Malaysia Traditional Medicine / OTC Remedy Regulations and Labelling Guide: NPRA Registration, MAL (T) Number and Meditag

Selling medicated pain-relief patches, herbal over-the-counter remedies, massage balms and homeopathic products into Malaysia comes down to a single decisive judgment: the moment your product carries a therapeutic claim (relieving aches, reducing inflammation, joint care, improving circulation…), it is, in the eyes of Malaysian law, a "medicine" and not a cosmetic. Once it falls into the medicine category, it is regulated by the NPRA (National Pharmaceutical Regulatory Agency) under the Control of Drugs and Cosmetics Regulations 1984 (CDCR 1984), and before it can be marketed it must first be registered with NPRA and obtain a MAL registration number, carry a serialised anti-counterfeit hologram label, and be held by a licensed local holder in Malaysia. Circulating on the market without a MAL number makes it an unregistered medicine, which can be ordered off the shelves, seized, or even face enforcement action. Following NPRA's official guidance, this article lays out the category judgment, registration process, labelling requirements and the boundary of permissible claims in one place, so that before you commit to manufacturing and marketing budgets you can first confirm you are on the right path.

Why is traditional medicine regulated so strictly?

Many brands feel that "I'm only selling a medicated patch or a jar of herbal balm, it's not a Western drug, so why should I register it like a proper pharmaceutical?" This is precisely the most common misconception. Malaysia places "traditional medicine" within the same CDCR 1984 regulatory framework as Western medicine, and the logic behind this is consumer safety: any product that claims to act on the human body and improve symptoms will be used by consumers as an effective form of treatment, which may cause them to delay seeking medical care, interact with medicines they are already taking, or suffer harm from impure ingredients or excessive heavy metals. Although traditional medicine is mainly based on natural ingredients, natural does not mean harmless — the concentration of herbal extracts, the source of animal or mineral ingredients, and the hygiene and consistency of the manufacturing process all directly affect safety. The focus of regulation is therefore not on "what raw materials you used" but on "what you tell consumers" and "whether you can prove the product is safe and of stable quality."

Those who should read this article include: traders wanting to bring overseas best-selling pain-relief patches and ache-relief sprays into Malaysia; local operators wanting to launch their own-brand herbal balms and massage oils; and brands that originally made cosmetics and want to add a line such as "effectively soothes" to their copy but are unsure whether it crosses the line. As long as your product could be interpreted as "having therapeutic effect," you are within the scope of this article.

Competent authority and regulatory framework: NPRA, CDCR 1984 and the DRGD

Medicines in Malaysia (including traditional medicine and natural products) are primarily overseen by the NPRA under the Ministry of Health, with the legal basis being CDCR 1984. The detailed rules for actual implementation, application requirements, labelling provisions and claim review standards are collected in a continuously revised official document — the Drug Registration Guidance Document (DRGD). It is currently in its 3rd Edition and is continuously updated, the latest being the 11th Revision of January 2026. For anyone wishing to register any medicine or natural product in Malaysia, the DRGD is your first-hand reference; it is not advisory guidance but the review benchmark.

Under the DRGD's definition, Traditional Medicine refers to: a product made from one or more naturally occurring plant, animal or mineral ingredients (whether in extracted or non-extracted form), used for traditional medical purposes, and it also covers homeopathy preparations. The common product forms that fall within this definition are very broad, including:

• Medicated plasters / medicated patches (medicated plaster)
• External pain-relief and blood-activating balms, creams, oils, liquids
• Herbal teas, herbal infusions
• Therapeutic massage balms and essential-oil balms (when they carry a therapeutic claim)
• Homeopathy preparations

The key point is: before being formally sold, all of the above products must first complete registration with NPRA. There is no exception, no "sell first and sort it out later" space.

What is a MAL number? How to read the final letter

When a product passes NPRA review and obtains approval, it is assigned a unique MAL registration number. The format is fixed as "MAL + 8 digits + 1 English letter", for example MAL20xxxxxxT. This string is not only proof of "being registered"; its final letter also tells you directly which registration category the product is classified under:

Natural products with therapeutic claims such as external pain-relief patches and herbal remedies will, in the vast majority of cases, fall into the T (Traditional Medicine) category; if the ingredients or claims are stronger and it is deemed to fall within the Western OTC scope, it may be classified as X. Determining the category is not something you decide yourself, but is determined by NPRA based on the formulation and claims. For a fuller cross-reference of the meaning of each letter and how to identify them, see this MAL number category letters reference (A / X / T / N / H), which breaks down the judgment scenarios for each category in more detail.

