Share This

Showing posts with label Blockchain. Show all posts
Showing posts with label Blockchain. Show all posts

Wednesday, August 20, 2025

Chronicling evolution of MyKad since 2001: MyKad – Shaping the future of Malaysia’s digital citizens

 

Badrul Hisham showing old identity cards on display at NRD.

rds on display at NRD.

With a single card, individuals can confirm their Malaysian citizenship and seamlessly handle daily tasks such as paying toll, using public transport and buying essentials.

Efficient and convenient – that’s how several users describe their experience using MyKad in daily life.

Some are even updating their MyKad to ensure they have access to the one-off RM100 cash aid given out by the government for the purchase of essentials from Aug 31 in conjunction with National Day.

The identity card of Malaysia’s first prime minister Tunku Abdul Rahman Putra Al-Haj on display at the NRD museum. (Right) Badrul Hisham showing old identity cards.The identity card of Malaysia’s first prime minister Tunku Abdul Rahman Putra Al-Haj on display at the NRD museum. (Right) Badrul Hisham showing old identity cards.

“I don’t need to carry multiple cards in my wallet.

“MyKad is enough,” said trader Roslina Daud, who uses it as an alternative Touch ‘n Go (TNG) payment method for tolls and parking fees.

Private sector worker Maisara Abdul, who uses public transport to commute to work, said the My50 pass integrated with MyKad was convenient as she no longer needed to carry multiple travel passes for different modes of transport.

Sumbangan Asas Rahmah (Sara) aid recipient Rohani Abdullah welcomed the use of MyKad as a payment method for basic necessities, saying it helps reduce the risk of loss or theft.

“With MyKad, Sara recipients like me do not need to queue at banks or automated teller machines (ATMs) to withdraw money.

“We can go directly to the supermarket, pick up essential items and pay using MyKad,” she said.

History of MyKad

MyKad, or Government Multipurpose Identity Card, was introduced in 2001.

New MyKad waiting to be collected at NRD Putrajaya. — FilepicNew MyKad waiting to be collected at NRD Putrajaya. — Filepic

Its goal was to modernise the national identity system, enhance identity security and offer a digital platform that integrates multiple applications into a single card.

Commenting on MyKad’s evolution over more than two decades, National Registration Department (NRD) director-general Badrul Hisham Alias said four versions had been introduced, with the latest launched in 2012.

However, the department is now in the final phase of developing a new MyKad version with enhanced security features.

“The first version used plastic before being upgraded to Polikad 2.0, followed by the current version, which includes additional features like a ‘ghost image’ to improve security.

“Overall, MyKad underwent major changes in 2012 to keep up with technological developments, including design, security features and chip technology,” he said in an interview with Bernama.

Explaining the meaning behind the term “MyKad”, he said “My” referred to Malaysia, while “Kad” meant identification card – its main function being to identify all Malaysian citizens.

“MyKad is the continuation of the country’s identity document (ID) system, which started with paper cards (1948-1960), then blue plastic ID cards (1960-1990), followed by the hibiscus cards (high-quality IDs from 1990-2001) and now, the modern MyKad,” he said.

Although not fully digital, MyKad is designed to support various government transactions and services by integrating digital applications like driving licences, international passport information, basic health data and e-wallets.

“MyKad is widely used in Malaysia’s public healthcare sector, especially for managing medical records, vaccinations and access to public hospital services through identity verification.

The country’s ID system started with paper cards (1948-1960). — Photos: BernamaThe country’s ID system started with paper cards (1948-1960). — Photos: Bernama

“We have also collaborated with agencies like Inland Revenue Board (LHDN) and Employees Provident Fund (EPF) to improve the effectiveness of financial aid delivery,” he said.

Security features

On public concerns about MyKad’s security, especially if it becomes more widely used, Badrul Hisham said the latest card version contained a chip with built-in security features.

“This chip can only be read, written and recorded by NRD’s approved systems.

“While the chip is also used in other industries, its usage in MyKad is tightly controlled,” he explained.

Visible security features include the “ghost image” using laser engraving technology and enhanced smart chip capacity.

While chip card readers are widely available in the market, only NRD-approved devices can access MyKad data.

Badrul Hisham said data sharing with other agencies like LHDN, Road Transport Department (JPJ), police, Health Ministry and others was conducted securely under a “whole-of-government” approach.

While chip card readers are widely available in the market, only NRD-approved devices can access MyKad data. — FilepicWhile chip card readers are widely available in the market, only NRD-approved devices can access MyKad data. — Filepic

He noted that the MyKad chip was equipped with security keys to prevent unauthorised data access or misuse.

“MyKad data can only be accurately accessed using card readers programmed with specific command sets supplied by certified vendors.

“Fingerprint data is encrypted and requires matching keys for access.

“Any information update can only be done at NRD counters through a card replacement process,” he explained.

Badrul Hisham added that data sharing was regulated and must be approved by the NRD director-general.

“This sharing is only allowed for specific purposes, like improving public services, policy development or research – all while ensuring data confidentiality and security,” he said.

