eSIM in Malaysia, September 2026: The MDAC Entry Form, MCMC’s New Passport Rule, and Which Tourist SIM Actually Works

Elwin, Chief editor

If it's your first time using eSIM, saily.com is the best choice.

saily.com is the top brand recommended by eSIMingo as an eSIM that makes travel comfortable. Despite launching in March 2024, it boasts nearly 9,000 reviews and a high ★4.6 rating on Trustpilot, the world's largest review site (as of September 2025), proving its reliability.
Provided by the company known for the security service NordVPN, it offers robust free options like blocking malicious URLs and data saver via ad blocking. Compatible with Apple Pay & Google Pay, eliminating the need to enter card numbers.
Using coupon code "ESIMIN0948" grants a $5 discount, making it arguably the best value for money at the discounted price.

Sign up for saily.com

Jasmine, Expert

If you want to keep costs down, go to esim4travel.com

 

If sharing photos with friends, checking reviews, and navigating with Google Maps is all you need, the 1GB plan from esim4travel.com is perfect. If you run out of data, you can easily add a new plan. Nearly all plans are among the most affordable travel eSIM plans available. Use the eSIMingo exclusive coupon [ESIMINGO] for an additional 10% discount and save even more!

Sign up for esim4travel.com

Lee, Tech director

Unlimited data? Nomad

 

When staying at budget hotels or suburban accommodations abroad, the WiFi signal is often weak, drops out occasionally, or isn't even provided at all. That's where Nomad comes in for working on my laptop while traveling overseas. No need to worry about data limits during trips for online meetings or OS updates. Use coupon code "ESIMTENNSZ" for a $5 discount, and you can even try 1GB of free connectivity before your trip as practice.

Sign up for Nomad

Bottom line: Malaysia now runs two separate checks that most eSIM guides ignore. First, almost every foreign visitor must file the Malaysia Digital Arrival Card (MDAC) online, no more than three days before arrival, through the Immigration Department’s own portal — it is free and is not a visa, and only Singapore citizens, Malaysian citizens and permanent residents, diplomats, Brunei General Certificate of Identity holders, Brunei–Malaysia Frequent Traveller Facility users, Thai border-pass holders and Indonesian cross-border document (PLB) holders are exempt. Second, under a new Mandatory Standard the Malaysian Communications and Multimedia Commission (MCMC) registered on 26 February 2026, a non-citizen can hold no more than two prepaid SIM cards per operator, a tourist SIM is valid for a maximum of three months from successful registration before it is automatically terminated, and registration requires the traveller’s original passport — plus original visa where one is needed — read through a passport reader with facial verification; photocopies, photos and scans are not accepted. Neither of those checks needs you to already be online, but both go faster if you are. For a short trip, that argues for installing a travel eSIM before departure and treating an in-person local SIM as a backup, not the default.

This page was written from primary sources in September 2026: the Immigration Department of Malaysia, the Malaysian Communications and Multimedia Commission, and the tourist SIM and travel eSIM product pages published directly by Maxis (Hotlink), CelcomDigi and U Mobile. It is not a price table. In Malaysia the things that actually change a trip are the paperwork you file before you land, the identity check now attached to any local SIM, and the gap between what a carrier’s marketing page promises and what you are actually eligible to buy as a tourist.

1. Before you land: the Malaysia Digital Arrival Card

Since 1 January 2024, most foreign travellers to Malaysia must submit the Malaysia Digital Arrival Card (MDAC), an electronic form administered by the Immigration Department of Malaysia. It collects passport details and travel itinerary information and must be filed online no more than three days before arrival, through the official portal only. It costs nothing and is not a substitute for a visa — if your nationality requires a visa, you still need one separately.

Exemptions are narrow: Singapore citizens, Malaysian citizens and permanent residents, diplomats and official passport holders, Brunei General Certificate of Identity holders, users of the Brunei–Malaysia Frequent Traveller Facility, Thai border-pass holders, and holders of Indonesian cross-border travel documents (PLB). Everyone else should assume they need to file it.

The Immigration Department and Malaysian media have repeatedly warned about fake MDAC websites that charge fees of up to USD 80 for a form that is free on the real portal. The safest habit is to type the official address directly rather than follow a search ad or a link from a booking site, and to do it from a working connection at home rather than scrambling on unfamiliar airport wifi.

2. MCMC’s 2026 prepaid rules: what changed for tourists

Malaysia has required identity registration for prepaid SIM cards since 2017, but MCMC tightened the regime with a new Mandatory Standard for the Registration of End-Users of Public Cellular Prepaid Services, registered on 26 February 2026 under Sections 55 and 104(1)(b) of the Communications and Multimedia Act 1998. The stated aim is to cut down on scam and mule numbers, and several of the new provisions bear directly on tourists.

