All contact options
INSTAGRAM / FACEBOOK

Malaysia — Where to get help in your country

Choose your country and what you need help with. See relevant organisations, requirements and next steps.

Malaysia — Available options

The number shows how many procedures are listed. It does not guarantee that your case will be accepted. Each option’s requirements are shown below.

Appeal the removal of a post (1)

  • Oversight BoardInternational service · specific conditions

    Independent review of an eligible decision

    A review does not guarantee reversal. Do not duplicate a submission while the same case is still awaiting a response.

    What to do
    1. Open Meta’s final post decision and find the reference ID. Without it, this route is unavailable.
    2. Choose Submit an Appeal on the Board’s site, sign in to your active account and submit within Meta’s stated deadline.
    3. Check Track Your Appeal. Submitting does not mean the Board will select the case.

    For eligible content decisions only: requires an active account, Meta’s final decision and a Meta-issued reference ID. The Board selects a limited number of cases. If the account is disabled and you cannot log in, this route does not fit.

    Read the source
View requirements

Access or protect personal data (1)

  • Personal Data Protection Commissioner — JPDPLocal body or procedure

    Protect personal-data rights

    This route concerns data rights. Being unable to log in does not by itself prove a breach: this is not an account-recovery service. Investigations and remedies depend on local law.

    What to do
    1. Write down what happened to your data and which company is responsible. Gather dates, screenshots and any correspondence about that issue.
    2. Open the complaint form and answer its initial questions about the transaction, organisation and issue. Use Report a Complaint for your own complaint, not the Report DBN notification for organisations.
    3. If the form accepts your case, identify the company, describe the data issue and attach relevant documents. Read the notice about sharing information with the company, submit and keep the confirmation.

    JPDP's form is for personal-data complaints. It checks whether the issue concerns a commercial transaction; this does not necessarily mean you must have paid Meta. Answer based on the facts. The complainant should file personally. Your complaint and attachments may be shared with the company for a response. This is not an account-suspension appeal.

    Read the source
View requirements

Resolve a payment or service dispute (3)

  • Apple — Report a ProblemInternational service · specific conditions

    Consumer complaint

    First identify the seller on the receipt: it may be Meta, Apple, Google or another company. A payment complaint does not guarantee account recovery.

    What to do
    1. Sign in to Report a Problem with the account shown on your receipt.
    2. Choose Request a refund, a reason and the purchase.
    3. After submitting, check the request status there.

    Only purchases billed by Apple. Find the receipt and matching Apple Account. Country-specific refund eligibility applies; approval is not guaranteed.

    Read the source
  • Google Play — refund requestInternational service · specific conditions

    Consumer complaint

    First identify the seller on the receipt: it may be Meta, Apple, Google or another company. A payment complaint does not guarantee account recovery.

    What to do
    1. Open the instructions below and select Request a refund.
    2. Missing purchase? Check order history and select Report a problem.
    3. Explain the refund reason. Track your existing request.

    Only Google Play purchases. EEA and UK users should follow the separate instructions linked by Google. Use the purchasing account.

    Read the source
  • Tribunal for Consumer Claims Malaysia (TTPM)Local body or procedure

    Hearing an eligible court claim

    Small claims often concern monetary claims. The court may not have power to order account restoration. Consider fees, costs, deadlines, contract terms and local rules.

    What to do
    1. Read your region’s court rules. Check jurisdiction, claim limits and available remedies.
    2. Identify the correct defendant and service procedure. Prepare a timeline, evidence and an amount based on documented losses.
    3. Check required pre-action steps and fees. Use the court’s own form; this guide is not a court filing.

    For an eligible personal or household goods/services dispute. Limit: MYR50,000; filing period: three years; fee: MYR5. Use Form 1 or e-Tribunal. Business purchases are excluded. First confirm jurisdiction over the foreign respondent, service requirements and the permitted remedy.

    Read the source
View requirements

Report abuse, threats or scams (3)

  • StopNCII.orgInternational service · specific conditions

    Help limit intimate-image sharing

    The service helps limit sharing on partner platforms. It cannot remove everything from the internet or restore an account.

    What to do
    1. Check your age when the image was made and the service’s conditions.
    2. On the official site, use only material already on your device. You do not need to send the file itself.
    3. Keep the case details and follow the instructions for checking progress.

