Malaysia's 2026 tourist SIM rules: passport checks, two lines and three months
Malaysia introduced a binding prepaid mobile registration standard on February 26, 2026. It did not receive much international travel coverage, but it affects anyone opening a Malaysian prepaid line as a tourist. The signed rules require passport verification, limit a non-Malaysian to two prepaid SIMs with each provider and end a tourist-registered line no later than three months after registration.
The rule covers the Malaysian subscription, whether the provider delivers it on a plastic SIM or a local operator eSIM. A Roaming eSIM is a different product: it supplies travel data through partner networks without opening a Malaysian prepaid number, so this local-line registration process is not part of the purchase.
The traveler decision: choose a Malaysian prepaid line when a local number, domestic calls or a carrier-specific visitor package matters. Choose a Roaming eSIM when data is enough and buying before departure without registering a Malaysian number is the better fit.
What Malaysia changed for tourist prepaid SIMs
The Malaysian Communications and Multimedia Commission registered its new mandatory prepaid registration standard on February 26. The final signed Commission Determination took effect on the same date.
For a visitor registered as a tourist, the practical rules are:
| Check | What the 2026 determination requires |
|---|---|
| Identity | Passport from the visitor's country of origin, plus a visa document when applicable |
| Address | Hotel or temporary residential address, supported by evidence such as a booking form |
| Assisted registration | Passport-reader verification with facial recognition for a non-Malaysian |
| SIM limit | No more than two prepaid SIM cards per person with each service provider |
| Status notice | The provider must notify the user of registration status within 12 hours of completion |
| Tourist-line validity | Up to three months from completed registration, followed by automatic termination |
This is a registration limit, not a promise of three months of paid data. A seven-day tourist package can still end after seven days. The rule sets the latest point at which the local prepaid service registered to a tourist can remain active.
The tourist category is based on the registration route
The determination describes a tourist as a non-Malaysian visiting for not more than three months. It separately lists foreign workers and students, temporary residents and holders of specified immigration documents. Those groups have different identity and address requirements.
A traveler should not choose whichever category appears easiest in an app. Use the status and documents that actually apply. A worker or student can be asked for a work permit or student pass, while a short-stay tourist is asked for a passport, any applicable visa and a hotel or temporary address.
This distinction also answers a common question about a generic prepaid package. The three-month rule is tied to a line registered under the tourist category. Calling the package a standard prepaid plan instead of a tourist plan does not change the identity used to register it.
The determination gives an exception to the new two-line cap for non-Malaysians who had already registered more than two lines with a provider before the rule took effect. It does not say that every older tourist line is exempt from the separate service-validity rule. Anyone relying on a pre-February line should ask the issuing carrier to confirm the recorded category and termination date.
What to bring for a Malaysia tourist SIM registration
The signed standard requires the service provider or appointed dealer to verify the registration details against original identity documents. For a tourist, it lists:
- the passport from the country of origin;
- a visa document when the visitor needs one;
- the hotel or temporary residential address; and
- evidence of that address, which can include a hotel reservation or booking form.
For assisted registration, the standard specifies a passport reader and facial biometric authentication. A request to present a passport and complete a live face check can therefore be part of a legitimate process. It is still sensible to confirm who is collecting the data.
Use a carrier-owned store, an appointed dealer or the provider's official platform. Do not send passport images, verification codes or face photos to an unknown seller's personal messaging account. The determination says an unauthorized person must not register the line, and a dealer without the provider's secure registration platform is not permitted to do so.
Document check: a passport and face scan can be required. The safe route is the named carrier's official app, store or appointed dealer, not a stranger offering a pre-activated SIM.
Self-registration pages do not all explain the new rule clearly
The general self-registration route in the determination uses an authorized provider platform with identity-document scanning, MyDigital ID verification and multi-factor authentication. Carrier pages show how their own customer flows apply those requirements.
Hotlink's current self-registration guide tells a non-Malaysian to scan a passport and complete Face ID in the Hotlink app. Maxis's eSIM FAQ says a short-stay visitor with an eSIM-only phone can buy Hotlink Prepaid eSIM through the app without a Malaysian ID. That does not mean no identity check: the linked Hotlink process uses the passport.
One live carrier page still appears to lag the regulation. U Mobile's generic prepaid registration guide groups foreigners and tourists under wording that says they must have fewer than five SIM cards. The signed 2026 determination sets the non-Malaysian limit at two per provider. Use the regulator's current limit and ask U Mobile to clarify the account if the app or store shows something different.
