Fake MDAC websites: how to find the real one
Short answerThe official Malaysia Digital Arrival Card (MDAC) is only on imigresen-online.imi.gov.my. Below are the official warnings about look-alike sites and how to tell them apart.
Checked 28 October 2026 by the Arrival Card Finder editorial team against official sources. How we check
Official warnings
Immigration Department of Malaysia (JIM), 3 September 2024
The department's list of announcements includes a notice titled "Makluman Portal Palsu Malaysia Digital Arrival Card (MDAC)", meaning a notice about a fake MDAC portal.
Read the official warning
Look-alike sites named by official sources
No official source has named a specific look-alike domain for this form yet, so check the address yourself every time.
How to spot the official site
- The address must be exactly imigresen-online.imi.gov.my. Type it yourself or use the official link on this page instead of clicking an ad.
- Look closely at the spelling and the ending. Look-alike sites copy the form's name in a slightly different address.
- The official form is free. A request for a service fee or card details means you are on the wrong site.
- The real form is on imigresen-online.imi.gov.my, part of imi.gov.my, the Immigration Department's own site. The department published this address as the official MDAC portal.
- Check that the address matches the official one before you type anything.
- Fake MDAC sites ask for a fee and credit card details, and card data entered there may be misused, according to the Consulate-General of Japan in Kota Kinabalu. Do not pay a fee or enter card details for the MDAC.
Already paid a fake site?
- Fill in the real form on the official site. CARICOM IMPACS says these sites "charge fees for fake forms that hold no value", and the Royal Cayman Islands Police Service says users of the fake C5 site for Jamaica will not receive a valid form.
- Do not pay anything more. Taiwan's National Immigration Agency says that if a site asks you to pay, do not pay.
- Report it. In the Philippines, the Bureau of Immigration asks people to report fake eTravel sites to the CICC hotline 1326 or at cicc.gov.ph/report.
- Keep in mind what you shared. Official warnings say these sites can collect personal data (Singapore's ICA), be used for data theft (Indonesian Customs), ask for bank details (Chile's SAG) and defraud credit cards (Vietnam's Ministry of Public Security).
All countries: fake arrival card websites ›
Official sources
Every fact on this page comes from these government pages and official travel advice.