The most critical boundary: a therapeutic claim = medicine, not a cosmetic

This is where the most brands trip up, and it is worth pulling out separately. The many massage balms, essential-oil balms, roller sticks and cooling sprays on the market are, in terms of ingredients, actually not very different from cosmetics; what really decides whether it is "a cosmetic or a medicine" is not the ingredients, but what you say on the packaging and in the copy.

• If you make only claims within the cosmetic scope — fragrance, a cooling sensation, skin care, smooth massage glide — it has a chance to go through the lower-cost, faster cosmetic notification regime.
• But the moment your copy contains therapeutic wording — relieving aches, reducing inflammation, improving blood circulation, joint care, dispelling rheumatism, treating sprains — it will be classified by NPRA as a medicine / traditional medicine and must complete the full MAL registration process.

NPRA has a dedicated guideline for "natural products with therapeutic claims": Appendix 7B — Guideline on Natural Products with Therapeutic Claim, which sets out which claims are acceptable and what kind of supporting evidence is required. In other words, therapeutic claims are not forbidden, but "if you make them you must be able to prove them, and you must go through registration."

Many brands want to "save money by going through cosmetic notification, while still keeping therapeutic claims on the packaging" — this is the most typical non-compliant combination, and the product will almost certainly be ordered off the shelves and reworked, with the earlier notification possibly revoked as well. To thoroughly understand this boundary and avoid a misclassification caused by a single line of copy, we recommend first reading Are medicated plasters and essential-oil balms medicines or cosmetics?, which uses many real examples to explain which words make you "cross the line" into a medicine. If you are certain you are taking the cosmetic route, you must strictly observe the cosmetic claim red lines and labelling rules.

Registration process: the QUEST online system, step by step

Registration of traditional medicine is carried out entirely through NPRA's online system QUEST. The overall process can be broken down into the following stages:

1. Apply for a QUEST membership account. You (or your appointed local holder) need to prepare company registration documents, a letter of authorisation, proof of identity of the responsible person and other materials to apply to NPRA to become a QUEST member. At the same time you need to purchase a USB Token (digital certificate) from MSC Trustgate, used to perform legally binding electronic signatures on the system.
2. Submit the registration application online. After logging in to QUEST, fill in and upload the required materials as prompted by the system, including: the product's complete formulation and the content of each ingredient, product specifications, manufacturer information, and safety- and quality-related documents. The review focus for traditional medicine is on safety and quality, and formulation transparency and process traceability are key to whether it passes.
3. Back-and-forth with NPRA to supplement documents (query). During the review process, NPRA will usually raise questions (queries) about the formulation, claims and documents, and you must respond to each item and supplement the documents within the deadline. The number of rounds at this stage is often the main factor determining the length of the overall timeline.
4. Submit to the Drug Control Authority (DCA) meeting for assessment. Once the materials are complete and the review passes, the case is submitted to a meeting of the Drug Control Authority (DCA) for final approval. Only after approval is the MAL number formally obtained, and only then may the product be legally marketed.

This is a simplified skeleton; for the detailed documents actually required at each step, the common supplementary-document focus points and timeline management, we recommend reading it together with Full breakdown of the NPRA registration process for traditional medicine, so that you grasp in advance "what to submit and where it gets stuck" at each checkpoint, which can substantially reduce the time spent going back and forth on supplementary documents.

Who can be the registration holder? A must-read for foreign manufacturers

This is the checkpoint that foreign brands most easily overlook, yet absolutely cannot get around: a foreign company cannot register a medicine in Malaysia on its own. NPRA's rule is very clear — if a foreign company wishes to bring a medicine (including traditional medicine) into Malaysia, it must first appoint a local Malaysian company to act as the holder of the registration certificate (product registration holder).

This holder is not just a name on paper, but NPRA's sole point of contact and party held accountable, with responsibilities including:

• Ensuring that the product actually in circulation is completely consistent with the originally approved formulation, specifications and labelling;
• Being responsible for reporting adverse reactions of the product (pharmacovigilance);
• Not unilaterally changing, without NPRA approval, the product's name, formulation, characteristics, ingredient sources, specifications, manufacturer, packaging, indications or labelling — any change to any of these must go through the variation procedure.