That inconsistency is one reason to keep the registration confirmation. A product page can be current for its package price and still contain an older number-limit explanation elsewhere.
A long-validity package cannot extend a tourist line past three months
The three-month clock starts when registration is completed. The provider must automatically terminate the prepaid service at the end of its applicable validity and, in every case, no later than the three-month maximum.
That has three consequences:
- A short package can expire before the registration does.
- Adding credit or buying another package does not override the tourist registration ceiling.
- Unused credit, a yearly-validity add-on or an account label should not be treated as proof that the line will survive beyond three months.
The determination does not promise a refund for unused credit when the tourist validity ends. Before buying a large balance or long-duration add-on, ask the carrier what happens to remaining credit and whether the package is even available to the tourist registration category.
This matters most to frequent visitors, long-stay travelers and people who use a Malaysian number for app accounts. A local number that disappears can affect login codes, ride accounts or messaging contacts. Move important accounts to a number you control for the required period before the stated termination date.
Registration status should arrive within 12 hours
The provider must notify the end user of the registration status within 12 hours after completion and provide a support channel for questions. That is a notification deadline, not a guarantee that every submission will be approved.
Before leaving the counter or depending on an online activation:
- Save the local number, package name and seller details.
- Keep the receipt and registration acknowledgement.
- Turn off Wi-Fi and test mobile data.
- Test an included call or SMS if the package promises those services.
- Check the carrier app for the registered identity, balance and expiry.
- Follow up through official support if no status notice arrives within 12 hours.
Do not accept an already active line registered to someone else. The 2026 standard prohibits pre-activated SIM sales and requires consent before a person's information can be used to register another SIM.
Current Malaysian tourist products still have different benefits
The registration rule does not make every local tourist package the same. CelcomDigi's Tourist SIM FAQ lists 3, 7, 14 and 30-day choices for non-Malaysian passport holders. It names sales points at Kuala Lumpur, Penang, Kota Kinabalu and Tawau airports, plus selected transport hubs and tourist areas. Depending on the package, the offer can include hotspot use, domestic calls and a small ASEAN roaming allowance.
U Mobile's separate visitor offer focuses on large Malaysia data allowances and a limited Grab benefit. Our U Mobile Malaysia tourist eSIM report covers its current package prices, prepaid balance, passport registration, hotspot and promotion terms. That page now links back to this regulation guide because the product's 30-day option sits inside the wider three-month tourist-line ceiling.
These carrier products can be a strong choice when the itinerary stays in Malaysia, their local coverage fits the route and the traveler wants a Malaysian number or included domestic services. A local product does not automatically win for a trip continuing into Singapore, Thailand or Indonesia. Compare the actual roaming allowance and expiry instead of assuming an ASEAN label covers the whole journey.
Malaysian local SIM, local operator eSIM or Roaming eSIM?
The SIM format does not decide which law applies. The subscription does.
| Choice | Malaysian registration | Local number and calls | Best fit |
|---|---|---|---|
| Malaysian physical prepaid SIM | Passport, address and biometric checks apply to the tourist route | Usually includes a Malaysian number; allowances vary | Traveler who wants a local line and can register through an official seller |
| Malaysian operator eSIM | Same local subscription rules can apply | Depends on the carrier package | eSIM-only phone or traveler who wants a local line without plastic |
| Roaming eSIM | Does not open a Malaysian prepaid number, so the local registration described here is not part of the purchase | Treat as data-only unless the selected card says otherwise | Traveler who wants pre-arranged data without a Malaysian account |
| Home-carrier roaming | No new Malaysian subscription | Keeps the usual number under the home carrier's terms | Short trip where the roaming price and allowance are acceptable |
A carrier-locked phone cannot use a different provider simply because the profile is digital. Check whether the phone supports Roaming eSIM, and install the profile on reliable internet using the pre-travel installation guide.
Where Roaming eSIM has the edge in Malaysia
The live Roaming eSIM catalog returned 33 Malaysia packages when checked on August 15. It included fixed-data and daily high-speed options with validity choices from 1 to 180 days. Package records named Celcom, CelcomDigi, Digi, Maxis or U Mobile depending on the selected card. Thirty-one of the 33 records were marked eligible for top-up, so reloadability must still be checked on the exact card.