    For intimate images of you taken at 18+, including threatened sharing. You need the file on your device. It stays there; a digital fingerprint is shared. Coverage is limited to participating public-facing platforms, not the whole internet or encrypted messages. Keep your case number and PIN.

    Read the source
  • Take It Down — NCMECInternational service · specific conditions

    Help limit intimate-image sharing

    The service helps limit sharing on partner platforms. It cannot remove everything from the internet or restore an account.

    What to do
    1. Check your age when the image was made and the service’s conditions.
    2. On the official site, use only material already on your device. You do not need to send the file itself.
    3. Keep the case details and follow the instructions for checking progress.

    For intimate images of you taken before age 18, even if you are now an adult. Use only a file already on your device: do not download or forward material to apply. Works on participating public or unencrypted platforms.

    Read the source
  • CyberSecurity Malaysia — Cyber999 incident assistanceLocal body or procedure

    Malaysia: Cyber999/MyCERT receives reports of genuine computer-security incidents, including phishing, unauthorised account access, identity theft and data breaches. It provides technical analysis and helps escalate reports to the relevant party.

    The service assists Malaysian Internet users. The public instructions do not establish a separate citizenship or residency test or confirm eligibility for cases wholly outside Malaysia; ask MyCERT if the connection is unclear. This is technical assistance, not an ordinary suspension appeal, police report or compensation claim. Refunds and account restoration are not guaranteed.

    What to do
    1. Prepare the incident description and time, affected account or address, and available email headers and logs. The form requires name, age group, email, phone, incident category and description, a contact-disclosure choice and how you heard of the service. Enter elapsed days, with 0 for today. Attach only relevant evidence. Do not send passwords, backup codes or one-time codes.
    2. Open the official MyCERT form or email the incident description to cyber999@cybersecurity.my. The public form was read without signing in; submission and delivery were not tested. Choosing not to disclose contact information does not make the report anonymous: the form still asks for your details. Read the data notice and clarify onward sharing before sending sensitive evidence.
    3. Keep your report and any case reference. If no reply arrives or more evidence is requested, continue the same correspondence, quote the reference and provide only the needed information. The ordinary line 1-300-88-2999 operates Monday–Friday 08:30–17:30 Malaysia time (UTC+8). Ask who is handling any referral. Continue the platform’s official recovery process separately; a Cyber999 report does not replace it.

    The public web form has now been read, replacing the earlier form-access limitation. Fields, contacts and SLA limits were checked, but no real report was sent. The route remains for security incidents only.

    Read the source
View requirements

Consider a court claim (1)

  • Tribunal for Consumer Claims Malaysia (TTPM)Local body or procedure

    Hearing an eligible court claim

    Small claims often concern monetary claims. The court may not have power to order account restoration. Consider fees, costs, deadlines, contract terms and local rules.

    What to do
    1. Read your region’s court rules. Check jurisdiction, claim limits and available remedies.
    2. Identify the correct defendant and service procedure. Prepare a timeline, evidence and an amount based on documented losses.
    3. Check required pre-action steps and fees. Use the court’s own form; this guide is not a court filing.

    For an eligible personal or household goods/services dispute. Limit: MYR50,000; filing period: three years; fee: MYR5. Use Form 1 or e-Tribunal. Business purchases are excluded. First confirm jurisdiction over the foreign respondent, service requirements and the permitted remedy.

    Read the source
View requirements

Your connection to the country matters, not your account language. Individual bodies have additional requirements.

Malaysia · Report abuse, threats or scams

All options by goal

Different routes seek different outcomes. Use a data or payment complaint only when that is the actual issue.

Help me choose the next step

Answer only what you know. We compare your answers with researched conditions; the recipient makes the final eligibility decision.

Worth checking for your case: 0 · Requirements need checking: 3 · Does not fit the stated answer: 0

No confirmed matching option was found for these answers. Correct only an inaccurate answer or check requirements with the recipient.

This is preliminary matching, not eligibility confirmation or a success estimate.

Choose a suitable option

Check what the service helps with and its requirements. Open a suitable option to see the steps and a link to the official website.

