A group departure rarely collapses because of one big mistake. It collapses because 12 small items were assumed to be done.
One pak cik has not sent his passport copy. The coach company never reconfirmed. Two families still owe their balance. The rooming list is buried in a WhatsApp chat from three weeks ago. By the time anyone notices, your team is firefighting at 11pm.
The second half of 2026 is when this hurts most. Four departure clusters are stacked into five months, and the real work for each one starts about 30 days before the group flies.

Your departure clusters for the rest of 2026
Count backwards 30 days from each cluster and you will see what your team should already be doing today.
| Departure window | What drives it | Start the 30-day countdown |
|---|---|---|
| Late Aug to mid Sep | Merdeka, the September school break, Malaysia Day on 16 September | Already started |
| Sep to Nov | Umrah season 1448 AH, now fully open after Hajj | This month |
| Around 8 Nov | Deepavali long weekend | Early October |
| 5 to 31 Dec | Year-end school holidays, Christmas, New Year | Early November |
Add inbound work on top of that. Malaysia is running Visit Malaysia 2026 with a target of 47 million international arrivals and RM147.1 billion in tourism receipts. If you handle inbound groups, your busiest quarter and your outbound peak land on the same team.
Three rules that changed the checklist in 2026
Your old checklist from 2023 is no longer enough. Three things moved.
1. Umrah visas now depend on Nusuk bookings. For the 1448 AH season, a pilgrim’s visa cannot be issued until Makkah and Madinah accommodation plus ground transport are confirmed with providers verified on the Nusuk platform. This is the requirement most likely to trip up applications this season. It means supplier confirmation is no longer a 14-day item. It is a 30-day item, because the visa waits behind it.
2. MenACWY is not optional. Every pilgrim aged one and above needs a valid meningitis ACWY vaccination certificate, and it must be at least 10 days before arrival. A 60-year-old customer who books 20 days out has a very tight window. Ask on day one, not on day 20.
3. PDPA has teeth now. Since 1 June 2025, Malaysian businesses must appoint a data protection officer and notify a personal data breach within 72 hours. Your departure file holds passports, IC numbers, and medical notes for 40 people. A staff phone lost at KLIA with a WhatsApp group full of passport scans is now a reportable incident, not just an “alamak” moment.
30 days before: lock the essentials
This is the point to surface risk, not bury it.
| Check | Owner | What to record |
|---|---|---|
| Flights, hotels, coach, guide | Operations | Confirmed, pending, or alternative needed |
| Nusuk accommodation and transport (umrah groups) | Operations | Provider name and confirmation reference |
| Passenger list and passport validity | Sales | Six months validity from return date, or flagged |
| Deposit and balance schedule | Accounts | Received and outstanding |
| Rooming and special requests | Operations | Collected and sent to supplier |
| Visa and vaccination requirements | Operations | Applied, pending, or not started |
If a supplier has not confirmed, that risk needs a name and a deadline. “Nanti saya follow up” is not a plan.
14 days before: chase what customers must provide
This is the window for passport copies, name spelling that matches the passport exactly, emergency contacts, dietary needs, medical conditions, and the final balance.
Send one clear list in one message. Do not drip-feed requests across five separate chats over ten days. A family that knows exactly what to submit will submit it faster.
Track completion as a count. 36 of 40 passports received. 38 of 40 balances settled. 40 of 40 MenACWY certificates. A count tells your team what remains in three seconds.
One more thing on money. If your agency crosses the LHDN e-Invoice threshold, the balance payment you collect at day 14 is a document you must submit to MyInvois, not just a bank-in slip. Businesses with annual turnover under RM1 million remain exempt, so check where your agency sits before peak season, not during it.
7 days before: run the operations check
Reconfirm every supplier. Then issue the customer briefing: departure time and meeting point, baggage allowance, weather, emergency contact, and what to bring.
At the same time, check the internal handover. Whoever is on duty that weekend should be able to find the final passenger list, vouchers, supplier contacts, and special arrangements without calling anybody. School holiday season and staff leave season are the same season.
The day before: exceptions only
Review only what is still broken: unpaid balances, missing documents, supplier changes, contact person changes, and passengers who have gone quiet.
Confirm the tour leader’s phone number and make sure the team knows who can approve an urgent expense at the airport. A RM400 problem should not need three phone calls at 5am.
This is not the moment to scroll through a month of chat history. Your departure record should already hold the current facts.
The Umrah checklist has extra layers
Umrah and Haj groups carry more compliance weight than a Bangkok shopping tour, and the penalties land on the agency, not the customer.
- Nusuk-verified hotels and transport confirmed before the visa is submitted
- MenACWY certificate for every pilgrim aged one and above, 10 days before arrival
- Passport validity and name spelling matched to the visa application
- Mutawwif or group leader assigned, with a named backup
- Medical and mobility notes recorded for elderly pilgrims
- Payment schedule documented, because these groups often pay in instalments over months
The 1448 AH season opened in mid-June 2026 after Hajj rituals concluded and runs until roughly two weeks before Ramadan 2027. That gives you a long runway, which is exactly why agencies get relaxed and then rush.
Stop keeping passports in WhatsApp
Most Malaysian agencies still collect passport scans in group chats. It is fast, and it is now a liability.
Those images sit on every staff phone in the group. They stay there after the trip. They stay there after the staff member resigns. Under the amended PDPA, you are expected to know where customer data lives and be able to report a breach within 72 hours.
The fix is not complicated. Collect documents into one system, tied to the booking, visible only to staff who need it. Then the group chat goes back to being a group chat.
Turn a checklist into a shared routine
Between now and 31 December you may run a dozen departures with overlapping windows. A September umrah group sits at the 7-day check while a December Japan group sits at the 30-day lock. That overlap is what breaks teams, not any single departure.
Peak season becomes manageable when every departure follows the same visible process. Staff see who owns the next action. Accounts see what is outstanding. You see which group needs attention before it becomes a problem.
WauHub keeps booking details, passenger information, payments, supplier bills, and responsibilities connected in one place. Less chasing, fewer 11pm surprises, smoother departures.
Related reading
See how WauHub helps your team prepare every group departure with confidence →
Regulatory details above are summarised from public sources current as at July 2026 and rephrased for licensing compliance. Confirm requirements with LHDN, the Personal Data Protection Department, and your Saudi ground handler before you rely on them.
