There is a string of letters and digits on the back of almost every skincare product legally sold in Malaysia, and most people have never looked at it. It starts with NOT, runs to about a dozen characters, and it is the single fastest way to find out whether the thing in your hand is a registered cosmetic or something that turned up on an Instagram store with a very good filter.
This is not a review of brands. It is a pre-purchase checklist — the six things worth doing before you pay, in the order that they actually save you money.
1. Find the NOT number, then look it up
Cosmetics in Malaysia are not "approved" the way a medicine is. They are notified. The company files a notification with the National Pharmaceutical Regulatory Agency (NPRA) under the Ministry of Health, and NPRA issues a notification number in the format NOT followed by digits and a letter — something like NOT230100123K.
That number belongs to one product from one company. It should be printed on the packaging or the label.
Take it to NPRA's product search on npra.gov.my and type it in. If the product comes back with a matching name and company, it is notified. If nothing comes back, you have learned something important before spending money rather than after.
Two things this check does not tell you: whether the product works, and whether it suits your skin. Notification is a regulatory status, not a performance claim.
2. Cross-check the cancelled list
A notification can be cancelled. NPRA maintains a public list of cosmetic products whose notifications have been withdrawn — frequently because testing found a substance that is not permitted in cosmetics.
This matters because cancellation does not magically remove stock from the market. Product with a printed NOT number can still be circulating on resale platforms, in small shops, and in the boot of somebody's car, long after the notification is gone.
So the honest version of check one is: search the number, then check it against the cancellation list. The Ministry of Health also publishes cancelled cosmetic notifications as an open dataset, which is the same information in a more searchable form.
3. Treat "instant results" as the loudest warning on the label
The products that end up on the cancelled list share a family resemblance. They promise speed — visibly fairer skin in a week, acne gone in days, a "glow" that arrives before the bottle is half empty.
Skin does not work that quickly on its own. When a cosmetic delivers dramatic short-term change, the plausible explanations are a small number of substances that are restricted or banned in cosmetics precisely because of what they do over time.
You do not need to know the chemistry. You need to notice the claim and slow down. A product marketed on speed deserves the NOT-number check twice over.
4. Buy where a returns process exists
The NOT number tells you the product was notified. It does not tell you that the specific unit in front of you is the real thing.
Counterfeits copy packaging, and they copy notification numbers, because a number printed on a box is trivially easy to reproduce. The defence is not forensic — it is commercial. Buy from a pharmacy, an official brand store, or an authorised platform seller with a returns policy and a traceable order record.
If the only proof of purchase you would have is a bank transfer to a personal account, you have no route to a refund and no route to a complaint.
5. Read the label for what is missing, and for what it claims
Malaysian labelling rules require a full ingredient list. A cosmetic sold here should carry one, in descending order of concentration, along with the company's name and address and a batch number.
An ingredient list that is suspiciously short, vague ("herbal extract", "special formula"), or absent entirely is a labelling failure before it is anything else. Same for a missing local company name — someone has to be responsible for that product in Malaysia, and their details belong on the box.
Batch number matters too. It is how a recall reaches you.
Then read the claim itself. There is a line between a cosmetic and a medicine, and it is drawn by what the product claims to do. Moisturising, cleansing, perfuming, changing appearance — cosmetic. Treating, curing or preventing a disease — that is a different regulatory category with a different approval process.
If a skincare product's marketing promises to treat eczema, cure acne, or fix a medical condition, it is making a claim a notified cosmetic is not entitled to make. That is a reason to be sceptical of everything else on the label.
Any actual skin condition is a conversation with a doctor or pharmacist, not a shopping decision.
6. Match the product to the climate you actually live in
The last check has nothing to do with regulators. A great deal of skincare marketing reaching Malaysian shoppers was written for temperate markets — heavy occlusives, rich creams, routines designed for dry winter air.
KL is humid year-round and the UV index runs high most days. Texture and finish matter more here than they do in the copy you are reading, and the sunscreen advice attached to imported routines is frequently written for a different latitude entirely — a gap we unpacked in why sunscreen advice in Malaysia is written for the wrong country.
Humidity also decides how a product ages once it is open. The same conditions that quietly wreck your clothes shorten the life of anything you leave uncapped on a bathroom shelf.
If you would rather start with brands that formulated for this climate in the first place, our roundup of homegrown Malaysian skincare brands is a reasonable place to begin.
Before you pay: find the NOT number, search it on NPRA, check it against the cancelled list, and buy somewhere that would take the product back. That is most of the protection available to a consumer, and it costs two minutes.
Everything after that — texture, ingredients, whether it actually suits you — is personal, and no database can answer it.
FAQ
What is a NOT number on Malaysian skincare?
It is the notification number issued by the National Pharmaceutical Regulatory Agency (NPRA) when a company notifies a cosmetic product for sale in Malaysia. It appears as NOT followed by digits and a letter, and it should be printed on the packaging.
How do I check if a cosmetic is registered with NPRA?
Go to npra.gov.my and use the product search under the consumer section. Enter the NOT number or the product name. The QUEST3+ system behind it is the same database NPRA uses to manage cosmetic notifications.
Does a NOT number mean the product is safe?
It means the product was notified and the company declared it complies with the applicable requirements. It is not a guarantee of effectiveness, and it does not mean the unit in your hand is genuine. Notifications can also be cancelled later if testing finds a problem.
Where can I see cancelled cosmetic notifications?
NPRA publishes cancellations of notified cosmetic products on its consumer safety pages, and the Ministry of Health also releases cancelled cosmetic notifications as an open dataset on its data portal.
What should be on a cosmetic label sold in Malaysia?
A full ingredient list, the product name and function, the name and address of the company responsible for placing it on the market, a batch number, and directions for use where relevant. Gaps in that set are worth treating as a warning.
Sources: NPRA — Frequently Asked Questions, NPRA — Cancellation of Notified Cosmetic Products, KKMNOW — Cancelled Cosmetic Product Notifications
