Malaysia MyKad Validator
Malaysia MyKad / IC number validator. Verifies the 12-digit format, birth date, and place-of-birth state code. Browser-only — your IC never leaves the page.
Malaysia MyKad Validator
How the MyKad check works
Strip the dashes
MyKad is 12 digits whether you type it as 850312-10-5234 or 850312105234. The validator normalises both forms.
Check the birth date
The first 6 digits are YYMMDD. The tool verifies the month/day combination is a real calendar date and infers century from the current year (under 26 = 2000s, over = 1900s).
Look up the place-of-birth code
Digits 7-8 are a state code (01-16 for states/FTs, 21-59 for older state-by-region codes, 60-85 for born-abroad groups).
Read the gender bit
The last digit's parity = gender (odd = male, even = female). The 4-digit serial otherwise carries no public meaning.
About the Malaysian MyKad number
MyKad is the world's first smart national identity card, launched by Malaysia's Jabatan Pendaftaran Negara (JPN) in 2001. It replaced the older Kad Pengenalan Bermutu Tinggi (KPBT) and added a chip storing biometric, driving licence, and ATM data. The number printed on the card — 12 digits in the canonical YYMMDD-PB-#### form — is what most Malaysians refer to as "IC number" in daily speech.
Structure: 6 + 2 + 4
The first six digits encode the holder's birth date. The next two are the place-of-birth (PB) code: 01–16 for the thirteen states and three federal territories, 21–59 for older sub-state codes used during early issuance, and 60–85 for citizens born abroad (grouped by country or region). The final four are a serial number; the last digit's parity indicates gender (odd = male, even = female).
"Unlike Singapore's NRIC or China's 身份证, MyKad has no public checksum — the JPN deliberately keeps the validation logic internal. A 'valid format' result confirms structure but not authenticity."
Why this matters
IC numbers surface constantly in Malaysian life: bank KYC, EPF withdrawals, MyTax filings, hospital records, school enrolment, telco SIM registration (mandatory since 2006), and increasingly in private-sector loyalty programmes. Typos in any of these can lock you out for weeks. A 5-second client-side check catches the most common entry errors — wrong digit, missing digit, impossible birth date, unknown state code — before the data ever hits a server.
Privacy stance
This tool runs entirely in your browser. Your IC number is never uploaded, logged, or transmitted. Under Malaysia's Personal Data Protection Act 2010 (PDPA), MyKad numbers are personal data and must be handled with care. We built this with zero network calls so you can validate confidently without leaving a trace.
10 facts about MyKad
MyKad was the world's first smart national ID card with a multi-application chip, launched 2001.
The IC number format actually predates MyKad — it was inherited from the 1990 Kad Pengenalan (KP) system.
JPN does not publish a public checksum algorithm, unlike Singapore (NRIC) or China (身份证).
Selangor, Kuala Lumpur, and Johor have the largest IC ranges due to population.
State code 82 ("unknown state") is used for ICs issued before the state code system was standardised.
Foreign-born citizens get codes 71–79 (regional groups) or 60–67 (Middle East), 74 = China, 75 = India, 77 = Singapore.
Malaysian SIM card registration (mandatory since 2006) requires a valid IC number — this is the main bulk-validation use case.
The PB code does not change when you move — it reflects birthplace, not current address.
Centenarians born before 1925 cause century-inference ambiguity (YY=24 could mean 1924 or 2024).
MyKid (children under 12) and MyTentera (military) share the same 12-digit IC structure as MyKad.
Frequently asked questions
No. The validation runs entirely in your browser. Your IC never leaves the page — no upload, no logging, no server-side record.
No. Because JPN does not publish a checksum, this tool can only verify structural correctness: 12 digits, plausible birth date, recognised state code, and correct gender bit. Many random 12-digit numbers will pass these checks too.
PB codes 01–16 are the 13 Malaysian states and 3 federal territories (KL, Labuan, Putrajaya). 21–59 are older state-by-region codes from early issuance. 60–85 cover citizens born abroad, grouped by country or region.
YY ≤ current 2-digit year (e.g. 26 in 2026) is assumed 2000s; higher YY is assumed 1900s. This works for everyone except centenarians born before 1925, where the inference may be wrong.
Yes. Odd = male, even = female. This has been documented JPN convention since the IC system began. The other 3 digits of the serial carry no public meaning.
Security through obscurity — JPN keeps the authenticity check internal to make forgery harder. Singapore, by contrast, made the NRIC checksum public on the assumption that obscurity adds little protection.
Yes. MyKid (under 12) and MyTentera (military) use the same 12-digit IC structure as MyKad, so the same format check applies.
Under PDPA 2010, MyKad is personal data — organisations must have lawful basis to collect, store, or share it. They cannot use it as a generic identifier when alternatives exist.
Older pre-1990 ICs used a different alphanumeric format (e.g. A1234567). Those are not validated by this tool — it only handles the modern 12-digit numeric IC.
This page validates one at a time for privacy. If you need bulk validation in your own app, the algorithm in this tool is plain JavaScript — you can copy it into your codebase (no API needed).
Related News
You may be interested in these recent stories from our newsroom.
No related news yet for this tool. Our editorial team publishes new pieces every week.
Browse all news →75 more free tools
Calculators, converters, security tools — no signup.