Requirements need checkingMalaysia: Cyber999/MyCERT receives reports of genuine computer-security incidents, including phishing, unauthorised account access, identity theft and data breaches. It provides technical analysis and helps escalate reports to the relevant party.CyberSecurity Malaysia — Cyber999 incident assistanceThe public web form has now been read, replacing the earlier form-access limitation. Fields, contacts and SLA limits were checked, but no real report was sent. The route remains for security incidents only.Cost: The reviewed instructions and web form do not specify a reporting charge. This does not establish that every related service is free; confirm any cost before commissioning additional work.Steps and full conditions

Local body or procedure

CyberSecurity Malaysia — Cyber999 incident assistance

What this route offers: Malaysia: Cyber999/MyCERT receives reports of genuine computer-security incidents, including phishing, unauthorised account access, identity theft and data breaches. It provides technical analysis and helps escalate reports to the relevant party.

The public web form has now been read, replacing the earlier form-access limitation. Fields, contacts and SLA limits were checked, but no real report was sent. The route remains for security incidents only.

The service assists Malaysian Internet users. The public instructions do not establish a separate citizenship or residency test or confirm eligibility for cases wholly outside Malaysia; ask MyCERT if the connection is unclear. This is technical assistance, not an ordinary suspension appeal, police report or compensation claim. Refunds and account restoration are not guaranteed.

Why this result

Requirements need checking

Not all requirements for this route are represented in the matcher. Check the recipient’s full instructions.

This is preliminary matching, not eligibility confirmation or a success estimate.

Requirements, deadlines and documents
Possible remedy
Malaysia: Cyber999/MyCERT receives reports of genuine computer-security incidents, including phishing, unauthorised account access, identity theft and data breaches. It provides technical analysis and helps escalate reports to the relevant party.
Sources for these requirementsConfirmed by the source
Prerequisites
The service assists Malaysian Internet users. The public instructions do not establish a separate citizenship or residency test or confirm eligibility for cases wholly outside Malaysia; ask MyCERT if the connection is unclear. This is technical assistance, not an ordinary suspension appeal, police report or compensation claim. Refunds and account restoration are not guaranteed.
Sources for these requirementsPartly confirmed
Deadline and starting event
A general reporting deadline was not established. MyCERT’s SLA defines response time as the start of work, such as analysis, communication or notifying parties, not final resolution. It varies with workload and complexity. Do not treat it as an account-recovery deadline. For an active urgent DDoS, phishing or data-breach incident, the published 24-hour number is +60 19 266 5850.
Sources for these requirementsPartly confirmed
Cost
The reviewed instructions and web form do not specify a reporting charge. This does not establish that every related service is free; confirm any cost before commissioning additional work.
Sources for these requirementsPartly confirmed
Filing language
The reviewed form and instructions are in English. This does not establish an intake policy for other languages; ask MyCERT about another language or assistance before relying on it.
Sources for these requirementsPartly confirmed
Access and sign-in
Open the official MyCERT form or email the incident description to cyber999@cybersecurity.my. The public form was read without signing in; submission and delivery were not tested. Choosing not to disclose contact information does not make the report anonymous: the form still asks for your details. Read the data notice and clarify onward sharing before sending sensitive evidence.
Sources for these requirementsConfirmed by the source

Conditions checked: 2026-10-19

What to do

  1. Prepare the incident description and time, affected account or address, and available email headers and logs. The form requires name, age group, email, phone, incident category and description, a contact-disclosure choice and how you heard of the service. Enter elapsed days, with 0 for today. Attach only relevant evidence. Do not send passwords, backup codes or one-time codes.
  2. Open the official MyCERT form or email the incident description to cyber999@cybersecurity.my. The public form was read without signing in; submission and delivery were not tested. Choosing not to disclose contact information does not make the report anonymous: the form still asks for your details. Read the data notice and clarify onward sharing before sending sensitive evidence.
  3. Keep your report and any case reference. If no reply arrives or more evidence is requested, continue the same correspondence, quote the reference and provide only the needed information. The ordinary line 1-300-88-2999 operates Monday–Friday 08:30–17:30 Malaysia time (UTC+8). Ask who is handling any referral. Continue the platform’s official recovery process separately; a Cyber999 report does not replace it.
Official Cyber999 form
Other ways to get in touch

Choose the option that fits. If you have already submitted a case, include its reference when following up.

