have allowed the misuse of prepaid SIM cards for fraudulent activities, including online scams.

“Current self-registration mechanisms, which rely on document uploads, remain vulnerable to forgery and identity theft, while the absence of a secure digital identity anchor limits the traceability and accountability of end-users.

“Collectively, these gaps pose significant risks to consumer safety, national security and the integrity of digital services, necessitating a more secure, uniform and enforceable regulatory framework,” said MCMC in the statement.

MyDigital ID’s identity verification technology was adopted by all telecommunications companies into their respective mobile applications in December last year as part of a national initiative aimed to protect users from scam calls, identity spoofing and fraud that use unverified or misused prepaid SIM cards.