WorldRisk

Which passport do you hold?

Risk to a traveller depends on their nationality. A country that sanctions your destination, or is sanctioned by it, changes how you are treated on arrival. Choosing here adjusts every score on the site.

We hold travel advice written for four nationalities so far. Selecting anything else shows the neutral baseline, and every page says so where it applies rather than presenting it as an assessment made for you.

Kept in your browser only. Nothing is sent anywhere, and you can change it at any time from the header.

All countries

Malaysia

43Caution43 of 100, Caution band, 25 to 49good confidence(7/7 dimensions)
What this score means
Extreme75 to 100
Severe and systematic. Device search, interception and detention over online activity are documented rather than theoretical. Reconsider what you carry and what you say.
High50 to 74
Substantial and consistently evidenced measures. Device inspection, monitored networks or restricted services should be expected rather than treated as unlikely.
Caution25 to 49
Some risk, and manageable with precautions. Measures are evidenced but are narrow, inconsistently applied, or the picture is mixed.
Low0 to 24
Ordinary precautions. No systematic device search, network restriction or prosecution of visitors for online speech is evidenced.

Government travel advice is written for one citizenry, so the same country carries a different assessment depending on your passport. Change it in the header.

Showing the baseline, which weights every issuer equally. No government in our corpus publishes travel advice written for you, so this is not addressed to you specifically.

Dimensions

Each dimension is scored independently, because the traveller who cares about legal exposure for what they have posted is often not the one carrying client data. Higher means more risk.

Speech and legal exposure

What legal risk attaches to what I have said online, or say while I am there?

67High67 of 100, High band, 50 to 74

good confidence9 independent sources

Why this score (20 sources)

  • Freedom House 2026 scored MYS 3 of 4 on freedom to express personal views on sensitive topics without fear of surveillance or retribution.

    Freedom House, Freedom in the World · observed 2026-01-01

  • Freedom House 2026 scored MYS 2 of 4 on free and independent media.

    Freedom House, Freedom in the World · observed 2026-01-01

  • V-Dem Digital Society Project 2025 scored MYS 3.26 of 4 on how routinely the government censors political content on social media, where higher is freer.

    V-Dem Institute, University of Gothenburg, Digital Society Project · observed 2025-12-31

  • V-Dem Digital Society Project 2025 scored MYS 1.50 of 4 on how often people are arrested for political content they posted online, where higher is freer.

    V-Dem Institute, University of Gothenburg, Digital Society Project · observed 2025-12-31

  • Malaysia - Level 1: Exercise Normal Precautions

    US Department of State, Travel Advisories · observed 2026-02-22 · written for USA nationals

  • FCDO advice for Malaysia: avoid_all_but_essential_travel_to_parts.

    UK Foreign, Commonwealth and Development Office, Foreign travel advice · observed 2026-03-19 · written for GBR nationals

  • Malaysia: Take normal security precautions

    Global Affairs Canada, Travel advice and advisories · observed 2026-10-09 · written for CAN nationals

  • Malaysia: No travel warning in force

    Auswärtiges Amt, Reise- und Sicherheitshinweise · observed 2026-10-16 · written for DEU nationals

  • The groups raised concerns that the law would enhance the powers of both the Malaysian Communication and Multimedia Commission (MCMC) and the communication minister, allowing them to operate without adequate oversight and effectively control and enforce censorship.

    CIVICUS Monitor country updates · observed 2026-09-18 · extracted by language model

  • A student activist was investigated in June 2026 for a statement he issued critical of the government.

    CIVICUS Monitor country updates · observed 2026-09-18 · extracted by language model

  • Activists and critics have also been arrested and charged, using restrictive laws to silence their online expression and criticism of the authorities.

    CIVICUS Monitor country updates · observed 2025-11-18 · extracted by language model

  • Qayyum was investigated under Section 4(1) of the Sedition Act over a comment he posted on Sabah Governor Musa Aman’s Facebook page.

    CIVICUS Monitor country updates · observed 2025-11-18 · extracted by language model

  • On 6th October 2025, Malaysian police announced the arrest of seven individuals for allegedly posting “seditious and threatening” content targeting political leaders on TikTok and Facebook.

    CIVICUS Monitor country updates · observed 2025-11-18 · extracted by language model

  • On 19th December 2026, activist Fahmi Reza was arrested in connection with an investigation over his posting on X allegedly insulting Johor Regent Tunku Ismail Sultan Ibrahim.

    CIVICUS Monitor country updates · observed 2026-04-15 · extracted by language model

  • Three human rights defenders were arrested on 8th April 2026 for peacefully demonstrating against Malaysian Anti-Corruption Commission (MACC) Chief Commissioner Azam Baki while he was delivering a speech at the World Trade Centre.