• SIM limits differ by residency. Malaysian citizens and permanent residents can hold up to five prepaid SIM cards per service provider; non-citizens, including tourists, are capped at two per provider.
• Tourist SIMs expire on a clock, not just on data. A prepaid SIM registered under the tourist category is valid for a maximum of three months from the date of successful registration, after which it is automatically terminated regardless of remaining balance.
• Registration needs the original document, in person. Foreign nationals must present an original passport — and an original visa where one is required to enter Malaysia — which is read through a passport reader with facial-recognition verification. Photocopies, photographs of the passport, or scanned copies are not accepted.
• Age limits apply. Children under 12 cannot be registered at all; minors aged 12 to 17 must be registered by a parent or legal guardian with the guardian’s own details recorded.
• Providers must confirm registration quickly. Telcos are required to notify the user of their registration status within 12 hours of the attempt.

None of this makes buying a local SIM impossible — it makes it a counter transaction with a passport check, not a vending-machine purchase, and it puts a hard expiry date on the card that has nothing to do with how much data you have left. For a one or two week trip, that expiry is irrelevant; for anyone planning a stay close to three months, it is worth knowing before you rely on the same SIM for the whole trip.

3. What the carriers actually sell tourists

All three major Malaysian operators publish a dedicated tourist product, and the details differ enough that the marketing tagline (“unlimited”, “5G”) is less useful than the fine print.

Maxis — Hotlink Travel SIM

Maxis’s prepaid brand Hotlink sells a Travel SIM covering Malaysia, Singapore, Thailand and Indonesia on one card, with a fair-usage data allowance at uncapped speed and unlimited domestic calls within Malaysia. As of its most recent update, the tiers are a 7-day pack at RM25 with 40GB, a 15-day pack at RM35 with 100GB — the only tier currently offered as an eSIM through the Hotlink app — and a 30-day pack at RM64 with 400GB that also bundles free access to the Sooka sports streaming app. Listed prices include 6 percent SST for non-Malaysian customers. Physical Travel SIMs are sold at Maxis Centres in KLIA Terminal 1 and 2, Langkawi International Airport and Penang International Airport, among other tourist locations.

CelcomDigi — Tourist SIM

CelcomDigi’s Tourist SIM is open to any non-Malaysian passport holder and is bought in person — at airport counters (KLIA1, KLIA2, Penang, Kota Kinabalu, Tawau), immigration offices, shopping malls and bus terminals — because activation still runs through the same passport check described above. Under the tariff effective from 1 July 2026, validity tiers run from 3 to 30 days, priced from roughly RM15 to RM60, with the higher tiers adding a bundle of ASEAN roaming data and international direct-dial minutes. High-speed data is capped at 18 Mbps on most passes and falls to 512 Kbps once the quota in a pass is used, under CelcomDigi’s fair usage policy; one 30-day option instead offers a fixed 200GB at up to 100 Mbps for RM60. Passes are not renewed automatically — you resubscribe manually through the CelcomDigi app once a pass expires, and only one pass can be active at a time.

U Mobile — ULTRA Tourist plans

U Mobile sells the ULTRA Tourist Rate Plan, a data-only prepaid product restricted to non-Malaysian passport holders, available as either a physical SIM or an eSIM activated through self-registration in the MyUMobile app. Separately, U Mobile runs a promotional 24-Hour ULTRA5G Trial: a free eSIM pack with 100GB of data, redeemable by scanning a dedicated QR code in the arrival halls of KLIA Terminal 1, KLIA Terminal 2, Kota Kinabalu International Airport and Langkawi International Airport, after downloading the MyUMobile app and completing ID and facial verification. As advertised, the promotion runs through the end of 2026, but promotional terms change without much notice — treat it as a bonus to grab on arrival, not something to plan an itinerary around.

4. Coverage: what “5G everywhere” actually means on the ground

Every major operator markets 5G as standard on its tourist products now, and in Kuala Lumpur, Penang, Johor Bahru and the other peninsula cities that is a fair description of daily experience on a modern phone. The three carrier pages above all describe fair-usage or speed-cap mechanics rather than hard geographic exclusions, which is consistent with peninsular Malaysia being densely covered relative to many Southeast Asian neighbours. What none of the official product pages promise is a specific speed or signal outside the cities — East Malaysia (Sabah and Sarawak) is geographically larger and more mountainous than the peninsula, and a plan built around a single host network there behaves differently in a longhouse near Kuching than it does on Bukit Bintang. If your itinerary includes Sarawak or interior Sabah, treat any “5G nationwide” line in marketing copy as aspirational rather than guaranteed, and download offline maps before you head out of a city.

5. Practical checklist, in the order that matters

1. File the MDAC first, no more than three days before you fly, using only the official Immigration Department portal. Screenshot or save the confirmation.
2. Confirm your handset supports eSIM and is carrier-unlocked before departure — everything below depends on the GSMA’s consumer Remote SIM Provisioning standard being supported by your specific model.
3. Install a travel eSIM at home, on a stable connection, so you land already able to check email, load a map, or re-open the MDAC confirmation if immigration asks for it.
4. If you want a local operator SIM as well, bring your physical passport — not a photo of it — and budget time for an in-person registration with facial verification.
5. Note the three-month clock if you are staying anywhere close to that long: a tourist-registered prepaid SIM terminates automatically at that point no matter how much credit is left on it.

FAQ

Do I need to fill out the MDAC before flying to Malaysia?