Regarding the risk of MyKad forgery or data cloning, he said the card was designed according to international standards and was very difficult to forge.

“Security features exist on multiple layers of the card, with some requiring special tools for verification.

“This makes MyKad, especially the chip, very hard to counterfeit,” he said.

Role in aid

Currently, MyKad is used to distribute financial aid such as Sumbangan Tunai Rahmah (STR), Sara and eKasih.

Sara, for example, involves 5.4 million recipients using aid from the Finance Ministry to purchase items from 14 categories at participating outlets.

On the perception that Sara funds are “loaded” into MyKad, Badrul Hisham clarified that no money was credited to the card itself.

Instead, recipients’ data is accessed through the store’s system during transactions.

“At participating stores, simply present your MyKad.

“Once your ID number is entered, your name will appear and you can shop based on your allocated aid amount,” he said, adding that the system also showed the remaining balance.

“For the RM100 Sara aid announced by Prime Minister Datuk Seri Anwar Ibrahim, recipients only need to present their MyKad to the cashier for identity verification,” he said.

Badrul Hisham stressed that the aid redemption could not be delegated to another individual.

“It is important to remember that MyKad cannot be held or used by others, including family members, in accordance with Regulation 25(1)(e) of the National Registration Regulations 1990,” he said.

Violators may face up to three years in prison, a fine of up to RM20,000, or both.

Badrul Hisham acknowledged that NRD’s initial goal to make MyKad a multi-purpose platform had yet to be fully realised, despite it being in place for 24 years.

Interest from government agencies in using MyKad as a core service delivery platform has also waned.

He said the latest MyKad version could support digital applications for payments, health records and banking, because of its increased chip capacity – 124KB or 128KB compared to the previous 84KB.

“But many agencies have stopped using MyKad in their systems – like JPJ.

“Otherwise, we would not need to carry a physical driver’s licence; MyKad would suffice.”

Physical vs digital

Commenting on MyDigital ID and MyKad, Badrul Hisham said the physical MyKad was governed by the National Registration Act 1959 and would remain relevant despite MyDigital ID implementation.

NRD is committed to ensuring MyKad remains a robust and relevant identity document, aligned with technological progress and public needs, he said.

In the future, he added, MyKad would not only serve as a physical ID, but also as a key to Malaysia’s digital ecosystem, integrating government, financial, healthcare and social services into one secure, efficient and accessible platform.

“Even in other countries with digital systems, physical ID cards still play a role.

“Our goal is to provide fully end-to-end services, including digital services.”

To support this, NRD is in the process of amending the National Registration Act to enable digital applications via MyKad.

Dr Umi Hamidaton Mohd Soffian Lee, a senior lecturer from the Economics and Muamalat Faculty at Universiti Sains Islam Malaysia (USIM) said MyKad remained crucial in the distribution of aid and subsidies.

“MyKad serves as an integrated database, enabling the government to identify target groups for aid distribution and targeted subsidies based on the profile contained in the MyKad, which includes information such as individual and household income, records of government aid received such as STR and Sara, and number of dependants,” she said.

Citing the example of implementing targeted subsidies for petrol, she said using MyKad was more efficient as the card’s security features could prevent duplication.

“However, if the government intends to implement targeted petrol subsidies via MyKad scanning in the future, it is advisable to first enhance information and digital technology infrastructure in rural areas,” she said.

Umi Hamidaton also recommended that the quality of MyKad continue to be improved, noting that incidents still occurred where the security chip could not be read and the card itself broke easily.

Blockchain enhancement

Blockchain technology can improve MyKad’s security and transparency by storing data in immutable digital ledgers, enabling full audit trails for each access and using cryptography for secure identity verification.

Dr Nor Alina Ismail, Data Science and Computing Faculty head at Universiti Malaysia Kelantan (UMK), said blockchain could ensure better data integrity through permanent records, cryptography and transparent verification across networks – making manipulation or hacking very difficult.

“Unlike centralised systems that are vulnerable to breaches and data loss, blockchain offers distributed storage and real-time audit trails, ideal for sensitive data like health records and digital identity if combined with strong privacy protection mechanisms,” she explained.

She said MyKad could be enhanced into a digital identity wallet through blockchain, integrating personal data like e-wallets, digital certificates, driving licences, health records and ID data securely in a single chain of identity.

She added that zero-knowledge proofs could allow verification of status – such as citizenship or age – without disclosing the full data, improving privacy.

The technology also enables cross-sector use (government, banking, healthcare, education and transport) through shared ledgers and automated smart contract verification.

“For instance, when applying for a bank loan, the bank can verify ID through NRD and employment status via EPF or LHDN without needing physical documents.

“This access can also be restricted via permissioned blockchain and logged for auditing, making processes more efficient and less prone to fraud while giving users full control,” she said.

However, for full implementation, a legal framework, stable digital infrastructure and strong privacy protection are required.

Anticipating that MyKad will evolve into a fully digital identity system within five to 10 years, Nor Alina said Malaysia could emulate countries like Estonia, which had a comprehensive digital identity system.

