Scalping concert tickets in Malaysia is still legal. That doesn't mean you're safe.

A Zone C ticket to My Chemical Romance in KL, face value RM499, was spotted on social media at RM6,000.

During the Coldplay frenzy in 2023, tickets were reportedly being resold for up to RM43,000, with one fan said to be willing to pay RM111,111.

The government has been promising to do something about this since 2023. Communications Minister Fahmi Fadzil said in mid-2025 that discussions between KPDN and the Communications Ministry were active. Deputy Minister Teo Nie Ching chaired meetings with KPDN and MCMC to study other countries' laws. Stakeholders including ALIFE were consulted.

As of now, no anti-scalping law has been enacted. Reselling a ticket above face value in Malaysia is still, technically, legal.

1. Why it's not illegal

Malaysia has no equivalent of the US BOTS Act 2016, which prohibits circumventing a ticket seller's security measures or purchase limits using automated software, and bans reselling tickets knowingly obtained that way. The FTC has enforced it — in one 2021 action against three New York brokers who used bots to buy over 150,000 tickets, penalties exceeding US$31 million were imposed.

Nor does Malaysia have anything like Western Australia's approach, which caps resale at 10% above the original price and penalises bot use.

Without such a statute, there's no offence to charge. That's why, despite years of public outrage, enforcement against scalpers has been limited.

Where the pressure comes from: the live events industry has exploded. 408 concerts were held in Malaysia in 2024 — 73 more than the previous year, and nearly quadruple the 2022 figure. Concerts have become meaningful economic activity, from ticket sales to hotels and international arrivals. More demand, more scalping, more political attention.

2. What actually binds you: the ticket's terms

Here's the part most people miss. Just because the state isn't prosecuting you doesn't mean nothing happens.

When you buy a ticket you enter a contract with the organiser or ticketing company, and those terms almost always prohibit resale without authorisation. Not just resale at a mark-up — resale at all, in many cases.

That means selling at face value, at a premium, or even at a loss because you can't attend, can all breach the same clause.

Organisers do enforce this. The practice is established in Malaysia: ticketing companies flag suspicious transactions, blacklist accounts, and disable barcodes on tickets found listed for resale. That's precisely how the enforcement works — not through police, but through the barcode at the door.

The consequence lands on the buyer. If you bought a scalped ticket and the original ticket was voided, you're the one turned away at the gate, holding a RM6,000 receipt from a stranger on Twitter.

3. If you genuinely can't attend

This is the sympathetic case, and Malaysian articles often skip it: you bought tickets, something came up, you just want your money back.

Legally you're in the same contractual position as a scalper, even though your intent is entirely different. The terms don't distinguish motive.

Do this instead of listing it on Facebook:

• Check the official resale channel. Some ticketing platforms now run authorised resale or transfer facilities. Use it if it exists — it's the only route that doesn't risk cancellation.
• Contact the ticketing company and ask about transfer or name-change options. Some allow it for a fee.
• Read the terms before you assume you're stuck. Refund provisions vary between organisers.
• If you sell privately anyway, understand you're exposing the buyer to cancellation risk, and be honest with them about it.

4. Buying from a scalper: this is where people actually get hurt

Forget the legal theory. Practically, the person most at risk in a scalping transaction is the buyer.

What goes wrong:

• The ticket doesn't exist. You pay, they disappear. This is straightforward cheating under the Penal Code, and it's the most common outcome in the reported cases.
• The barcode is dead. The organiser voided it after detecting resale. Your ticket looks perfect and won't scan.
• The same ticket was sold five times. A screenshot or PDF can be sent to any number of buyers. Only the first one through the gate gets in.
• ID doesn't match. Where ID verification is used, the name on the ticket has to match the person entering. You can't fix that at the door.

Your recourse is thin. No consumer protection framework covers a private sale between two individuals on Twitter. If you paid via bank transfer to a stranger, you're relying on a police report and the odds of tracing them.

If you've been cheated: lodge a police report, and check the recipient account on Semak Mule (semakmule.rmp.gov.my) — PDRM's free lookup of accounts reported in fraud. Do that before transferring, ideally. See also: [Just got scammed? You have about 60 minutes](/p/macau-scam-bank-negara-pdrm-phone-call-money)

Practical protections if you're buying second-hand anyway:

• Use an official resale platform if one exists. Nothing else is safe.
• Never pay by bank transfer to an individual you can't identify.
• Check the seller's account on Semak Mule first.
• Meet in person for a physical ticket where possible.
• Be suspicious of urgency — "three other people are asking" is the oldest pressure tactic there is.
• Screenshot everything: the listing, the conversation, the transfer.

5. What the law might become

The proposals under discussion, based on ministerial statements:

ID verification — requiring the ticket holder to present the same identification used at purchase, matching the name printed on the ticket. Fahmi cited Indonesia's experience, saying it isn't foolproof but has helped reduce scalping.

A dedicated anti-scalping bill — KPDN has been reviewing this, with MCMC and enforcement agencies consulted and overseas models studied.

Possible bot restrictions, following the BOTS Act model, though this hasn't been confirmed in detail.

Timeline: there isn't one. As of mid-2025 the ministry was still awaiting follow-up from ALIFE and its members, with no definite date for tabling. Nothing has been tabled since.

Our honest read: this has been "coming" since the Coldplay chaos in 2023. Three years of consultation without a bill suggests the industry consultation is harder than it looks — organisers, ticketing platforms and resale platforms have differing interests, and a badly drafted law could catch the person selling a spare ticket to a friend at face value. Don't plan around this law existing.

Meanwhile, the practical fix is already happening privately. Ticketing platforms are moving to named tickets, ID checks, dynamic barcodes and official resale channels — because they have commercial reasons to, and don't need Parliament to act.

What to actually do

Buying tickets:

• Buy from the official platform. Every risk in this article evaporates if you do.
• If you must buy second-hand, use an authorised resale channel.
• Never transfer money to an unverified individual. Check Semak Mule first.
• Assume a resold ticket may be void, and price your risk accordingly — RM6,000 for a RM499 ticket that might not scan is a spectacular way to lose money.

Selling tickets you can't use:

• Check the official resale or transfer option first.
• Read your ticket's terms — most prohibit unauthorised resale entirely.
• If you sell privately, tell the buyer honestly about the cancellation risk.
• Don't advertise a mark-up publicly. It's not currently illegal, but it flags you to organisers who do cancel tickets.

If you've been cheated:

• Police report, with all screenshots and transfer records.
• Check and report the account on Semak Mule.
• Tell the ticketing platform — they track scalper accounts.