A child told you something. Here's what to do next.

If a child has just disclosed abuse to you, here are the numbers. The rest of this page can wait.

• Talian Kasih 15999 — free, 24 hours, confidential. WhatsApp 019-261 5999
• Police: 999, or go to the nearest IPD (district police headquarters)
• Nearest government hospital with an OSCC (One Stop Crisis Centre) if the child needs medical attention
• To report child sexual abuse material online: the IWF Malaysia portal at report.iwf.org.uk/my_en/report — anonymous, takes minutes

And the single most important thing: you are legally required to report it. Under section 19 of the Sexual Offences Against Children Act 2017, failing to report a sexual offence against a child — or knowledge of an intention to commit one — is itself an offence, carrying a fine of up to RM5,000. Not reporting is not a neutral choice.

Most people who land on this page aren't lawyers or students. They're a parent whose child said something at bedtime that didn't sound right. A teacher who's noticed a pattern. An aunt who saw messages on a phone. Sometimes a teenager checking whether what happened to them "counts".

So this article is organised around what to actually do, with the law explained as context — not the other way around.

Why this law exists at all

Worth knowing, because it explains why so much has changed so fast.

In November 2016, Reuters reported that most complaints of child sexual abuse in Malaysia did not lead to successful prosecutions — and that this was largely down to weaknesses in the criminal justice system, according to police, lawmakers and child welfare groups themselves. Malaysia had the Penal Code, but no law built for grooming, or for what happens online.

That reporting, alongside the Richard Huckle case and R.AGE's undercover "Predator In My Phone" investigation, pushed Parliament to act. The Sexual Offences Against Children Act 2017 was tabled and passed with support from both sides of the political divide — genuinely rare.

Since then the law has been amended repeatedly: 2023 added live-streaming and sextortion offences, and June 2026 extended it beyond Malaysia's borders. Malaysia went from having no dedicated law to having one that's been rewritten three times in nine years.

The honest question in 2026 isn't whether the law exists. It's whether the conviction problem Reuters described in 2016 actually got fixed. We come back to that at the end.

1. What to do in the first hour

If the child is in immediate danger: call 999.

If they've just disclosed something to you:

Stay calm on the outside. Your reaction is what they'll remember and what determines whether they keep talking. Panic, rage or crying makes children retract to protect the adult.

Believe them and say so. "Thank you for telling me. I believe you. This is not your fault." Children very rarely fabricate this.

Do not interrogate. This is the most important and least intuitive thing on this page. Do not ask leading questions, do not push for details, do not ask them to repeat the story to different family members. Ask open questions only if needed — "can you tell me what happened?" — and then stop.

Two reasons. Repeated questioning by untrained adults can genuinely contaminate a child's account and damage the case later. And every retelling re-traumatises them.

Write down what they said, in their words, as soon as you can. Date, time, exact phrasing. This becomes evidence and your memory will blur.

Do not confront the suspect. It warns them, gives them time to destroy evidence or pressure the child, and can escalate danger — particularly where they live in the same house.

Preserve physical evidence if the abuse was recent. Don't wash the child's clothes or bedding. Don't bathe the child before a medical examination if it happened within the last few days. This is difficult and instinct says otherwise, but forensic evidence degrades fast.

Preserve digital evidence. Screenshot messages, note usernames and platforms. Don't delete anything, even things that are painful to keep.

2. What happens once you report

Knowing the pathway makes it less frightening. This is the standard process:

1. Police report. At the nearest police station or IPD. The child should be accompanied by an adult they trust — parent, guardian, relative, teacher.

2. D11 takes over. An investigating officer from the Sexual, Women and Child Investigations Division (D11) is assigned. This is a specialist unit; the officers deal with these cases specifically.

3. Medical examination at the OSCC. The child is taken to the emergency department of a government hospital and examined in the One Stop Crisis Centre — a private room, with the IO present. The hospital's SCAN team (Suspected Child Abuse and Neglect) conducts the examination. Treatment for any injuries is given, and specimens are collected and handed to police.

4. Admission and referral. After the OSCC examination, the child is typically admitted to a paediatric or gynaecological ward. The ward doctor refers the child to a medical social worker and a child psychiatrist for counselling, and to the Social Welfare Department and NGOs for ongoing support.