In other words, the quality of the holder you choose directly determines the compliance health of your presence in the Malaysian market thereafter. Choosing a local partner who understands the regulations and is willing to cooperate in maintaining product data is far more important than saving a little on fees.

Imported vs. locally manufactured: what's the difference?

Whether the product is "imported" or "locally manufactured" affects the holder's identity and labelling requirements, and this is something to settle at the planning stage:

For imported brands, the key action is: find a local registration holder first, and have the holder submit the registration on QUEST as the holder, ensuring the country of manufacture / country of origin is truthfully labelled on the packaging. Local manufacturers are relatively straightforward and may act as their own holder, but they equally bear full responsibility for formulation consistency and labelling compliance. Whichever route, every item of the product's approved data is "locked," and any change must go through the variation procedure — you cannot privately switch materials, factories or copy.

Meditag / FarmaTag anti-counterfeit hologram label

All registered medicines, traditional medicines and health supplements must carry a serialised anti-counterfeit hologram label. When this label was introduced in 2005 it was called Meditag, and it was renamed FarmaTag from September 2019. Its purpose is to let consumers and inspectors quickly tell whether a product is a genuine article approved by NPRA, combating counterfeit and unregistered products. The labelling rules include:

• Affixed to the front of the product's outer box (secondary packaging); if the product has no outer box, then affixed to the inner label.
• Must not cover any of the product's statutory information (especially the MAL number, ingredients, warnings, etc.).
• The label must be supplied by an NPRA-designated supplier (for example NetSmart Sdn. Bhd.) and may not be printed by yourself.

In practice, common mistakes are affixing it in the wrong place, on the back, or covering the MAL number and indications when affixing it. Because the anti-counterfeit label and statutory information such as the MAL number and indications need to be laid out together on the packaging, the placement of the label is actually part of the label design; to see the full labelling layout requirements, you can cross-reference Mandatory items for registered medicine / traditional medicine labels and plan them together.

GMP and medicine labels: mandatory items item by item

GMP (Good Manufacturing Practice): the manufacturing plant for traditional medicine must comply with GMP. If a GMP-certified contract manufacturer is responsible for manufacturing or repacking, the MAL number will carry a corresponding code (for example C for contract manufacturer, R for repacker, and the like), allowing the regulator to trace the party responsible for actual manufacturing / repacking.

Mandatory label items: the label of a registered medicine / traditional medicine cannot carry only the brand and graphics; none of the following statutory information may be missing:

• MAL registration number
• Active ingredients and content
• Indication (intended use)
• Directions and dosage (dose, method of use, frequency)
• Warnings and precautions (contraindications, side-effect reminders, etc.)
• The registration holder's name and address
• Batch number and relevant dates (manufacturing / expiry date)

And this statutory information must be presented in Malay or English (other languages such as Chinese may be added, but the statutory information cannot be in Chinese only). On the label, the three items "indication, dosage, warnings" are the most common disaster zones for traditional medicine being rejected — vague wording, missing items, or claims exceeding the approved scope will all cause problems. For this area we recommend cross-referencing Mandatory items for registered medicine / traditional medicine labels, confirming in advance what to put in each field and how to word it so as not to cross the line, before sending to print.

Common rejection / error scenarios

The following are the most common pitfalls at the registration and market-entry stages of traditional medicine; check yourself against them one by one:

• Misclassification: carrying a therapeutic claim yet trying to go through cosmetic notification is the most typical and most fatal error.
• Marketing before registration: distributing stock before obtaining a MAL number makes it an unregistered medicine, which will be taken off the shelves and seized.
• Anti-counterfeit label problems: missing the label, affixing it in the wrong place (on the back), or covering the MAL number / indications when affixing it.
• Missing label items: missing the MAL number, missing the indication, missing the registration holder's name and address, or statutory information only in Chinese.
• Foreign manufacturers not appointing a local registration holder: wanting to register directly by themselves simply does not work procedurally.
• Claims exceeding the approved scope: using a mild set of claims at registration, then upping the "therapeutic" claims in marketing materials after launch — once these are inconsistent with Appendix 7B and the approved content, it is equally non-compliant.

