The administration area requires authentication. Certificate changes and public inquiries are stored on the server; the public certificate page exposes only published registry details.
Safe use
Check that verification links use cert.igca.my over HTTPS. Never send your account password, API secret or payment credentials through a public inquiry. Contact the IGCA team if you notice a suspicious link or incorrect record.
Protecting access and submissions
Public verification and administration serve different purposes. Administrative functions require authentication; application details and visitor messages are handled in the protected management area rather than displayed in public search results. Visitors should use the official HTTPS addresses when submitting information.
Share only what is necessary
An initial inquiry normally requires contact details, the website concerned and a description of the issue. Do not include account passwords, private keys or card details. If supporting documents are requested, confirm the purpose and delivery method with the team before sending them. Suspected misuse of an IGCA page or seal can be reported through the contact form.