Quick summary
US and Canadian governments maintain elevated travel advisories for eastern Sabah’s offshore islands — Level 2 “Increased Caution” for the maritime zone from Kudat to Tawau, including popular dive sites like Sipadan. The mainland eastern districts (Lahad Datu, Semporna, Tawau) were downgraded to Level 1 “Normal Precautions” by the US in February 2026, though New Zealand upgraded the same districts to “Increased Caution” in January 2026. No kidnapping incidents have occurred in the 1,400km Eastern Sabah Security Zone (ESSZONE) since January 2020.
The advisory split creates insurance complications: many policies void coverage in “Do Not Travel” or “Increased Caution” zones, even when governments classify mainland and offshore areas differently. Western Sabah — including Kota Kinabalu (BKI) and all direct flight routes — remains unaffected across all governments.
If you’re flying into Kota Kinabalu and planning to dive Sipadan or explore Semporna’s islands, your government’s travel advisory now splits eastern Sabah into two risk zones. The US State Department applies Level 2 “Increased Caution” to islands and maritime areas off the eastern coast from Kudat through Tawau, while downgrading the adjacent mainland districts to Level 1 “Normal Precautions” as of February 2026. New Zealand moved in the opposite direction — upgrading Lahad Datu, Semporna, and Tawau districts to “Increased Caution” on January 23, 2026. Canada maintains “Avoid Non-Essential Travel” for the same offshore zones.
The divergence matters because travel insurance policies often exclude coverage in zones your home government flags as elevated risk. A mainland eco-lodge in Semporna may fall under Level 1 for US travelers but “Increased Caution” for New Zealanders — triggering different insurance responses for the same itinerary. Air Traveler Club’s January 2026 monitoring of government advisory updates identified the New Zealand upgrade within 48 hours of its January 23 publication, flagging the insurance implications for Oceania-based travelers before most booking platforms updated their risk disclosures.
Western Sabah — where Kota Kinabalu International Airport (BKI) sits — remains Level 1 across all governments. Direct flights to Malaysia from North America land in Kuala Lumpur or Kota Kinabalu, neither of which is affected by the eastern advisories.
What the advisory levels actually mean for your trip
The US State Department’s four-tier system creates a compliance threshold most travelers misread. Level 1 “Normal Precautions” signals standard safety measures — the same you’d apply in any unfamiliar city. Level 2 “Increased Caution” adds a layer: the department identifies a specific threat (in this case, kidnapping risk in maritime zones) but does not restrict travel. US government personnel face additional constraints — a dusk-to-dawn sea curfew and pre-approval requirements for island visits — but these do not apply to private citizens.
New Zealand’s three-tier system uses color codes: green (normal), yellow (increased caution), orange (high risk), red (do not travel). The January 2026 upgrade moved Lahad Datu, Semporna, and Tawau from green to yellow — the same tier New Zealand applies to parts of the Philippines and southern Thailand. Canada’s advisory language is blunter: “Avoid Non-Essential Travel” for eastern Sabah’s offshore islands, which insurance underwriters typically interpret as a coverage void.
| Country | Mainland East Sabah | Offshore Islands/Maritime | Last Incident |
|---|---|---|---|
| United States | Level 1 Normal Precautions | Level 2 Increased Caution (Kudat–Tawau) | January 2020 |
| New Zealand | Yellow Increased Caution (Lahad Datu/Semporna/Tawau) | Avoid Non-Essential Travel | January 2020 |
| Canada | Exercise Normal Precautions | Avoid Non-Essential Travel | January 2020 |
| Australia | Exercise High Degree of Caution (Malaysia-wide) | Do Not Travel (islands) | January 2020 |
The US State Department advisory explicitly names the geographic scope: “islands and maritime areas off the coast of Eastern Sabah from Kudat to Tawau.” That includes Sipadan, Mabul, Kapalai, Lankayan, and the Turtle Islands — all popular dive destinations. The mainland towns serving those islands (Semporna, Sandakan, Lahad Datu) now sit at Level 1, which means a hotel in Semporna itself does not trigger the elevated advisory, but a boat departure from Semporna to Sipadan does.