  • Report by email

    Open the official MyCERT form or email the incident description to cyber999@cybersecurity.my. The public form was read without signing in; submission and delivery were not tested. Choosing not to disclose contact information does not make the report anonymous: the form still asks for your details. Read the data notice and clarify onward sharing before sending sensitive evidence.

  • Urgent incident: 24/7

    A general reporting deadline was not established. MyCERT’s SLA defines response time as the start of work, such as analysis, communication or notifying parties, not final resolution. It varies with workload and complexity. Do not treat it as an account-recovery deadline. For an active urgent DDoS, phishing or data-breach incident, the published 24-hour number is +60 19 266 5850.

What to prepare

Prepare the incident description and time, affected account or address, and available email headers and logs. The form requires name, age group, email, phone, incident category and description, a contact-disclosure choice and how you heard of the service. Enter elapsed days, with 0 for today. Attach only relevant evidence. Do not send passwords, backup codes or one-time codes.

What to do after applying

No reply yet

A general reporting deadline was not established. MyCERT’s SLA defines response time as the start of work, such as analysis, communication or notifying parties, not final resolution. It varies with workload and complexity. Do not treat it as an account-recovery deadline. For an active urgent DDoS, phishing or data-breach incident, the published 24-hour number is +60 19 266 5850.

Your application was not accepted

Read the reason. A case outside the body’s powers, missing documents and a decision against your claim call for different next steps. Correct the stated gaps or follow the appeal instructions in the reply. Check the appeal deadline before submitting again.

You have a reply, but the issue remains

Keep your report and any case reference. If no reply arrives or more evidence is requested, continue the same correspondence, quote the reference and provide only the needed information. The ordinary line 1-300-88-2999 operates Monday–Friday 08:30–17:30 Malaysia time (UTC+8). Ask who is handling any referral. Continue the platform’s official recovery process separately; a Cyber999 report does not replace it.

Official source and review details

We have reviewed the official instructions. Check the current requirements and whether the form is available before submitting.

Sources researched:
No real complaints were submitted.

Latest source check:
Official material was read. This does not test complaint submission or confirm that your case qualifies.

Help available internationally

These services have their own requirements. Their availability does not mean that your country has a local body that handles account recovery.

Requirements need checkingHelp limit intimate-image sharingStopNCII.orgFor intimate images of you taken at 18+, including threatened sharing. You need the file on your device. It stays there; a digital fingerprint is shared.Cost: The filing fee was not established from the reviewed evidence. Check with the recipient.Steps and full conditions

International service · specific conditions

StopNCII.org

What this route offers: Help limit intimate-image sharing

Someone is sharing your intimate images without consent or threatening to do so. Choose by your age when the image was made.

For intimate images of you taken at 18+, including threatened sharing. You need the file on your device. It stays there; a digital fingerprint is shared. Coverage is limited to participating public-facing platforms, not the whole internet or encrypted messages. Keep your case number and PIN.

The service helps limit sharing on partner platforms. It cannot remove everything from the internet or restore an account.

Why this result

Requirements need checking

Not all requirements for this route are represented in the matcher. Check the recipient’s full instructions.

  • This is a specific intimate-image route. Age at creation, file possession or a court’s country connection must be checked separately for the particular service.

This is preliminary matching, not eligibility confirmation or a success estimate.

Requirements, deadlines and documents
Possible remedy
Hash matching by participating platforms may prevent/limit sharing. It does not cover the whole internet or encrypted messages; modified files may evade matching.
Sources for these requirementsConfirmed by the source
Prerequisites
You are depicted, were 18+ when the image was created, and already possess the file. Submit your own case. Threatened sharing can qualify; check rules for modified/synthetic images.
Sources for these requirementsConfirmed by the source
Deadline and starting event
You do not need to wait for publication; a general filing deadline was not established. Status updates may take 3–5 days, not a removal guarantee.Case creation starts the possible status-update interval; publication is not required.
Sources for these requirementsPartly confirmed
Cost
The filing fee was not established from the reviewed evidence. Check with the recipient.
Sources for these requirementsNot confirmed
Filing language
Filing language was not verified. The website language or an available translation does not establish an accepted filing language.
Sources for these requirementsNot confirmed
Access and sign-in
The image hash is created on your device; the file stays there. Keep the case number and PIN. Separate account requirements were not verified.
Sources for these requirementsPartly confirmed

Conditions checked: 2026-10-04

What to do

  1. Check your age when the image was made and the service’s conditions.
  2. On the official site, use only material already on your device. You do not need to send the file itself.
  3. Keep the case details and follow the instructions for checking progress.
Open the complaint instructions
What to prepare

Read the service’s own instructions. Do not send intimate material to ClearRules or download it just to make a report.