But, she acknowledged that building a blockchain-based MyKad system would require large government investment in technology, digital infrastructure upgrades, long-term maintenance and training.

“The main challenge is the high initial cost due to upgrading current systems, bridging the digital divide, enhancing existing laws, drafting new ones and developing a comprehensive cybersecurity policy,” she said.

“However, this transformation depends on the readiness of digital infrastructure, the legal framework, public technological literacy and data security assurance.

“Therefore, in this decade, we may see a hybrid approach, where MyKad exists in both physical and digital forms before fully transitioning to a blockchain-based digital identity once the nation’s technological and legal ecosystem is truly ready,” added Nor Alina.

Source link

Thursday, January 16, 2025

Unmasking the danger of privacy coins


 

Technology supporting cryptocurrencies is used in the real world for drug trafficking, human trafficking, sexual exploitation and smuggling of goods 

Cryptocurrencies that emphasise anonymity and encryption are frequently used by criminals

USING state-of-the-art technology to support cryptocurrencies is a double-edged sword. It facilitates cross-border payments and remittances as well as financial inclusion for the underbanked or unbanked but is increasingly used for criminal activities.

It is used in the real world for drug trafficking, human trafficking, sexual exploitation and smuggling of goods, rather than just cybercrime like ransomware attacks.

According to a European Union Agency for Law Enforcement Cooperation (Europol) report in 2022, cryptocurrencies are being used for all types of crime requiring financial transmissions, the scale of which is difficult to estimate. Europol noted that criminals have also become more sophisticated in using cryptocurrencies to in complex money-laundering schemes.

Both Europol and the Basel Institute on Governance, which also published a report in 2022, point to the rapid progress of technologies involving cryptocurrencies and the challenges governments have in keeping up through legislation and law enforcement or the need to develop and adapt through investigative technologies and techniques.

It is only now that anti-money laundering (AML) and know-your-customer (KYC) processes common in transactions involving fiat money are starting to take into account cryptocurrency transactions.

Bank Negara and the Securities Commission (SC) have guidelines for cryptocurrencies and have hired specialists to monitor or regulate them. Now, the Malaysian Anti-corruption Commission (MACC) is looking at raising the capabilities of its officers who address cases in which cryptocurrencies are used to conceal financial trails.

The move involves further specialised training as well as acquiring advanced technology and equipment. In Malaysia, people can own cryptocurrencies and they can be traded on licensed digital exchanges, but are not considered legal tender.

Some say that the MACC is late to the game as the police already have the capabilities through the Kuala Lumpur-based Cryptocurrency Analysis Laboratory, which was jointly opened with the United Nations Office on Drugs and Crime in 2022. It is the first such laboratory in South-east Asia.

In fact, a series of fraud or scams leveraging cryptocurrencies have been crippled through this crime laboratory capability going from past news reports.

Also, Bank Negara and the SC have been exploring solutions for the past year or two.

A lawyer specialising in cryptocurrency projects shares that its basically track-and-trace to follow the money trail through the blockchain, which is essentially a digital ledger where all transactions are recorded and confirmed. Unlike cash, cryptocurrency transactions are highly traceable from start to finish, and with the right tools, can be mapped out how illicit funds have moved and how they are being funnelled.

When these tools acquire more data, they can also flag out wallet addresses that have been sanctioned or linked to illegal sources, which means authorities will also know whether the funds are tainted.

Compared with the banking system, tracing funds through the blockchain’s public digital ledger is easier, even when these funds cross borders.

According to the lawyer, the police can easily trace illicit fund flows even if a circuitous route is used. Banks have limited tracing ability and cooperation of foreign correspondent banks and law enforcement will be needed once funds cross borders.

Banking laws in other countries may differ pertaining to privacy and disclosure and in most cases, a court order is needed to request information.

There is a need to better understand altcoins such as privacy coins, as these cryptocurrencies that emphasise anonymity and encryption are frequently used by criminals.

There are many privacy coins including Monero, Dash and Zcash but Monero seems to be the cryptocurrency of choice among criminals. They work by enabling anonymous transactions through obscuring both sender and receiver addresses.

What makes them even more useful is that the transaction amounts are also hidden through the use of an obfuscated public ledger specifically for privacy.

The MACC as well as other law enforcement agencies will have to equip themselves with the right tools and know-how to confront these challenges.

Europol describes it thus: “Often illicit funds do not flow straight from wallet to wallet. They instead travel through a multi-step process involving different financial entities, many of which are novel and are not yet part of standardised, regulated financial payment markets.

“Obfuscation methods and other countermeasures continue to be developed and used by criminals.”

Other methods used by criminals include over-the-counter trading in which tracing the trade is almost impossible. Initially used for smaller transactions, there are signs that it is now being used for much bigger ones.

The enormity of the challenges confronting law enforcement agencies such as the MACC is that privacy coins are hard to track as most have been delisted by cryptocurrency exchanges under pressure from governments and no one knows how prevalent the use of these coins is.

Criminal networks often use unlicensed exchanges with looser AML and KYC processes, enabling transactions that involve a complex series of steps to throw off authorities, before eventually being traded for fiat currency.

Source link