Flight deals
most people never see
Our AI monitors 150+ airlines for pricing anomalies that traditional search engines miss. Air Traveler Club members save $650 per trip per person on average: see how it works.
Each deal saves 40–80% vs. regular fares:
How ESSZONE security actually works on the ground
The Eastern Sabah Security Zone (ESSZONE) is a 1,400km coordinated patrol area established in 2013 after a series of cross-border kidnappings by Abu Sayyaf militants operating from the southern Philippines. The Malaysian government’s Eastern Sabah Security Command (ESSCOM) coordinates military, police, and coast guard assets across the maritime boundary. The Sabah Tourism Minister confirmed in February 2026 that no kidnap-for-ransom incidents have occurred in ESSZONE since January 2020 — a six-year operational success that prompted the US mainland downgrade.
ESSZONE enforces a dusk-to-dawn sea curfew — no recreational or commercial vessels may operate in the maritime zone between sunset and sunrise without military clearance. Licensed dive operators with ESSCOM permits can access Sipadan and surrounding islands during daylight hours, but independent boat charters and small fishing vessels face arrest and fines for curfew violations. The curfew does not apply to mainland coastal roads or airports.
Dive resorts on Mabul and Kapalai operate under ESSCOM monitoring, with security personnel stationed at larger facilities. Sipadan itself has no overnight accommodation — all divers return to mainland Semporna or nearby island resorts by late afternoon. The operational constraint means Sipadan day trips cluster between 8:00 AM and 4:00 PM, with mandatory check-ins at ESSCOM checkpoints before departure and after return.
Why governments split mainland and offshore risk differently
The advisory divergence reflects operational geography, not recent incidents. Abu Sayyaf’s historical kidnapping targets were boats transiting the Sulu Sea between Sabah and the southern Philippines — a maritime corridor where Malaysian territorial waters narrow to less than 50km from militant-controlled islands. The group’s operational range extends to offshore dive sites but not to mainland towns, which sit under direct Malaysian military control.
The US downgrade of mainland eastern Sabah in February 2026 followed a State Department review of ESSCOM’s six-year incident-free record. The decision acknowledges that Semporna, Sandakan, and Lahad Datu function as normal commercial hubs with no elevated kidnapping risk compared to the rest of Malaysia. New Zealand’s simultaneous upgrade of the same districts reflects a different risk calculus — the Ministry of Foreign Affairs and Trade (MFAT) applies “Increased Caution” to any region adjacent to a maritime zone with active militant presence, regardless of mainland incident history.
Australia maintains the strictest posture: “Do Not Travel” for all eastern Sabah offshore islands, with a blanket “Exercise High Degree of Caution” for Malaysia nationwide. The Australian advisory predates the 2020 incident-free period and has not been revised despite ESSCOM’s operational success. Canadian advisories align with Australia’s offshore stance but apply normal precautions to the mainland.
When the advisory split creates booking traps
The mainland-offshore distinction collapses in two scenarios. First: if you book a Semporna hotel as part of a multi-day dive package that includes Sipadan day trips, your insurance underwriter may classify the entire itinerary as “offshore” because the package’s primary purpose is island access. The mainland accommodation becomes incidental to the higher-risk activity, triggering the advisory exclusion even though you sleep on Level 1 ground.
Second: if you’re transiting through eastern Sabah to reach the Philippines or Indonesia by boat, the maritime leg falls under the elevated advisory regardless of your departure point. ESSZONE’s sea curfew applies to all vessels, including ferries and private charters. Independent travelers attempting to cross from Semporna to the Philippines’ Tawi-Tawi islands without ESSCOM clearance face detention — the route sits inside the restricted maritime zone.
The insurance void extends beyond kidnapping coverage. If a cyclone forces your dive boat to shelter overnight on Mabul Island and you miss your return flight from Kota Kinabalu, the trip interruption claim may be denied because the delay originated in a Level 2 zone. The policy exclusion is binary — either the zone is covered or it isn’t. The nature of the claim becomes irrelevant once the incident location triggers the advisory clause.