Official source and review details

We have reviewed the official instructions. Check the current requirements and whether the form is available before submitting.

Sources researched:
No real complaints were submitted.

Latest source check:
Official material was read. This does not test complaint submission or confirm that your case qualifies.

Requirements need checkingHelp limit intimate-image sharingTake It Down — NCMECFor intimate images of you taken before age 18, even if you are now an adult. Use only a file already on your device: do not download or forward material to apply. Works on participating public or unencrypted platforms.Cost: Free.Steps and full conditions

International service · specific conditions

Take It Down — NCMEC

What this route offers: Help limit intimate-image sharing

Someone is sharing your intimate images without consent or threatening to do so. Choose by your age when the image was made.

For intimate images of you taken before age 18, even if you are now an adult. Use only a file already on your device: do not download or forward material to apply. Works on participating public or unencrypted platforms.

The service helps limit sharing on partner platforms. It cannot remove everything from the internet or restore an account.

Why this result

Requirements need checking

Not all requirements for this route are represented in the matcher. Check the recipient’s full instructions.

  • This is a specific intimate-image route. Age at creation, file possession or a court’s country connection must be checked separately for the particular service.

This is preliminary matching, not eligibility confirmation or a success estimate.

Requirements, deadlines and documents
Possible remedy
Limiting sharing through hashes on participating public/unencrypted services. Full removal, encrypted-channel coverage and account restoration are not guaranteed.
Sources for these requirementsConfirmed by the source
Prerequisites
A nude/sexual image of you created before age 18 already exists on your device. Current age and country do not limit access. If the file is absent or there is blackmail, see CyberTipline.
Sources for these requirementsConfirmed by the source
Deadline and starting event
A general filing deadline was not established; the service does not send individual match notifications. Do not wait for such a notification as proof of removal.The event starting the filing period was not established.
Sources for these requirementsNot confirmed
Cost
Free.
Sources for these requirementsConfirmed by the source
Filing language
Filing language was not verified. The website language or an available translation does not establish an accepted filing language.
Sources for these requirementsNot confirmed
Access and sign-in
No identity is required. A hash is created locally from an existing file; the image is not sent. Do not download or forward material just to use the service.
Sources for these requirementsConfirmed by the source

Conditions checked: 2026-10-04

What to do

  1. Check your age when the image was made and the service’s conditions.
  2. On the official site, use only material already on your device. You do not need to send the file itself.
  3. Keep the case details and follow the instructions for checking progress.
Open the complaint instructions
What to prepare

Read the service’s own instructions. Do not send intimate material to ClearRules or download it just to make a report.

Official source and review details

We have reviewed the official instructions. Check the current requirements and whether the form is available before submitting.

Sources researched:
No real complaints were submitted.

Latest source check:
Official material was read. This does not test complaint submission or confirm that your case qualifies.

If you also have another issue

Appeal the removal of a postAccess or protect personal dataResolve a payment or service disputeConsider a court claim
Does every country have an account-recovery route?

We have not confirmed that every country has an account-recovery process outside Meta. This directory covers the listed countries, with options for data, payments, harmful content and, where available, account restrictions and court claims. Several links do not mean several ways to restore an account. We state when no suitable option has been found.

The review covers the entries in this directory. It does not establish that every possible route has been found. An accessible page, an applicable procedure and a successful outcome are different things.

How to use this directory

Different bodies handle different issues. A refused data request, a payment dispute and an account appeal involve separate procedures. Choose the one that matches your situation. The body you contact decides whether to accept the case and what action to take.

Each card shows when its sources were researched. No real complaints were submitted.

Country and topic appear in the page address. Do not upload documents, passwords or codes here.

Countries in the directory · 78