Pre-market self-check list

• [ ] Confirm classification: the product has a therapeutic claim → classified as a medicine / traditional medicine (goes through MAL registration), not cosmetic notification
• [ ] Have appointed a local registration holder in Malaysia (especially necessary for imported products)
• [ ] Ingredients are approved for use by NPRA, with no prohibited / controlled ingredients or poison-schedule ingredients over the allowed limit
• [ ] Have submitted registration via QUEST and obtained a MAL number (category T, or X depending on determination)
• [ ] The front of the outer box carries the Meditag / FarmaTag anti-counterfeit hologram label, without covering statutory information
• [ ] The label includes the MAL number, active ingredients, indication, directions and dosage, warnings, holder name and address, with the statutory information in Malay / English
• [ ] Imported products have the country of manufacture / country of origin additionally labelled
• [ ] The manufacturing plant complies with GMP; all therapeutic claims conform to Appendix 7B and do not exceed the approved scope

Frequently asked questions (FAQ)

Q: Is a medicated external pain-relief patch a medicine or a cosmetic? As long as it carries a therapeutic claim (relieving aches, reducing inflammation, activating blood circulation, etc.), it is a medicine / traditional medicine and must be registered with NPRA to obtain a MAL number; only if it is purely fragrance, cooling sensation or skincare with no therapeutic wording at all does it have a chance to go through cosmetic notification. What decides the classification is "your claim," not "your ingredients."

Q: What does the final letter of a MAL number mean? The final letter represents the registration category: A controlled medicines, X non-prescription OTC medicines, T natural products / traditional medicines, N health supplements, H veterinary products. Natural products with therapeutic effect such as external patches and herbal remedies are mostly T.

Q: Can a foreign brand register on its own? No. A foreign company must first appoint a local Malaysian company as the registration holder, and the local company submits the registration on QUEST and is responsible for the subsequent compliance, variations and adverse-reaction reporting.

Q: Is the anti-counterfeit label mandatory? Where does it go? Yes, all registered medicines, traditional medicines and health supplements must carry the serialised Meditag / FarmaTag anti-counterfeit hologram label, affixed to the front of the outer box (secondary packaging); if there is no outer box, it is affixed to the inner label, and it must not cover statutory information such as the MAL number.

Q: Which system is used for registration? What does a foreign company need to prepare? Submission is via NPRA's online system QUEST, and you need to purchase a USB Token from MSC Trustgate for electronic signing. A foreign company cannot apply itself; the appointed local registration holder must operate it as a member, with company registration, letter of authorisation, formulation, and safety and quality documents prepared.

Q: What is the difference between imported and locally manufactured in terms of compliance? The main difference is in the holder's identity and the labelling: imported products must appoint a local registration holder and add the country of manufacture / country of origin to the packaging; a local manufacturer may act as its own holder. Whichever route, the approved formulation, specifications and labelling are locked after approval, and any change must go through NPRA approval.

Q: Can I write "effectively treats joint pain" in my copy? Therapeutic claims are not forbidden, but they must comply with NPRA's Appendix 7B guideline, have corresponding supporting evidence, and be approved together at registration. Marketing materials after launch also cannot exceed the approved scope of claims, otherwise even if the product has a MAL number it will still be dealt with for a claim violation.

Conclusion

For traditional medicine / external OTC remedies to enter Malaysia, the compliance path can actually be condensed into one clear chain: first confirm the classification (a therapeutic claim = medicine) → appoint a local registration holder → complete registration via NPRA / QUEST and obtain a MAL (T) number → submit to the DCA for approval → affix the Meditag / FarmaTag anti-counterfeit label → prepare a compliant label (MAL number + indication + dosage + warnings + holder name and address, in Malay / English). Confirming every link of this chain before going into production is far more cost- and time-saving than being taken off the shelves and starting over after launch.

Want to first confirm whether your product should go through medicine registration or cosmetic notification, and exactly what your label is missing? Run a free label check now, or send us your ingredient list and packaging claims, and we will help you determine the classification, take stock of the missing items and prepare your market-entry documents.

This article is compiled from NPRA's official guidance and is for reference only; the exact requirements for traditional medicine / medicine registration are governed by the latest DRGD text and review by NPRA.