🏆 Roaming eSIM wins for simpler pre-arrival data and regional choice: a traveler can compare the live allowance, validity, price, speed label, listed operators and package-level top-up status before paying. The purchase does not open a Malaysian prepaid number, and Roaming eSIM publishes 24/7 support and a WhatsApp route.
That is the honest edge over the local-registration news. Roaming eSIM removes the passport, hotel-address and Malaysian-number enrollment step when the traveler only needs data. It does not provide a Malaysian phone number, bypass a locked-device restriction or guarantee better coverage than every local plan.
For Malaysia only, start with a Malaysia Roaming eSIM. A Singapore and Malaysia Roaming eSIM can fit a two-country itinerary, while a Singapore, Malaysia and Thailand Roaming eSIM can reduce profile changes on a three-country route. Use the country versus regional plan guide to compare the country list, data and validity rather than buying from the regional name alone.
Malaysia SIM checklist before travel
- Decide whether a Malaysian phone number or domestic calling is necessary.
- Confirm that the phone is unlocked and supports the selected SIM format.
- For a local line, carry the original passport, any required visa and proof of the hotel or temporary address.
- Use the carrier's official app, owned store or appointed dealer.
- Expect passport verification and a face check, but verify who receives the documents.
- Count existing prepaid lines with the same provider before attempting another registration.
- Ask for the exact package expiry and the separate tourist-line termination date.
- Save the registration acknowledgement and follow up if no status notice arrives within 12 hours.
- Keep essential bookings, maps and support details offline.
- If choosing Roaming eSIM, read the selected card's network, allowance, hotspot, activation and top-up fields before checkout.
Questions travelers ask about Malaysia SIM registration
Do tourists need a passport to buy a SIM in Malaysia?
Yes, for a Malaysian prepaid line registered to a tourist. The 2026 determination lists the passport, a visa when applicable and a hotel or temporary residential address. A provider can also request evidence such as a booking form for that address.
Is facial recognition required for a Malaysia tourist SIM?
The assisted-registration method for non-Malaysians uses a passport reader with facial recognition. Current carrier self-registration pages also describe face verification. Complete it only through an official provider platform, store or appointed dealer.
Can a tourist register more than two Malaysian SIMs?
Not with the same provider under a new registration. The limit is two prepaid SIM cards per non-Malaysian per service provider. A person can have lines with different providers, subject to each provider's cap and registration checks.
What if I already had more than two lines before February 26?
The determination exempts non-Malaysians who already held more than two lines with a provider before enforcement from the new numerical cap. It does not guarantee that every old tourist-registered line is exempt from the separate validity rule, so confirm the status with the carrier.
Does a Malaysia tourist SIM expire after three months?
Yes. A line registered under the tourist category can be used for a maximum of three months from completed registration and must then be terminated automatically. A shorter data package can expire sooner.
Can a top-up keep the tourist SIM active for a year?
Do not assume so. Credit or a long-validity add-on cannot override the three-month tourist registration ceiling. Ask the provider what happens to unused credit before buying more than the trip requires.
Can I buy a Malaysian eSIM before arriving?
Some operators publish online visitor routes. Maxis directs short-stay users to Hotlink Prepaid eSIM, and U Mobile offers a visitor eSIM route. The profile is still a Malaysian local subscription, so follow the provider's passport and identity process.
Does Roaming eSIM need Malaysia tourist SIM registration?
Roaming eSIM does not open a Malaysian prepaid number, so the local registration described in the determination is not part of the purchase. The device must still be unlocked and compatible, and the selected plan's own terms still apply.
Will Roaming eSIM give me a Malaysian phone number?
Not unless the exact package card says so. Treat current Malaysia choices as travel data and use app calls or keep the usual SIM available. Choose a local carrier product when a Malaysian number or native call allowance is essential.
Is an airport SIM safer than buying online?
The location alone does not decide. An official airport carrier kiosk can be appropriate, while an unauthorized seller can misuse identity details. Confirm the carrier, registration record, package and receipt, then test the service before leaving.
Sources and updates
This report was published on August 15, 2026 after a broader review found the February rule was highly relevant but missing from our news library. The registration date, biometric framework, numerical limits and tourist validity were checked against MCMC's announcement and the signed determination. Bernama's March follow-up confirmed the government explanation.
Current Roaming eSIM plan counts and fields came from the public Malaysia package endpoint at about 09:00 UTC on August 15.
The page will be updated if MCMC changes the tourist category, identity method, two-line limit, status-notice deadline or three-month validity, or if carriers materially change their visitor registration routes.
