A ten-minute routine, using public Malaysian registers, to confirm that a cosmetics, supplement or medical-device factory is who it says it is — before you pay a deposit.
Disclosure: This article is published by ORIZI Group and may refer to our own manufacturing experience, services and capabilities. External factual claims are supported by cited sources.
Key takeaways
- Legitimacy is a match, not a badge: the company name, factory address and certificate details should agree across SSM, NPRA, JAKIM and the certification body.
- NPRA’s QUEST3+ product search shows which factory actually manufactures notified cosmetics — the single most useful public check for a cosmetic OEM.
- Search the distinctive word in a name, not the full legal name, and search every relevant category.
- The US FDA does not issue certificates for cosmetic or food facility registration, and a registration number does not mean FDA approval.
- “No record found” means no record under that name on that date — a reason to ask questions, not proof of wrongdoing.
What does “legitimate” mean for an OEM manufacturer?
A legitimate OEM manufacturer in Malaysia is a registered company that is licensed or listed by the regulator for its product category, actually manufactures the products it claims, and holds certificates that match the public record. This checklist covers cosmetics, supplements and functional food, and medical devices, using registers that were live and public in October 2026.
Before you start, ask the factory for its exact legal name, SSM registration number, plant address and copies of the certificates it advertises. A supplier that will not share these has already answered your question.
The 10-minute checklist
| Minutes | Check | Public register | A pass looks like | Ask questions if |
|---|---|---|---|---|
| 0–2 | The company exists | SSM e-Search / SSM e-Info | Name and registration number match the quotation and invoice | The contracting company differs from the certificate holder |
| 2–4 | It makes cosmetics it claims | NPRA QUEST3+ product search | Active notifications list the factory in the Manufacturer column | It appears only as a Holder, never as Manufacturer |
| 4–5 | It is GMP-listed or licensed | NPRA cosmetic manufacturer list; QUEST3+ licence search | Company and plant listed | Not listed in either |
| 5–7 | Its halal claim is real | JAKIM Halal Malaysia directory | A record in the right category, at the same address | No record under any spelling or category |
| 7–8 | Medical devices only | MDA licensed establishment and device register | Licence type “Manufacturer” | Only a distributor or importer licence |
| 8–10 | ISO and foreign registrations | IAF CertSearch; Standards Malaysia directory; certification body | Certificate found, body accredited, scope and site match | Body not accredited, or scope covers another site |
How do I check a company on SSM?
SSM, the Companies Commission of Malaysia, registers companies and businesses. Check the registration number on SSM e-Search, then buy a company profile from SSM e-Info, the official information portal, for status, registered address, nature of business and directors; a non-certified profile was listed at RM15.40 in October 2026. Check that the nature of business includes manufacturing, not only trading.
How do I check a factory on NPRA QUEST3+?
QUEST3+ is the National Pharmaceutical Regulatory Agency’s public product search, and it is the most direct way to see what a cosmetic factory really makes, because each notification names both the holder and the manufacturer.
- Open the QUEST3+ product search and choose the Cosmetic category.
- Set “Search By” to Manufacturer Name.
- Type the distinctive word in the company name (at least five characters), not the full legal name with “Sdn. Bhd.”.
- Read the columns: notification number, product name, Holder and Manufacturer. Discard rows for other companies the search caught.
- Read the filing year from the notification number: NOT25 means 2025, NOT26 means 2026.
A Cosmetic Notification Holder (CNH) is the locally incorporated company responsible for placing a cosmetic on the Malaysian market; it may or may not be the brand owner. Only active notifications appear, so the count is today’s book. A supplier that appears only as a holder may be a brand owner or trader rather than the plant. Also scan NPRA’s cancelled cosmetic notifications.
For registered products with a MAL number, including health supplements, choose the Pharmaceutical category instead. The QUEST3+ licence search lists companies holding a manufacturer’s, importer’s or wholesaler’s licence for the current year.
How do I confirm cosmetic GMP?
NPRA publishes a list of cosmetic manufacturers in the QUEST system that comply with the ASEAN Guidelines for Cosmetic Good Manufacturing Practice. The list held about 300 entries at its 10 September 2026 update, and it covers manufacturers that make cosmetics only — licensed pharmaceutical manufacturers with a cosmetic facility are excluded, so check those through the licence search. Our explainer on NPRA GMP versus ISO 22716 covers how the two relate.
How do I check a halal certificate with JAKIM?
JAKIM’s Halal Malaysia directory is the official register of Malaysian halal certification. Search it in this order:
- Search the company’s distinctive word, not its full name.
- Repeat in each relevant category: Kosmetik dan Dandanan Diri (cosmetics), Pengilangan Kontrak / OEM (contract manufacturing), Produk Makanan / Minuman (food and drink) and Peranti Perubatan (medical devices).
- Open the record and compare the certified address with the factory you will use.
- Check that your product line is covered: a halal certificate belongs to named products at a named plant, not to a company as a whole.
A contract manufacturer often appears under OEM rather than cosmetics, and a brand’s certificate may be held by its manufacturer under a different name. For imported products, JAKIM publishes a list of recognised foreign halal certification bodies. Our guide to halal cosmetics certification explains what the certificate covers.
How do I check a medical device manufacturer with MDA?
The Medical Device Authority (MDA) runs public searches for licensed establishments and registered medical devices under the Medical Device Act 2012 (Act 737). Search the establishment name and read the licence type: manufacturer, importer, distributor or authorised representative are different roles. A short brand word can return several unrelated companies with similar names, so match the full legal name. Our guide on registering a medical device with MDA explains how device registration differs from an establishment licence.