    CIVICUS Monitor country updates · observed 2026-04-15 · extracted by language model

  • On 17th January 2026, Malaysian journalist Rex Tan was arrested and detained for half a day in Kuala Lumpur as part of an investigation into an alleged violation of Section 4(1) of the Sedition Act, as well as Section 505(c) of the Penal Code, which criminalises the circulation of a report or rumour “with intent to incite, or which is likely to incite” public mischief.

    CIVICUS Monitor country updates · observed 2026-04-15 · extracted by language model

  • On 19th August 2025, the Court of Appeal found in the case of Heidy Quah v Government of Malaysia, that the words ‘offensive’ and ‘annoy’ in Section 233 of the Communications and Multimedia Act (CMA) 1998 are unconstitutional, as they breach two articles of the Federal Constitution:

    CIVICUS Monitor country updates · observed 2025-11-18 · extracted by language model

  • A veteran Malaysian politician pleaded not guilty on Friday to a sedition charge over remarks backing a rival claimant to the Negeri Sembilan throne amid the months-long royal crisis.

    South China Morning Post feed · observed 2026-09-25 · extracted by language model

  • However, the Federal Court ruling found that words ‘offensive’ and ‘annoy’ in Section 233 of the CMA did not violate the Constitution.

    CIVICUS Monitor country updates · observed 2026-04-15 · extracted by language model

  • In 2016 he was arrested in Malaysia for his music video Oh My God, which was filmed at various places of worship around the country.

    MyJoyOnline, via a site scoped search · observed 2025-11-03 · extracted by language model

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

2 excluded sources
  • CIVICUS Monitor country updates, observed 1998-07-01: aged out after 28 years.
  • Global Voices (Advox), via a site scoped search, observed 1998-07-01: aged out after 28 years.

Network threat

How hostile is the network environment to a foreign visitor, from state actors and criminals alike?

58High58 of 100, High band, 50 to 74

moderate confidence3 independent sources

Why this score (4 sources)

  • ITU Global Cybersecurity Index 2024, Technical pillar: 20.00 of 20.

    International Telecommunication Union, Global Cybersecurity Index · observed 2024-12-31

  • Freedom House scored Malaysia 19 of 25 on obstacles to access in Freedom on the Net, a category covering state control over internet infrastructure and gateways, regulatory and ownership control over service providers, and the independence of the regulator.

    Freedom House, Freedom on the Net, obstacles to access · observed 2025-01-01

  • インターネットの普及により、オンラインによる決済が頻繁に利用されており、これに伴い、不正アクセス等による商品購入等の不正使用事案や、クレジットカードやキャッシュカードのスキミング事案も発生していますので、十分に注意してください。

    Our translation: With the spread of the internet, online payments are frequently used, and along with this, incidents of unauthorized use such as purchases through unauthorized access and skimming incidents involving credit cards and cash cards have also occurred, so sufficient caution is necessary.

    Ministry of Foreign Affairs of Japan, Overseas travel safety information · observed 2026-10-16 · written for JPN nationals · extracted by language model

  • マレーシアでは、携帯電話の購入や銀行口座の開設が容易な上、アジア・中東方面との航空便のアクセスが良好であることから、世界各地の犯罪集団がマレーシアを拠点に各種詐欺を行っています。

    Our translation: In Malaysia, because mobile phones can be easily purchased and bank accounts easily opened, in addition to good air access to Asia and the Middle East, criminal groups from around the world conduct various types of fraud based in Malaysia.

    Ministry of Foreign Affairs of Japan, Overseas travel safety information · observed 2026-10-16 · written for JPN nationals · extracted by language model

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

1 excluded source
  • ARTICLE 19, via a site scoped search, observed 2024-04-04: aged out after 3 years.

Surveillance and interception

How comprehensively are communications intercepted, retained, and monitored, and is commercial spyware in use?

48Caution48 of 100, Caution band, 25 to 49

good confidence4 independent sources

Why this score (5 sources)

  • Freedom House 2026 scored MYS 3 of 4 on freedom to express personal views on sensitive topics without fear of surveillance or retribution.

    Freedom House, Freedom in the World · observed 2026-01-01

  • V-Dem Digital Society Project 2025 scored MYS 2.02 of 4 on how comprehensively the government monitors social media and private online communication, where higher is freer.

    V-Dem Institute, University of Gothenburg, Digital Society Project · observed 2025-12-31

  • V-Dem Digital Society Project 2025 scored MYS 2.98 of 4 on how far privacy protection law shields communications from government access, where higher is freer. This measures what privacy law permits rather than what monitoring is practised, so it is read here as a constraint on interception rather than a measurement of it.

