Malaysia will enforce age verification for social media users using the government-issued MyDigital ID to block anyone under 16 from registering accounts, effective June 1, 2026 [1, 2]. The requirement stems from two new codes under the Online Safety Act—the Child Protection Code and Risk Management Code—that mandate proof of government-issued ID for age verification on social platforms [1, 2].

MyDigital ID verifies users by checking official records held by the National Registration Department (NRD) without requiring users to submit or store physical ID copies or biometric data like fingerprints or facial images. Dr Megat Zuhairy Megat Tajuddin, CEO of NACSA, said, “MyDigital ID does not require users to submit or store physical ID copies, nor does it store biometric data such as fingerprints or facial images. Instead, it verifies users against official records held by the National Registration Department (NRD) to ensure that sensitive data remains within a secure and trusted government system.” [2]. This method limits data sharing and repeated storage, centralizing verification within a secure government system to protect privacy while safeguarding children online, according to NACSA leadership [1].

The system acts as a secure intermediary by providing only necessary age verification information to social media platforms, preventing them from accessing detailed personal data [1, 2]. This approach aims to reduce data breaches and lower the risk of cyberattacks tied to dispersed personal information [1, 2].

Some youths may try to bypass the system, prompting the government to strengthen legal frameworks. The upcoming Cybercrime Bill is expected to criminalize abuse and unauthorized disclosure of digital identities to deter such attempts [1]. Real-time facial recognition combined with the physical MyKad card will be used to improve security beyond simply relying on accounts like email, which can be faked to evade age restrictions [1].

The measure aligns with global trends to protect young internet users from harmful content, cyberbullying, and exploitation by increasing accountability and offering legal protections against digital identity abuses [1].

The Online Safety Act codes requiring MyDigital ID age verification take effect on June 1, 2026, after which all social media platforms operating in Malaysia must comply with the new proof of age requirements [1, 2].