Renew your road tax on the MyJPJ app today and there is only one way in. Since 1 May, the government's transport portal no longer accepts a password of its own: it passes you to the MyDigital ID app, waits for a fingerprint or a passcode, and only then lets you pay. For a fast-growing list of everyday tasks in Malaysia, the national digital identity is quietly becoming the single door you have to walk through.
The numbers behind it are moving quickly. MyDigital ID neared 10 million registered accounts by February, up from 7.3 million at the end of 2025, and its operator now wants 17 million by the end of this year, a target raised from an earlier 15 million. At about 50,000 sign-ups a day, that would put a government-issued digital identity in the hands of around half of Malaysia's 34 million people.
What makes this more than a registration drive is where the login is being wired in. It began with telecommunications: from 1 December 2025 every Malaysian telco was required to build MyDigital ID verification into its app, and new prepaid SIM sign-ups must now be tied to a checked identity rather than an unverified number. Road tax and driving licences followed in May. Banking is next, and it is the largest step yet. Eighteen banking institutions joined a testing sandbox earlier this year to plug the login into their systems, and any wider rollout depends on each bank's own readiness rather than a single switch-on date.
The driver is not convenience, it is fraud. Malaysians lost RM2.97 billion to online scams in 2025, close to double the RM1.57 billion of the year before, across more than 66,000 reported cases, and victims had already lost another RM830 million in the first five months of 2026. A verified identity layer, the argument goes, makes it harder to open an account, register a SIM or approve a transfer while pretending to be someone else. It is the same logic pushing our banks to retire passwords, from CIMB moving online purchases to biometric approval to the wider shift toward a phone that proves who you are.
There is a quieter cost worth naming. One identity that unlocks your bank, your telco and your road tax is convenient for you, and just as convenient for anyone who gets hold of it. Concentrating every login behind a single credential raises the stakes on that credential: a lost phone, a coerced fingerprint or a breach at the identity layer reaches much further than any single leaked password ever did. A rising sign-up count says nothing about how well that layer is defended, and the government wants 95 per cent of federal public services running through MyDigital ID by 2030. The same one-account convenience already reaches past government counters, into services like the Rakyat Digital portal handing out free AI training.
For now, the honest picture is a mix. MyDigital ID is already unavoidable for road tax and licence renewals on MyJPJ, it is built into every telco app, and it stays optional at your bank until each one chooses to switch it on. Holding one is still not a legal requirement. The next real test is the banks: a sandbox earlier this year lined up 18 institutions to plug the login in, and each one now flips the switch on its own schedule.
Image(s) courtesy of Onur Binay and Atlantic Money on Unsplash.