Almost certainly yes. The Malaysia Digital Arrival Card has been mandatory for most foreign visitors since 1 January 2024. File it online through the Immigration Department’s official portal no more than three days before arrival — it is free. Exemptions cover only Singapore citizens, Malaysian citizens and permanent residents, diplomats, Brunei General Certificate of Identity holders, Brunei–Malaysia Frequent Traveller Facility users, Thai border-pass holders and Indonesian PLB holders.

Can a tourist still buy a local prepaid SIM in Malaysia?

Yes, but under MCMC’s Mandatory Standard registered 26 February 2026, a non-citizen can register at most two prepaid SIM cards per operator, must present an original passport (and original visa if one is required) in person, and is verified with a passport reader and facial recognition. Photocopies or photos of the passport are not accepted.

How long does a tourist prepaid SIM stay valid?

A maximum of three months from the date the registration is successfully completed. After that the SIM is automatically terminated under MCMC’s rules, regardless of any remaining balance or data.

Do the tourist eSIMs from Maxis, CelcomDigi and U Mobile actually differ?

Yes, in structure as much as price. Hotlink’s Travel SIM is a fixed-price, fixed-data package that also works in Singapore, Thailand and Indonesia, with eSIM currently limited to its 15-day tier. CelcomDigi’s Tourist SIM is bought in person with tiers from 3 to 30 days and a fair-usage speed cap. U Mobile sells a data-only ULTRA Tourist plan self-activated in its app, plus a separate limited-time free 100GB trial eSIM redeemable at select airport arrival halls. None of the three is a strict upgrade over the others — the right one depends on whether you also need calls, whether you are also visiting Singapore or Thailand, and how many days you are staying.

Will my eSIM work in Sabah and Sarawak, not just Kuala Lumpur?

Carrier product pages advertise 5G broadly but do not publish a coverage guarantee outside the cities. Peninsular cities such as Kuala Lumpur, Penang and Johor Bahru are well covered on any of the three networks. East Malaysia is larger and more rural, and coverage in the interior of Sabah or Sarawak depends on which network your eSIM profile can attach to. Download offline maps and any documents you need before leaving a town.

What device do I need for an eSIM in Malaysia?

Any phone that supports the GSMA’s consumer Remote SIM Provisioning standard and is carrier-unlocked. Confirm eSIM support for your exact model and check that it is unlocked before you travel — this determines whether any of the eSIM options above, including U Mobile’s app-based activation or Hotlink’s 15-day eSIM tier, will work for you at all.

References (primary sources)

• Immigration Department of Malaysia — Malaysia Digital Arrival Card (MDAC) announcement——the official government page confirming the MDAC requirement and linking to the submission portal.
• Immigration Department of Malaysia — official MDAC online submission portal——the only legitimate channel to file the arrival card; used here to confirm the free-of-charge, no-more-than-three-days-before-arrival submission window.
• Malaysian Communications and Multimedia Commission (MCMC) — Registration of End-Users of Prepaid Public Cellular Services——the regulator’s own consumer page describing the mandatory prepaid registration regime and accepted identity documents.
• MCMC — Prepaid Registration FAQs——the regulator’s FAQ on registration eligibility, documentation and per-provider SIM limits.
• CelcomDigi — Tourist SIM official product page——pricing tiers, passport-holder eligibility and points of sale for CelcomDigi’s tourist SIM.
• CelcomDigi — FAQ: Tourist SIM (effective 1 July 2026)——the current tariff, validity range, fair-usage speed caps and renewal rules in force from 1 July 2026.
• Maxis newsroom — Hotlink adds new 7-day Travel SIM for short-term tourists——Maxis’s own press release with the current Hotlink Travel SIM tiers, prices, data allowances and eSIM availability.
• U Mobile — ULTRA Tourist Rate Plan——U Mobile’s own product page for its non-Malaysian-passport-holder tourist plan, including physical SIM and eSIM activation.
• U Mobile — 24-Hour ULTRA5G Trial——the official terms of U Mobile’s free 100GB tourist eSIM trial and its airport redemption points.
• GSMA — eSIM specification and device support——the consumer Remote SIM Provisioning standard that every eSIM profile referenced on this page relies on.

If your route continues beyond Malaysia, the neighbouring pages are worth reading on their own terms rather than assuming the same rules apply: Singapore, Thailand and Indonesia — the three countries Hotlink’s own Travel SIM bundles together — each run separate arrival and registration rules. Everything else is in the country index.

Editorial note: this page is written from the Immigration Department of Malaysia, the Malaysian Communications and Multimedia Commission, and the official tourist SIM and travel eSIM pages published directly by Maxis, CelcomDigi and U Mobile, cross-checked against the GSMA’s eSIM specification. We do not cite travel blogs or reseller marketing copy for the regulatory facts on this page. Where a figure carries a date, the date refers to the day the rule or tariff took effect, not the publication date of this page. Fees, tariffs, and promotional offers such as free trial eSIMs change without much notice; check the operator’s own page again at the moment you book. Where a fact could not be confirmed from a primary source — nationwide coverage percentages, for example — we do not invent numbers. Our sourcing and corrections policy is on about us. Last updated: 6 September 2026.