5. Investigation. The IO takes statements from everyone involved including the suspect, visits the location, collects evidence. The suspect can be held in remand during this.

6. Prosecution decision. The IO submits the investigation to the State Prosecution Office, which decides whether to charge.

If the child needs urgent help and you're not ready for the police station, you can go straight to a government hospital with an OSCC or SCAN team, or call Talian Kasih. They will guide you into the process.

3. The law has changed a lot — here's what it covers now

If you read about this topic before 2023, your picture is out of date. The Sexual Offences Against Children (Amendment) Act 2023 took effect on 11 July 2023 and made significant changes.

"Child pornography" is now "child sexual abuse material" (CSAM) throughout the Act. Not merely cosmetic — the old term was narrow, and CSAM aligns with the international definition and covers more.

Section 15A — sexual performance by a child (live-streaming). This closed a real gap. It covers offering or procuring a child for a sexual performance, causing a child to engage in one, and taking part as a participant or a viewer. Simply joining or watching such a live-stream is enough to be a crime. Organisers, hosts, middlemen and syndicate members are all caught. Punishment: up to 20 years' imprisonment and a fine up to RM50,000.

Section 15B — sexual extortion (sextortion). Previously prosecuted under general provisions; now a stand-alone offence with a clear definition. It covers threatening a child to make them engage in sexual activity, or threatening them to obtain images of their body.

This is the offence parents most need to understand, because it's exploding. Reported cases went from 30 in 2022 to 191 in 2023. The typical pattern: a teenager is befriended online, persuaded to send one image, and then threatened with exposure to their family and school unless they send more, or pay.

Mandatory compensation for victims was introduced, and the Evidence of Child Witness Act 2007 was amended to raise the age of a child witness from 16 to 18, provide for special hearings, and prohibit improper questioning of child witnesses.

Online Safety Act 2025 (Act 866) now places responsibility on digital platforms to remove child sexual abuse content.

June 2026 — the overseas gap closed. On 30 June 2026 the Dewan Rakyat passed the Sexual Offences Against Children (Amendment) Bill 2026, debated by 25 MPs from both sides. Previously the Act reached offences committed abroad only by Malaysian citizens. It now also covers permanent residents and people habitually resident in Malaysia, and covers offences against children who are Malaysian citizens, PRs or habitually resident here.

Deputy Minister M. Kulasegaran framed it plainly: offenders with ties to Malaysia shouldn't be able to use national borders as a shield. He was also careful to note what it doesn't do — Malaysia won't automatically take over every foreign case, since the country where the offence happened retains primary jurisdiction, with cooperation through international channels where reports are filed in both places.

Notably, "permanent resident" was deliberately left undefined, to preserve flexibility. Factors like length of stay, centre of family life, education, employment and integration with Malaysia are what determine it case by case.

The older core offences remain: making, distributing and possessing CSAM; grooming; physical and non-physical sexual assault; and an aggravated penalty where the offender was in a position of trust — a teacher, doctor, relative, guardian — which adds to whatever sentence applies to the underlying offence. That provision has teeth: in one Sessions Court case, a teacher was sentenced to 12 years' imprisonment and two strokes for sexually assaulting a 15-year-old student at his school.

4. What grooming actually looks like from the outside

Parents ask what to watch for. The useful version isn't a list of what predators say — it's the pattern you can observe.

Secrecy that's framed as special. A relationship with an adult or older teen that the child has been told to keep private. "Our secret", "your parents wouldn't understand", "you'd get me in trouble."

Gifts, money, phone credit, or a phone you didn't know about, from someone outside the family.

Isolation. The child spending increasing time with one adult, or being pulled away from friends and family activities.

Access without supervision. An adult who repeatedly creates reasons to be alone with the child — extra tuition, lifts home, sleepovers, special projects.

Online: a new contact who moves the conversation to a private platform quickly, asks for photos, or knows a lot about the child's life while sharing little verifiable about their own.

Changes in the child: withdrawal, sudden secrecy about a device, reluctance to be around a specific person, regression, sleep problems, unexplained distress after contact with someone.

None of these individually proves anything. The pattern is what matters — and you don't need proof to report a concern. That's the point of Talian Kasih: you can call and describe what worries you.

