info

Independent guide - not a government website. The MDAC is free.

MDAC Guide Logo
MDAC GuideIndependent Portal
warning CRITICAL CONSUMER ADVISORY • UPDATED SEPTEMBER 2026 verified_user Official JIM Stance: Zero Fees Allowed • 42 Known Imitation Portals Tracked

Official MDAC Scam Alert & Fake Website Directory

The official Malaysia Digital Arrival Card (MDAC) is 100% free. Never pay third-party agency processing surcharges, copycat application fees, or purported VIP expediting fees. Verify the sovereign .gov.my domain structure, recognize sponsored ad traps on search engines, and review our directory of predatory URLs.

credit_card_off
Unconditional Rule

If you are asked for credit card details, you are on a scam website.

The Jabatan Imigresen Malaysia (JIM) never charges submission fees, processing tolls, service charges, or expedited registration fees. The portal does not have a payment gateway, does not prompt for cardholder numbers, CVVs, bank tokens, or PayPal accounts.

Authentication Framework

Official Portal vs Commercial Copycats

Compare key infrastructure signatures to protect your personal identity and travel funds.

GENUINE GOVERNMENT PORTAL verified
Authentic Web Address
imigresen-online.imi.gov.my/mdac/main
  • check_circle
    Sovereign Domain Architecture Ends strictly in .gov.my. Commercial entities cannot register Malaysian federal domains.
  • check_circle
    Mandatory Free Cost $0.00 / RM 0. Absolute zero fee mandated by immigration statutory law.
  • check_circle
    Direct Border Clearance Link Transmits data straight into the Malaysian Immigration Border Management System (MyIMMs).
  • check_circle
    Official SSL Certificate Issued to the Government of Malaysia (Jabatan Imigresen Malaysia).
lock Always check your browser address bar for .imi.gov.my
PREDATORY THIRD-PARTY / SCAM gpp_maybe
Common Imitation Domains
malaysia-entry-gov.org • apply-mdac.com
  • cancel
    Deceptive Public Extensions Registered under open generic TLDs like .org, .net, .co, or .online.
  • cancel
    Excessive Surcharges ($35–$95 USD) Bills credit cards under deceptive titles like "Expedited Handling" or "Application Processing".
  • cancel
    Data Interception & Harvesting Unregulated private offshore servers store unencrypted passport photos, DOBs, and phone numbers.
  • cancel
    Zero Clearance Authority Submits identical free public forms on your behalf, often failing to sync correctly with border checkpoints.
report Commercial intermediary disclaimers are deliberately concealed in dark grey footer text.
Self-Check Verification Tool

Verify a Website Address Before Entering Data

domain_verification

Paste any website URL you found via search engine, social media, or travel forum to test whether it connects to the genuine government registry.

link
verified

VERIFIED OFFICIAL MALAYSIAN GOVERNMENT DOMAIN

This URL routes directly to the Jabatan Imigresen Malaysia portal. The service is 100% free. No payment or billing credentials will be requested.

info Tip: Malaysian federal agencies exclusively use hostnames ending with .gov.my. Any other ending is non-official.
Deception Mechanics

Anatomy of a Search Engine Ad Trap

Predatory companies exploit search engine auction models to place paid listings higher than organic governmental links. Here is how travelers are routinely misdirected:

1

Query Submission

A traveler searches generic queries such as "MDAC card", "Malaysia arrival form online", or "apply MDAC Malaysia" on Google or Bing.

Google: "mdac registration online"
2

Sponsored Ad Placement

Commercial agencies purchase Google Search Ads with deceptive headlines like "Official Malaysia Entry Portal - Fast Instant Processing".

Ad Official MDAC Card
https://www.mdac-entry-gov.org
3

Clone UI Mimicry

The landing page copies official color palettes (deep greens, federal crests, shield glyphs) to convince users they are inside a government portal.

visibility_off Tiny disclaimers placed in 9px light grey text at the bottom.
4

The Toll Trap Gate

After filling 30 personal questions, a mandatory checkout screen demands $40 to $85 for "administrative fees" before confirmation can be submitted.

