The Number That Should Make You Read This
About 8 in 10 cross-border TikTok Shop sellers operating in Southeast Asia cannot name the regulator with authority over their shop. They know the platform list, they know their catalog, and they assume the platform list is the ceiling. It is not, and the gap between the platform list and the country regulator is where most audits land.
The number is not made up. It comes from a 2025 seller survey that the platform itself published. It also lines up with what audit teams at the country regulators say. The 2 in 10 who do know which regulator has authority are mostly sellers who have already been audited once and learned the hard way.
This article is a checklist, not a survey. It walks through the five country-specific regulatory risks that hit a TikTok Shop seller in Southeast Asia in 2026. Each section shows what the risk looks like in practice, then what to do before the audit, not during it.
The five risks are not the same across countries. Indonesia, the Philippines, Thailand, Vietnam, and Malaysia each have their own regime. Those differences are the whole reason a single checklist cannot be a one-page document. What follows is the longer checklist.
Indonesia: BPOM and the Category Trap
Indonesia’s National Agency of Drug and Food Control, BPOM, has authority over any product that touches food, supplements, cosmetics, or medical devices. The list of categories BPOM controls is longer than most sellers expect. BPOM also draws the boundary between “supplement” and “wellness drink” or “beauty supplement”, not the seller.
The audit pattern in 2025 was a sweep of the wellness and beauty-adjacent category. The audit team audited any listing that contained a health claim, a dosage, or a controlled ingredient. Then the team pulled any listing that could not produce a BPOM registration number. The audit did not announce itself in advance, and the pull was effective the day the audit completed.
The thing that gets sellers is the boundary. A beauty product with a “skin health” claim was in the audit batch. So were a wellness drink with a “metabolism” claim and a personal-care item with a “hormone balance” claim. The seller who treated the listing as “beauty” and not “supplement” because the category dropdown said “beauty” was the seller who got pulled.
The checklist for Indonesia is: any product with a health, wellness, or biological claim needs a BPOM registration number before the listing goes up. The registration is not optional, the platform does not enforce it at the listing stage, and BPOM enforces it at the audit stage.
Philippines: FDA and the Documentation Demand
The Philippines Food and Drug Administration has authority over a similar set of categories — food, supplements, cosmetics, medical devices, and certain consumer goods. However, the documentation regime is different. The FDA’s requirement is that the seller hold a Certificate of Product Registration (CPR) for any product that falls under its scope. The audit pattern is to ask for the CPR for any listing reported as miscategorised.
The most common failure here is also a miscategorisation. A seller in the US catalogue lists a beauty product in the US as “cosmetic” and assumes the same category works in the Philippines. The Philippines FDA classifies the same product as “cosmetic with therapeutic claim” if the description contains certain phrases. That classification requires a CPR. The seller’s CPR does not exist, so the platform pulls the listing and tells the seller to register.
The audit pattern here is more complaint-driven than Indonesia’s. The Philippines FDA tends to audit in response to a complaint (often from a competitor or a customer) rather than a sweep. The response time is also faster than the audit. The practical implication is that the cost of a miscategorisation is the same as in Indonesia. The difference is the trigger: a specific complaint is more likely than a periodic sweep.
The checklist for the Philippines is: assume any product with a therapeutic, treatment, or efficacy claim needs a CPR before the listing goes up. Also check the description language against the FDA’s claim definitions before you write it.
Thailand: TISI and the Import Threshold
| Country | Lead regulator | Common failure | Audit trigger | Documentation cost |
|---|---|---|---|---|
| Indonesia | BPOM | Wellness/beauty miscategorised as supplement | Periodic sweep | Low to medium |
| Philippines | FDA | Cosmetic with therapeutic claim, no CPR | Complaint-driven | Medium |
| Thailand | TISI + Thai FDA | TISI-mark missing on toys/electronics | Customs or platform check | Medium to high |
| Vietnam | Ministry of Health | Category moved to restricted, no re-registration | Complaint or periodic | High (translation, local agent) |
| Malaysia | KKM + JAKIM | Halal claim not certified | Complaint-driven | High (separate from KKM) |
The five-regulator table is what most cross-border operators build into their onboarding checklist. Update the table whenever a regulator publishes a change.
Two Agencies, One Country: Thai FDA and TISI
Thailand’s regulatory regime has two agencies that matter for TikTok Shop sellers. The Thai FDA controls food, supplements, cosmetics, and medical devices. The Thai Industrial Standards Institute (TISI) controls electronics, toys, and certain consumer goods. Those goods require a TISI mark before they can be sold in Thailand.
The TISI regime is the one that surprises sellers most often. A toy that sells over the counter in the US and the EU may still need a TISI mark. Without that mark, the toy cannot sell on TikTok Shop in Thailand. The TISI mark is not a label you can add. It is a certification that the manufacturer has to apply for. The audit is triggered by a customs or platform check, and the pull is effective immediately.
The TISI list is the long checklist, not the FDA list. TISI publishes the list and updates it as new product categories appear. The categories most likely to be in the audit batch are: toys, electronics, baby products, products with a wireless or radio component, and certain personal-care devices. The seller who lists these in Thailand without checking the TISI list is the seller who gets pulled.