The uncomfortable statistic: most children are abused by someone they know and trust, not a stranger. Malaysian law explicitly recognises this with the position-of-trust provision. This is why "he's family" or "he's a respected teacher" is not a reason to dismiss a child's disclosure — it's a reason the law takes it more seriously.

And a real case that shows what not to do. In January 2025, D11 investigated a Subang Jaya case where a 15-year-old had told her mother about abuse by her stepfather in 2021. He promised not to do it again, and the mother did not file a report. He did it again. Only then was a report made.

The promise is never worth it. Report the first time.

5. If you're a teenager reading this

Some things you might need to hear directly:

If someone is threatening to share your photos unless you send more — that is a crime being committed against you, and you are the victim. Section 15B exists exactly for this. You are not in trouble.

Stop responding. Don't send more. Don't pay. It never ends after the first payment.

Screenshot everything — the messages, the account name, the platform — before blocking.

Tell an adult. A parent, a teacher, a counsellor, an older sibling. If you genuinely cannot tell anyone you know, call Talian Kasih 15999 or WhatsApp 019-261 5999. It's free and confidential.

The threat feels like the end of the world. It isn't. These cases are common enough that police have a specialist unit for them, and the person doing this to you is committing an offence carrying serious prison time.

6. What if you're not sure?

Report anyway.

You are not required to be certain, to have proof, or to have investigated. Section 19 requires reporting where you have information about a sexual offence against a child or an intention to commit one. The RM5,000 penalty exists because Malaysia's historical problem has been silence — neighbours, relatives and colleagues who suspected and said nothing.

BHEUU has been running awareness campaigns specifically about section 19, because most Malaysians still don't know the duty exists.

If you're wrong, a trained officer or social worker assesses and closes it. If you're right and you stayed quiet, the abuse continues.

7. So did it work?

Back to the question from 2016: complaints weren't turning into prosecutions. Has that changed?

Partly, and the honest picture is mixed.

The early years were bad. UNICEF, citing the Disrupting Harm study, noted that in the three years after SOACA came into force, few reported online child sexual exploitation cases ended in prosecution. Arrests rose from 5 in 2017 to 13 in 2019, but prosecutions stayed at four in each of those three years, with two convictions in 2018 and one in 2019.

More recently the investigation side looks considerably better. D11's ACP Siti Kamsiah has said that around 70% of sexual crime cases involving children are prosecuted, with the remainder either still under investigation or unable to proceed because of insufficient evidence or difficulty obtaining it.

Two honest caveats on that figure. It measures prosecutions, not convictions — Siti Kamsiah noted conviction data sits with the courts, not the police. And the reasons cases fail are revealing: victims who don't want to testify, incomplete evidence, and the plain difficulty of a young child being able to describe what happened.

That last point is why the procedural reforms matter as much as the new offences. Raising the child witness age to 18, allowing screens and video links and recorded evidence, permitting videotaped statements in special hearings, prohibiting improper questioning — these exist because the evidence problem, not the law's wording, is what has historically sunk these cases.

What this means for you as a parent or witness: the parts of the process you influence are exactly the parts that decide outcomes. Reporting early. Not interrogating the child. Preserving evidence. Supporting a child through testimony rather than persuading them to drop it. The law is now reasonably well built. Whether a specific case succeeds still turns heavily on what happens in the first few days.

What to actually do

• Immediate danger: 999.
• Suspected abuse or you need guidance: Talian Kasih 15999, 24 hours, free, WhatsApp 019-261 5999.
• To report formally: nearest police station or IPD, with a trusted adult accompanying the child. D11 will take the case.
• Medical need: government hospital with an OSCC/SCAN team.
• CSAM found online: report anonymously at the IWF Malaysia portal, report.iwf.org.uk/my_en/report.
• Do not interrogate the child, confront the suspect, wash clothes or bedding, or delete digital evidence.
• Write down what the child said in their own words, with the date and time.
• Get the child counselling support — the hospital pathway includes referral, and NGOs below provide it.

Support organisations:

• Protect and Save the Children (P.S. the Children) — 03-7957 4344 / 03-7956 4355
• Women's Aid Organisation (WAO) — 03-3000 8858, or SMS/WhatsApp TINA 018-988 8058 (24/7)
• All Women's Action Society (AWAM) — 016-237 4221 / 016-228 4221