Short answer
No.
iVisa is a commercial visa and travel service. It is not affiliated with Jabatan Imigresen Malaysia (the Immigration Department of Malaysia). iVisa charges a fee to file the MDAC on your behalf. The MDAC itself is free.
The official site is:
Longer answer
iVisa is a legal business. Paying iVisa is not illegal. It just costs more than the $0 the Immigration Department charges, for a form that takes 7 minutes.
If you paid iVisa for an MDAC submission, one of three things happened:
- iVisa filed the real MDAC on your behalf and kept the fee. Your record is in the Malaysian Immigration system. You overpaid.
- iVisa filed a different form (e.g. an eVisa application) and sent a generic confirmation. You may still need the MDAC.
- iVisa filed nothing yet and is waiting on info from you, or their system failed silently.
Check your email for a confirmation from [email protected] containing an MDAC reference number. If you have it, the real form was filed. If not, file it yourself at the official site.
Other sites people ask about
Is malaysia-mdac.com the official site?
No.
.com is open. Anyone can register it. The Malaysian government uses .gov.my, which is restricted.
malaysia-mdac.com is a reseller charging roughly $19 USD. It typically files the real MDAC, so you usually arrive with a valid record. You just paid $19 for 7 minutes of typing.
First observed: February 2024.
Is mdac-malaysia.org the official site?
No. .org is open. The Malaysian Immigration Department does not use .org.
Charges roughly $29 USD. Mimics the imi.gov.my color scheme.
First observed: May 2024.
Is mdac-official.net the official site?
No. The word “official” in a domain is meaningless. .net is open.
Charges roughly $35 USD. URL designed to look like an Immigration Department subdomain at a glance. It is not.
First observed: March 2025.
Is ivisa.com/malaysia the official site?
No, same as the short answer above.
The scam gallery
Screenshots captured April 2026. Archived on Wayback Machine.
How to tell any MDAC site is not the real one
- Does the domain end in
.gov.my? If no, it is not a Malaysian government site. - Does it ask for payment? The MDAC is free.
- Does the URL contain words like “apply”, “official”, “MDAC” but not
.gov.my? Bait. - Does it ask you to upload a passport photo? The official MDAC does not.
- Does the page have testimonials, trust badges, or countdown timers? Government forms do not.
What to do if you’ve already paid
Dispute the charge with your credit card issuer. “Service not rendered” or “deceptive practice” usually works. Best within 60 days of the charge.
If the middleman did file a real MDAC for you, your record is still valid. You are disputing the fee, not the submission.
If no real MDAC was filed, file one yourself at imigresen-online.imi.gov.my/mdac/main before travel. It takes 7 minutes.