    V-Dem Institute, University of Gothenburg, Digital Society Project · observed 2025-12-31

  • The World Justice Project Rule of Law Index 2025 scored MYS 0.42 of 1 on whether freedom from arbitrary interference with privacy is effectively guaranteed, a measure built from expert assessments of warrantless interception of communications.

    World Justice Project, Rule of Law Index, sub-factor 4.6 · observed 2025-01-01

  • The groups raised concerns that the law would enhance the powers of both the Malaysian Communication and Multimedia Commission (MCMC) and the communication minister, allowing them to operate without adequate oversight and effectively control and enforce censorship.

    CIVICUS Monitor country updates · observed 2026-09-18 · extracted by language model

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

Connectivity continuity

How likely am I to lose access to the internet, or to the specific tools I depend on?

43Caution43 of 100, Caution band, 25 to 49

good confidence10 independent sources

Why this score (32 sources)

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

2 excluded sources
  • Rappler, via a site scoped search, observed 2024-09-08: aged out after 2 years.
  • Global Voices (Advox), via a site scoped search, observed 2023-09-10: aged out after 3 years.

Encryption and VPN legality

Are VPNs and strong encryption lawful, and can I be required to install an application or hand over keys?

35Caution35 of 100, Caution band, 25 to 49

moderate confidence3 independent sources

Why this score (3 sources)

  • Some restrictions. The law in Malaysia provides police officers with a warrant from a magistrate with the power to be given access to encrypted data, including through the provision of a "necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of the computerised data". Failure to comply is an offence punishable by imprisonment or a fine. The law also requires the import and export of certain types of encryption technology to be approved by the Minister of International Trade and Industry.

    Global Partners Digital, World Map of Encryption Laws and Policies · observed 2019-06-01

  • V-Dem Digital Society Project 2025 scored MYS 1.85 of 4 on whether the government regulates the internet in a way consistent with international human rights standards, where higher is freer. This does not establish whether encryption or VPN use is lawful. It measures internet regulation in general, and is used as indirect evidence because the only survey that reads encryption law directly was published in 2019.

    V-Dem Institute, University of Gothenburg, Digital Society Project · observed 2025-12-31

  • OONI recorded no confirmed blocking across 79,082 measurements of anonymity and censorship circumvention tools in MYS over the 90 days to 2026-10-16, with 1,148 further results inconclusive.

    Open Observatory of Network Interference, OONI measurement data · observed 2026-10-16

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

Data jurisdiction

What happens to corporate or client data I carry into the jurisdiction?

29Caution29 of 100, Caution band, 25 to 49

moderate confidence1 independent source

Why this score (1 source)

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

Border device risk

How likely is my device to be searched, imaged, or seized at the border, and can I be compelled to unlock it?

22Low22 of 100, Low band, 0 to 24

good confidence5 independent sources

No reports were found of devices being searched, imaged or seized at this border, or of travellers being compelled to unlock them. The score below is drawn from general indicators for this country rather than from anything observed about this risk, so it describes an absence of reports rather than evidence that the risk is absent.

What the score rests on (5 indirect sources)

Report an inaccuracy (corrections need a link to the reporting, statute or research that shows it).

Trend

02550751002026-08-162026-10-16

The overall score is up 11.4 points over 61 days, from 32 to 43.4. Most movement is the event overlay decaying rather than anything happening: a news signal loses half its weight every three weeks, so a score drifts back toward its structural baseline on its own. A step that holds is the one worth reading.

Check this yourself

These are not inputs to the score for Malaysia. They are where to look if you want to test what is above against something we did not use.

Sources

This assessment draws on 18 sources: ARTICLE 19, via a site scoped search; Auswärtiges Amt, Reise- und Sicherheitshinweise; CIVICUS Monitor country updates; Freedom House, Freedom in the World; Freedom House, Freedom on the Net, obstacles to access; Georgia Tech Internet Intelligence Lab, Internet Outage Detection and Analysis; Global Affairs Canada, Travel advice and advisories; Global Partners Digital, World Map of Encryption Laws and Policies; International Telecommunication Union, Global Cybersecurity Index; Ministry of Foreign Affairs of Japan, Overseas travel safety information; MyJoyOnline, via a site scoped search; Open Observatory of Network Interference, OONI measurement data; South China Morning Post feed; The Daily Star (Bangladesh), via a site scoped search; UK Foreign, Commonwealth and Development Office, Foreign travel advice; US Department of State, Travel Advisories; V-Dem Institute, University of Gothenburg, Digital Society Project; World Justice Project, Rule of Law Index, sub-factor 4.6. Every contributing claim is quoted with its origin and date above. Model version 0.12.0, computed 2026-10-16.

If something here is wrong, say so. Corrections are handled in public, and we correct because the evidence is wrong, not because someone objects.