Which Certifications Do You Need to Sell Online? An Overview Decision Guide (Malaysia)

To sell online in Malaysia, which certificate you need depends on your product category—there is no single "universal e-commerce licence". Different categories are gatekept by different regulators: cosmetics and supplements fall under NPRA, regulated electrical equipment under the Energy Commission (ST) and SIRIM, wireless products under MCMC, food under the Ministry of Health's Food Safety and Quality Division (FSQD), and halal marking under JAKIM. This article uses a single decision table to help you find your place and identify the certificate you need. (To see the platform-side rules, see Shopee Malaysia Listing Compliance Requirements.)

First ask three questions

1. Which regulated category does my product belong to? (cosmetics, supplements, medicine, food, electrical, wireless, toys...)
2. Does this category require "registration/approval" before going to market, or only "notification"? (the thresholds differ greatly)
3. Does a foreign brand need a local holder/agent? (most regulated categories do)

Certification decision table by category

Notification vs registration: don't confuse them

This is the most commonly misunderstood point:

• Notification: as with cosmetics, the business submits product information to obtain a notification number and can then go to market, with NPRA monitoring afterwards; this does not mean NPRA has "approved" the product.
• Registration: as with supplements and traditional medicine, the product must be assessed and approved by NPRA to obtain a MAL number before going to market, and both the threshold and the timeline are higher than for notification.

Foreign brands: a local holder is almost unavoidable

Under the Control of Drugs and Cosmetics Regulations 1984 (CDCR 1984), a foreign company cannot directly hold an NPRA licence; it must set up a legal entity in Malaysia or appoint a local company to act as the product holder (such as the CNH for cosmetics or the PRH for supplements). Likewise, the holder of an ST CoA and of a SIRIM certification must also be a locally registered company, and overseas manufacturers must designate a local representative.

Electrical and wireless: don't miss either certificate

To sell regulated electrical equipment legally, you need both a valid CoA + a physical ST-SIRIM label at the same time; the CoA is valid for 12 months. If the product includes wireless functions such as Wi-Fi/Bluetooth/mobile network, you must also separately obtain MCMC type approval (often processed through SIRIM QAS). These are two different schemes, and a product that both plugs in and connects may need both.

Common mistakes

• Thinking that "having SST registration means you can sell anything"—SST is a tax registration and has nothing to do with category certification.
• Doing only cosmetic notification but not building a PIF (Product Information File) for record.
• Wanting to list imported supplements yourself without arranging a local PRH.
• Checking only whether Bluetooth earphones have a SIRIM electrical label while missing MCMC type approval.

Frequently asked questions (FAQ)

Q: Is there a single certificate that works for all categories? No. Certification goes by category; the more regulated categories you sell, the more sets you may need to obtain.

Q: Does cosmetic "notification" equal government approval? It does not. Notification is a registration-of-record scheme; NPRA retains the power to audit and take products down afterwards, and safety responsibility still rests with the business.

Q: Do small-batch homemade soaps/skincare also need notification? As long as they are sold in the market as cosmetics, they in principle require notification and must meet ingredient rules; being handmade or small-batch does not grant an exemption.

Q: Is halal certification mandatory? No. But as long as you use the word or logo "Halal" on the packaging, you must have certification from JAKIM (or a body it recognises), and you cannot make your own mark. See the Malaysia Halal Certification Guide.

Q: Does food need to be "registered"? General food does not use a product registration scheme; instead it follows labelling and safety rules. The focus is on labelling compliance (see the Food Labelling Regulations Guide) and any required halal proof.

Self-check

• [ ] Identified the regulated category the product belongs to
• [ ] Distinguished whether the category is notification or registration
• [ ] Arranged a local holder/agent for foreign brands
• [ ] Confirmed for electrical/wireless whether CoA, ST-SIRIM, and MCMC are all needed
• [ ] The label meets the category's mandatory items

Summary

For online-selling certification, the answer is always "it depends what you sell". First find your place by category, then distinguish notification from registration and confirm the local holder, and you can clear all the certificates you need in one pass. To see the full end-to-end order, refer to the Malaysia Market Entry Compliance Roadmap.

Run a free label check now

This article is compiled from official sources and is for reference only; actual compliance is subject to the latest official text and review by the relevant authorities.