How do I verify ISO certificates and FDA registration?
For ISO 22716, ISO 22000, ISO 13485 or HACCP, search the company on IAF CertSearch, then confirm the certification body is accredited in the Standards Malaysia directory. The certificate’s scope should name your products and site. Not every certification body publishes to IAF CertSearch, so if nothing appears, email the issuing body with the certificate number; do the same for Ministry of Health food-safety certificates such as GMP, HACCP or MeSTI.
US FDA registration needs special care. FDA states that it does not provide certificates or other documents to verify cosmetic product facility registration, and that a registration or listing number does not indicate FDA approval of the facility or its products. For food facilities, FDA says it does not issue certificates of registration and does not recognise certificates issued by private businesses. Treat an “FDA certificate” as a private document and ask for the registration confirmation itself.
What do the results actually prove?
| Register | A match proves | A match does not prove |
|---|---|---|
| SSM | The company exists and its registered details | That it manufactures anything |
| NPRA QUEST3+ | Active cosmetic notifications name it as manufacturer | Product quality or claims |
| NPRA manufacturer list | Listed as compliant with cosmetic GMP | That every product is notified |
| JAKIM directory | Halal certification at a named address | That your specific product is halal |
| MDA register | A licence for a stated role, or a registered device | That it can make your device class |
| IAF CertSearch | An accredited certificate and its scope | Regulatory approval of products |
ORIZI perspective: we ran the checklist on ourselves
For example, a QUEST3+ manufacturer search for “DR ORIZI” in the cosmetic category lists the active notifications naming Dr Orizi (M) Sdn. Bhd. as manufacturer; counts change every week, so note the date of any search you rely on. Dr Orizi appears on NPRA’s cosmetic manufacturer list, and a JAKIM directory search for “ORIZI” returned one record in both the cosmetics and OEM categories. In MDA’s licensed establishment list (snapshot 3 October 2026), Imedify Medical Solution Sdn. Bhd. and Skyler Medical Manufacturing Sdn. Bhd. are listed as manufacturers.
Because ORIZI Group is an umbrella brand, every credential belongs to an operating company, and our certifications page names the holder company and start year for each one, with a link to the register where it can be checked. The limit is the same as for any factory: these registers prove status, not the quality of your future batch. That still needs samples, documents and, ideally, a site visit — the reason large brands audit suppliers, not just prices.
Risks, limitations and common mistakes
- Searching the full legal name. Registers match substrings and spell names differently; search the distinctive word and try variants.
- Checking one JAKIM category. A factory can show no record under cosmetics and still hold an OEM certificate.
- Confusing holder and manufacturer. A company on many notifications as holder may not own a plant.
- Trusting an image of a certificate. Confirm the certificate in the register or with the issuing body.
- Reading “no record” as fraud. Note what you searched and when, then ask the supplier; names vary and records change weekly.
FAQ
How do I find out who manufactures a cosmetic or makeup product in Malaysia?
Search the product name in NPRA’s QUEST3+ product search under the Cosmetic category. Each active notification lists the holder and the manufacturer, so the Manufacturer column shows which factory makes it.
How do you know if a supplement is legit in Malaysia?
If it carries a MAL number, search that number in QUEST3+ under the Pharmaceutical category to confirm it is a registered product. A food-category supplement has no MAL number, so check its manufacturer’s food-safety certificates and, for halal claims, the JAKIM directory.
Is an FDA registration certificate proof that a factory is approved?
No. FDA does not issue certificates for cosmetic facility registration or food facility registration, and a registration number does not indicate FDA approval. Documents titled “FDA certificate” come from private businesses.
How can I check if a halal certificate is genuine?
Search the company in JAKIM’s Halal Malaysia directory across the cosmetics, OEM, food and medical-device categories, then compare the certified address and products with the certificate. For imported products, check that the issuer is on JAKIM’s list of recognised foreign bodies.
How much does an SSM company check cost?
A non-certified company profile from SSM e-Info, the Companies Commission of Malaysia’s official information portal, was listed at RM15.40 in October 2026. It shows status, registered address, nature of business and directors.
Sources & references
- NPRA — QUEST3+ product search — holder and manufacturer of notified cosmetics; registered (MAL) products
- NPRA — QUEST3+ licence search — manufacturer, importer and wholesaler licences for the current year
- NPRA — List of cosmetic manufacturers in the QUEST system — GMP-compliant cosmetic manufacturers (updated 10 September 2026)
- NPRA — Cancellation of notified cosmetic products — cancelled notifications
- NPRA — Guidelines for Control of Cosmetic Products in Malaysia — definition of the Cosmetic Notification Holder
- JAKIM — Halal Malaysia directory — certified companies by category
- JAKIM — Recognised foreign halal certification bodies (effective 21 August 2026) — foreign halal certificates accepted in Malaysia
- SSM — e-Search — registration number check
- SSM e-Info — official company profiles and price list
- MDA — Licensed establishment search — licence holders and roles under Act 737
- MDA — Registered medical device search — registered devices
- IAF CertSearch — accredited management-system certificates
- Standards Malaysia — Accredited organisations directory — accredited certification bodies
- US FDA — Registration and listing of cosmetic product facilities and products — no certificates; registration is not approval
- US FDA — Food facility registration fees and private businesses — no FDA registration certificates
Update history: October 2026 — first published.
Checking us as a supplier? Start with the holder companies and register links on our certifications page, or ask us for the documents you need for your due diligence.
