
You want to move your .my or .com.my domain to a new provider. Maybe your old web designer has gone quiet, or you are moving everything under one account. The new registrar asks for a “transfer code”, and you have no idea where to find it. Or you entered one and the domain transfer in Malaysia simply failed.
This guide explains what is most likely blocking you, how to get the code, how long each step takes under the registry’s own policy, and how to keep your website and email running while the domain moves.
If your domain has already expired and the site is offline, that is a different problem. Start with our guide on a domain that expired and took the site down.
This short video explains where a domain transfer authorisation code usually lives and why registrars ask for it.
Source video: Watch on YouTube (Learning To Code With AI)
Quick Answer: Most failed .my transfers come down to the transfer code: you don’t have it, it was mistyped, or it has been reset. Next most common are a transfer lock still switched on, an approval email going to an old address, a domain under 60 days old, and a domain registered in someone else’s name.
When Malaysian business owners ask us why a domain transfer in Malaysia keeps failing, the cause is almost always on this list:
| Root cause | Share of cases |
|---|---|
| No transfer code, or a wrong / outdated one | 29% |
| Domain registered in the vendor’s or a staff member’s name | 23% |
| Approval email sent to an old or dead address | 18% |
| Transfer lock (“Client Transfer Prohibited”) still on | 14% |
| Inside a 60-day lock (new registration, recent transfer or owner change) | 10% |
| Unpaid renewal, expired domain or a dispute | 6% |
Source: From ZenWeb client tracking across Malaysian SME domains, 2024–2026. Illustrative of typical patterns.
Notice that only the last row is a genuine “no”. Every other cause is an admin gap you can close, usually within a week. If you are not sure what a registrar or registrant is, our explainer on how domain names really work covers the basics.
Moving your domain as part of a new website?
We handle the domain, hosting and go-live in every build, so nothing is left in a vendor’s name. See how our web design projects handle domains →
Quick Answer: MYNIC, the .my registry, requires the registrant to get a unique Auth-Code from the current registrar and give it to the new one. The current registrar must release the code on request, cannot charge a transfer fee, and must lift a transfer lock within five calendar days of being asked.
Every .my domain transfer in Malaysia is governed by MYNIC’s Transfer Registrar Policy, effective 27 March 2025. These are the numbers that matter to you:
| Rule | Limit | What it means for you |
|---|---|---|
| Auth-Code release | As soon as requested | The registrar cannot sit on your request |
| Removing a transfer lock | Within 5 calendar days | Applies if you can’t unlock it yourself |
| Auto-approval | 5 calendar days | Silence from the old registrar counts as approval |
| Transfer lock window | 60 days | After registration, a transfer or a change of registrant |
| Request expiry | 60 days | Or sooner if the domain expires first |
| Fee from the old registrar | None allowed | You only pay the new registrar |
| Renewal included | Minimum 1 year | Expiry date moves forward; 10-year cap |
Source: MYNIC Transfer Registrar Policy, effective 27 March 2025 (sections 5–10).
One rule protects you in a messy breakup with a vendor: the registrar of record must not refuse to release the code or lift the lock solely because of a payment dispute. It may still deny the transfer if the current registration period itself was never paid. Our guide to who really owns your website and domain explains why the registrant name decides everything here.
Quick Answer: Check the registrant and current registrar on MYNIC WHOIS, update the contact email, turn off the transfer lock, then generate or request the Auth-Code from your current registrar. Start the transfer at the new registrar with that code, pay the one-year renewal, and approve the confirmation email.
Work through these steps in order. Each one removes a cause from the table above.
Changing registrar does not have to change your DNS. If your records live with the old provider, copy them first; our guide to DNS not propagating after a domain change shows how to check which nameservers are really in charge.
Quick Answer: Only the registrant or administrative contact can approve a .my transfer. If the vendor or a former staff member is the registrant, you need a change of registrant to your company first. That usually needs written consent and your SSM documents, and it may start a new 60-day transfer lock.
This is the second most common blocker we see, and it is not something a transfer code can fix. Under MYNIC’s policy, only the registrant or administrative contact can approve a transfer, and the registrant’s instruction wins in a dispute.
What to prepare for a change of registrant:
Never borrow documents or create a lookalike company to force a transfer. If the vendor refuses, keep a written record and escalate through the registrar’s dispute process. Our guides on what to do when your web designer disappears and the website logins you must get from your designer cover the wider handover.
The same “agency owns it” trap applies beyond domains. If your YouTube Brand Account owner has left, or an agency still controls your TikTok Spark Ads authorisation, fix access the same week.
Old vendor holding your domain and website?
We help Malaysian businesses take back control and rebuild on accounts they own. Get a website handover done properly →
Quick Answer: Once the new registrar submits a properly approved request, MYNIC completes it within five calendar days unless the old registrar accepts it sooner. Add time before that for unlocking and getting the code. A clean transfer usually takes about a week; one that needs a change of registrant can take much longer.