Payment Due: $68.00 USD
Public Registry

Directory of Tracked Imitation Portals

The following domains have been flagged by international travelers, verified as predatory, and reported to the Malaysian Communications and Multimedia Commission (MCMC).

search
Reported Domain / Entity Primary Deceptive Mechanism Fee Extorted Regulatory Action Status
malaysia-entry-gov.org
Hosting: Cyprus Cloud Cluster
 Runs Google Ads using "Official Ministry" ad copy; obscures commercial relationship. $68.00 USD Reported to MCMC
apply-mdac-card.com
Hosting: Offshore Registrar
 Offers fake "1-hour Express VIP Processing" for an arrival card that is inherently instantaneous. $85.00 USD Flagged by Advertisers
malaysiaarrivalform.net
Hosting: US Proxy Network
 Collects full credit card numbers along with sensitive biometric passport photos. $45.00 USD Domain Takedown Active
evisa-malaysia-portal.co
Hosting: Caribbean Shell Co.
 Conflates the free MDAC with eVisa requirements, double-billing unsuspecting tourists. $92.00 USD Reported to MCMC
my-mdac-online.info
Hosting: Western Europe Host
 Automatic currency conversion deception; bills in Euros without customer notification. €55.00 EUR Under Investigation
malaysiadigitalcard-gov.com
Hosting: Panama Privacy Proxy
 Appends "-gov" into the domain name to intentionally confuse mobile browser users. $59.00 USD Google Ads Blacklisted
sync Synced weekly with community incident submissions and consumer ombudsman filings.
Victim Remediation Protocol

What To Do If You Have Already Paid an Agency

If you entered credit card details or discovered a fraudulent transaction on your billing statement, take the following remedial steps immediately:

1

Initiate an Immediate Bank Chargeback

Contact your credit card issuer's fraud or dispute department. Request a chargeback under "Deceptive billing / services misrepresented". Inform your bank that the underlying digital clearance is a zero-fee government card and that the merchant misled you with pseudo-official branding.

2

Verify Actual MDAC Registration

Check if the agency actually generated an MDAC on your behalf. Visit the official government portal's "Check Registration" subpage (imigresen-online.imi.gov.my) and input your passport number and nationality. If not found, submit a clean registration yourself for free.

3

Mitigate Identity Theft Risks

If you uploaded passport photo bio-pages or national ID scans to an unverified domain, monitor your credit reports and email alerts. Request a replacement card for the payment card used to prevent recurring automated subscriptions.

4

Report to MCMC & Ad Networks

Lodge a complaint with the Malaysian Communications and Multimedia Commission via aduan.mcmc.gov.my. Additionally, submit a "Misleading Ad" report directly to Google Ads using the three dots adjacent to the search ad listing.

Frequently Asked Questions

Understanding MDAC Copycat Operations

Why are commercial agencies allowed to advertise on search engines?

expand_moreexpand_more

Many of these intermediary companies register as "third-party visa expediting consultancies" in overseas jurisdictions where charging service fees for public forms is technically permitted under loose commercial law, provided they append a tiny disclaimer. However, their advertising copy intentionally imitates federal government authority to mislead hurried travelers.

<

Can an agency speed up my MDAC processing or approval time?

expand_moreexpand_more

No. Absolutely not. The official MDAC system is fully automated. When submitted on the official government website, confirmation is generated electronically within seconds. There is no human queue, no "express line", and no agency holds diplomatic or administrative priority over border databases.

<

Will Malaysian border officers reject an MDAC submitted via a third party?

expand_moreexpand_more

If the agency correctly entered your passport details into the actual government gateway, your passport record will scan validly at autogates or manual counters. However, third-party operators frequently make critical typos in passport numbers or flight dates, preventing travelers from clearing immigration and forcing them to re-register on mobile devices at border counters.

<

How do I report a fraudulent website or misleading Google ad?

expand_moreexpand_more

On Google Search results, click the three vertical dots next to the ad link and choose "Report ad" → "Misleading or scam". You can also file a ticket through the Malaysian government's National Cyber Coordination and Command Centre (NC4) or the MCMC consumer complaints board.

<
lock Zero Fees • Free Official Public Service

Always Use the Official Malaysian Immigration Portal

Avoid unauthorized third parties. Complete your registration directly with the Jabatan Imigresen Malaysia up to 3 days prior to your arrival date.

Open Genuine MDAC Portal north_east

Official destination address: imigresen-online.imi.gov.my/mdac/main. MDAC Guide is independent and does not handle or store travel documents.

Independent Traveler Tools

Essential Resources
fact_check arrow_forward

Eligibility Checker

Determine if your passport or visa status requires an MDAC.
edit_document arrow_forward

Annotated Form Guide

Step-by-step walkthrough of every required field and pin code.
calendar_clock arrow_forward

Submission Calculator

Calculate your precise 3-day pre-arrival application window.