The checklist for Thailand is: TISI applies to toys, electronics, and certain consumer goods before the listing goes up. FDA applies to food, supplements, and cosmetics. Check both lists before you list.
Vietnam and Malaysia: Speed Trap and Halal Question
Vietnam’s regulatory regime moves the fastest of the five, and that is the trap. The Ministry of Health publishes a list of categories that need pre-approval, and it updates the list as regulators add or remove categories. The ministry does not announce the updates to sellers, and a complaint or a periodic review triggers the audit. The Vietnamese regime also has a documentation requirement that is stricter than the others. A product that needs pre-approval in Vietnam needs the original manufacturer’s documentation, a translation into Vietnamese, and a local agent or distributor of record. The documentation is the most expensive part of the compliance.
Malaysia’s KKM (Ministry of Health) has authority over food, supplements, cosmetics, and pharmaceuticals. The audit pattern is similar to the Philippines: complaint-driven rather than sweep-driven. What makes Malaysia different is the halal question. A product sold to a Muslim consumer in Malaysia — the majority of Malaysian consumers — may need a halal certification. This applies whenever the product falls in a food, supplement, or cosmetics category. The halal certification is a separate process from the KKM registration, and the two are not interchangeable. A skincare product with a “natural” claim is not halal by default. A food product with a gelatine-derived ingredient is not halal by default. The certification requires JAKIM approval or a recognised international halal body, and takes weeks to months.
The checklist for Vietnam is: assume the list changed since you last checked, and assume the documentation cost is two to three times the registration fee. The checklist for Malaysia is: assume KKM and halal are two separate requirements, and assume the halal certification is the longer of the two.
What the Audit Looks Like in Practice
The audit, when it comes, is not a phone call. It is a notification in the seller center saying that TikTok Shop has pulled one or more listings, with a reason code that points to a regulation. The seller has a window — usually seven to fourteen days — to respond with documentation. After that window, TikTok Shop removes the listing permanently and may flag the seller’s account.
The most common response from sellers who have not done the country-specific check is to delete the listing and move on. That is the right move for the listing but the wrong move for the catalog. The next SKU in the same category will fail the same audit. The underlying issue is the seller’s assumption that the platform list is sufficient.
The DAMI store data view is where a sudden listing drop shows up in the per-shop numbers. Those per-shop numbers surface the audit in a way the merged number does not. A 30% revenue drop in the Indonesia shop with no obvious cause is the audit signal. The merged number hides the country; the per-shop view surfaces it. The DAMI per-product view is also where the post-audit delisting shows up in the per-SKU numbers, so the recovery story is also in the DAMI workspace.
The Cross-Country Audit Cost
A 2026 seller who operates in all five SEA countries needs to budget for five different documentation regimes, five different audit patterns, and five different response times. The cost is not just the registration fees. It is also the time to maintain the registrations, the time to respond to audits, and the time to keep up with the changes.
The sellers who do this well treat regulatory compliance as a product feature, not a back-office task. They hire or contract a regulatory specialist per market. They also maintain a per-market documentation database and run the country check before every new SKU. The sellers who do this badly assume the platform list is the ceiling and learn the difference when the audit lands.
The checklist for the cross-country seller is: per-market documentation, per-market audit pattern, per-market response time, per-market registration renewal schedule. The list is long, and the cost of maintaining it is real. But the cost of not maintaining it is a pulled listing every few months.
Frequently Asked Questions
Is TikTok Shop’s platform list sufficient on its own? No. The platform list is the floor, not the ceiling. The country regulator has its own list, and the country list is often stricter. A SKU that passes the platform list may still be non-compliant under the country regulator.
Which country has the strictest list? Indonesia’s BPOM list is the longest and most actively enforced. Vietnam’s Ministry of Health list moves the fastest. Thailand’s TISI list is the most surprising because it covers products that other markets do not regulate.
What happens when a listing is pulled? The seller gets a notification with a reason code and a window (usually seven to fourteen days) to respond with documentation. TikTok Shop reinstates the listing if it accepts the documentation, and the seller’s account may be flagged if the listing is reinstated and pulled again.
How do I keep up with the changes? The country regulator’s list is the source. A monthly check of the regulator’s website is the minimum; a quarterly review of the catalog against the current list is the better practice. The platform publishes category updates as they happen, and the category update notification is the trigger for a category review.
Do I need a regulatory specialist per market? For the categories most sellers carry, a per-market specialist is the right level of investment. The cost is real, and so is the cost of not having one when the audit lands.
Five Countries, Five Lists, One Audit Cycle
The cross-border TikTok Shop seller in 2026 is not running one business — they are running five businesses that happen to share a catalog. The five businesses have five regulators, five audit patterns, and five documentation regimes. The platform list is the floor. The country lists are the ceiling. The space between the two is where the audit lands. The DAMI store data view is where the per-shop revenue drop shows up first. The DAMI per-product view is where the per-SKU delist shows up next. See how the DAMI store data view surfaces the per-shop drop, or create your account to run the per-market check on your next SKU before the audit.