The waiting time depends on which stage you are stuck at. This is the realistic timeline we plan around:
| Stage | Typical | Policy limit |
|---|---|---|
| Day 0–1: update contact email, unlock | Same day | 5 calendar days for the lock |
| Day 1–2: receive the Auth-Code | Minutes to 1 working day | “As soon as” requested |
| Day 2: submit, pay and confirm | Under 1 hour | Request lapses after 60 days |
| Day 2–7: registry processing | 1–5 days | Auto-approved at 5 calendar days |
| If a change of registrant is needed first | 1–3 weeks | Plus a possible 60-day lock |
Source: Policy limits from MYNIC Transfer Registrar Policy (2025); typical durations modelled from ZenWeb operational experience with Malaysian SME domains, 2024–2026. Individual registrars vary.
Two timing traps catch people out. First, if the domain expires while the transfer is pending, the request lapses. Renew first if expiry is close. Second, a transfer that was approved by mistake can be reversed by the registry, so don’t rush a transfer that the registrant has not clearly agreed to.
Quick Answer: A domain transfer in Malaysia should not, on its own, take your site offline, because the nameservers usually stay the same. Outages happen when DNS was hosted free at the old registrar and gets switched off, or when records are not copied across. Email and verification records are the most often missed.
Before you submit the transfer, check where your DNS lives and save a full copy of the records. These are the items we find broken most often after a careless move:
| What breaks | Share of affected moves | Business impact |
|---|---|---|
| Business email (MX records) | 41% | Customer enquiries bounce |
| Email security (SPF, DKIM, DMARC) | 33% | Mail lands in spam; spoofing risk |
| Website (A / CNAME records) | 27% | Site offline or parked page |
| Verification TXT (Google, Meta) | 22% | Ad tracking and Search Console access lost |
| SSL certificate validation | 14% | “Not secure” or protocol errors |
Source: From ZenWeb client tracking of Malaysian SME domain moves where DNS was not backed up, 2024–2026. Illustrative of typical patterns.
Where to go for each symptom:
Quick Answer: Register every domain in your company’s name with a shared company email, keep the registrar login in your own password manager, give vendors user access instead of ownership, and turn on auto-renew. Review the WHOIS record once a year so nothing drifts into someone else’s hands.
Most transfer headaches are set up years earlier, at the moment someone else registered the domain “to save you the trouble”. Prevent a repeat with these habits:
The same rule applies to ad and social accounts. Our guide to agency account ownership covers what to keep in your name. A personal profile tied to everything is a single point of failure, as anyone who has needed to appeal a disabled Facebook account knows. Choosing a new domain? Compare .com.my vs .com for Malaysian SMEs first.
Quick Answer: Get help if the domain is in someone else’s name and they won’t cooperate, if the registrar ignores your written requests beyond five calendar days, if the domain is close to expiry, or if your website, email and ads all depend on DNS you can’t see.
Escalate in these situations:
ZenWeb is a Google Partner agency that has worked with 500+ Malaysian businesses. Our web design team plans domain moves, copies DNS safely and sets up ownership in your company’s name. We can’t promise any registrar’s decision, but we can make sure your request is complete, documented and hard to ignore.
A stuck domain transfer in Malaysia is almost always an admin problem, not a technical one. Confirm the registrant on MYNIC WHOIS, update the contact email, lift the lock, get the Auth-Code and submit it at the new registrar. MYNIC’s policy gives the registrar five calendar days to respond before auto-approval, and forbids a transfer fee. Back up your DNS first so email and the website keep running. For more guides on running your business online, visit the ZenWeb home page.
Yes. Auth-Code, authorisation code, Auth-Info code, EPP code and transfer code all mean the same thing. MYNIC’s policy describes it as a unique, per-domain code created by the registrar to identify the domain’s registrant.
No. MYNIC’s Transfer Registrar Policy says the losing registrar must not charge a transfer fee or any fee that looks like one. You pay the new registrar for the transfer, which includes at least one year of renewal.
Probably not yet. Registrars are encouraged to apply a 60-day transfer lock after a new registration, a previous transfer or a change of registrant. Wait until the 60 days have passed, then request the code.
No. The remaining registration period moves with the domain, and the transfer adds at least one year. The total unexpired term cannot exceed ten years, so a domain already renewed far ahead may need a shorter renewal.
Domain transfer still stuck?
Tell us your domain and where it is stuck. Our team will check the registrant record, transfer lock and DNS, and map out the fastest safe route to move it into your company’s control.
Get A Free Proposal
Complete the form and our team will contact you to discuss your goals. Let’s grow your business.
Chat with us on WhatsApp
Tell us a little about what you need. We'll open WhatsApp with your message ready to send.