Malaysia's Under-16 Social Media Rule: Will My Account Go?

Many Malaysian users and parents are asking whether their accounts will be suspended under the new under-16 rule. This guide sticks to what MCMC has published and explains what to do if your account is flagged by mistake.

Last checked: 29 October 2026 against the sources listed at the end of this guide.

Keep a dated note of every screen you see, including the exact wording shown, before you press continue on any form.

#What does the rule actually say?

MCMC says that from 1 June 2026 licensed social media service providers must ensure only users aged 16 and above can register accounts, with age verification against government-issued records or equivalent records recognised by the Government of Malaysia. MCMC's statement names Facebook, Instagram, TikTok and YouTube.

Malaysia's MCMC says that from 1 June 2026, social media platforms are required by law to verify user age. Under 16, you can't create or manage your own social media account, but you may use social media through a parent's or guardian's account with their supervision. At 16 and 17, social media is permitted with parental controls and default privacy set to the highest protection. MCMC says platforms may use different methods, but age verification must meet Malaysian law, including methods based on government-issued records or documents where required, and users should follow their platform's own guidance.

#Is WhatsApp included?

MCMC's statement lists Facebook, Instagram, TikTok and YouTube. It does not name WhatsApp. Check WhatsApp's own notices rather than assuming either way.

#What happens to existing accounts?

MCMC says age verification for existing users will be implemented progressively over up to six months. Users identified as under 16 will be given one month to download or transfer their data, including photos and videos, before any restriction or suspension. Users who cannot be verified as 16 or older may be unable to access accounts after any grace period.

#I'm an adult and my account was flagged. What should I do?

1. Complete the verification the platform offers inside the app, using your own MyKad or passport details as requested.
2. Keep screenshots of each step and any message from the platform.
3. Do not create a second account while the first is under review.
4. If the check fails, read our age verification appeal guide before retrying.

Instagram's About disabled accounts page notes that in certain regions, Instagram may disable accounts for people in a specific age range in line with local laws and regulations. If you think it was a mistake, log in and follow the on-screen instructions to request a review.

Meta's How video selfie age verification works page says you may be asked to verify your age by taking a video selfie or uploading your ID. With a video selfie, Meta shares an image from it with a vendor whose technology only estimates age and can't identify specific people, and Meta deletes the image within 30 days of the age being estimated. Make sure your whole face is visible, with good light and nothing like a mask or hat covering it. Verification can take up to 20 minutes, and you'll get a notification with the result.

#Which platforms does Malaysia's rule cover?

Related guides: Instagram Removed My Account Under Australia's Under-16 Rule but I'm Over 16: How Do I Appeal?, UK Online Safety Act: Why Is Instagram Asking Me to Verify My Age?.

Meta's Prohibited Commercial Practices policy says Meta prohibits content that deceives people out of money, property or personal information, including false job offers, celebrity and brand bait, investment schemes with guaranteed returns, giveaway schemes and romance schemes. It also lists links that appear to lead to legitimate sites but instead lead to scam sites. Meta says its enforcement isn't perfect and it may not detect every violation, so reporting helps.

#How do I keep the account safe while I sort this out?

• Never share a login code, password or backup code with anyone, including people who say they work for Meta, the police or a recovery service.
• Make sure the email address and phone number on the account are ones you still control, and remove any you do not recognise.
• Turn on two-factor authentication where the platform offers it, ideally with an authenticator app, and keep your backup codes somewhere offline.
• Log in only from the official app or by typing the address yourself, not from links in messages, comments or ads.
• Keep screenshots of every notice, email and step you take, with dates, in case you need them for a review or a report.
• Make one careful attempt at each official step rather than many rushed ones, because repeated failed attempts can trigger extra checks.

#When It Is Safer to Get Expert Help

Ask for help before you appeal if the account matters to your income, your business or your memories, if you have already had one appeal rejected, or if you cannot tell whether the problem is a bug, a restriction or a hack. That is where most avoidable losses happen.

AwareXone is independent and not affiliated with Meta, Instagram, Facebook, WhatsApp or Threads. Recovery work is best-effort and the platform makes the final decision.