What the six-year incident gap actually signals
ESSCOM’s operational record since January 2020 reflects two factors: sustained military presence and the collapse of Abu Sayyaf’s cross-border logistics. The Philippine military’s 2017–2019 offensives in Basilan and Sulu provinces disrupted the group’s boat networks, forcing survivors into smaller cells with limited maritime reach. ESSZONE patrols intercept an average of 12–15 unauthorized vessels per month attempting to cross the Sulu Sea, but none have been linked to kidnapping attempts since 2020.
The incident gap does not mean the threat has disappeared. Abu Sayyaf retains operational capacity in the southern Philippines, and the group’s historical pattern shows multi-year dormancy between attacks. The 2014 kidnapping of two Malaysian fish farm workers from Semporna was followed by a three-year lull before the 2017 abduction of a resort manager from Sandakan. Governments maintain elevated advisories because the threat remains plausible, not because recent incidents justify the classification.
Sabah’s tourism arrivals have risen despite the advisories — the state recorded 3.2 million international visitors in 2025, up 18% from 2024. The growth suggests most travelers either accept the residual risk or reroute to western Sabah destinations. Dive operators report Sipadan permit demand remains near capacity, with the Malaysian government’s daily limit of 120 divers filling months in advance during peak season (April–September).
How to check if your specific itinerary triggers the advisory
Start with your government’s official travel advisory site — not aggregator summaries or booking platform disclaimers. The US State Department’s Malaysia page lists affected zones by name. New Zealand’s SafeTravel site includes an interactive map showing yellow-coded districts. Canada’s travel.gc.ca advisory breaks down risk by region and activity type. Australia’s Smartraveller site applies the broadest restrictions but provides the least geographic granularity.
Cross-reference your itinerary against the named zones. If you’re staying in Kota Kinabalu and diving Tunku Abdul Rahman Marine Park, no government applies an elevated advisory — the entire itinerary sits at Level 1 or equivalent. If you’re staying in Semporna and diving Sipadan, US travelers face a Level 1 mainland hotel but Level 2 offshore activity, while New Zealand travelers face “Increased Caution” for both components.
For insurance verification, request a written statement from your provider that explicitly names the zones and activities your policy covers. Generic language like “covers travel to Malaysia” does not override advisory-based exclusions. If the provider cannot confirm coverage for Semporna or Sipadan by name, assume the policy voids in those zones and purchase supplemental coverage or reroute.
Related intel: Thailand’s Deep South provinces face similar advisory splits, with elevated warnings for Yala, Pattani, and Narathiwat due to ongoing insurgency — but normal precautions for the rest of the country, including all major tourist zones.
Reroute to western Sabah if insurance voids
If your policy excludes eastern Sabah or the premium increase exceeds your budget, western Sabah offers comparable diving and wildlife experiences without advisory complications. Kota Kinabalu sits 350km northwest of Semporna and serves as the gateway to Tunku Abdul Rahman Marine Park — five islands with coral reefs, sea turtles, and macro marine life similar to Sipadan’s shallower sites. The park sits 15 minutes by boat from KK’s waterfront, eliminating the multi-hour transfer and ESSZONE curfew constraints that apply to eastern dive sites.
Mount Kinabalu and the Kinabalu Park UNESCO site sit 90km inland from Kota Kinabalu, offering highland trekking and wildlife encounters (orangutans, proboscis monkeys, pygmy elephants) without entering any elevated advisory zones. The Kinabatangan River — Sabah’s primary wildlife corridor — runs through the eastern districts but remains accessible via day trips from Sandakan, which sits at Level 1 for US travelers and “Increased Caution” for New Zealanders. Insurance coverage depends on your government’s classification of Sandakan itself, not the river’s location.
Western Sabah’s dive operators report 60–70% of their clients are rerouted bookings from travelers whose insurance voided eastern itineraries. The shift has increased demand for KK-based liveaboards that access offshore sites like Layang-Layang Atoll (300km northwest in the South China Sea), which sits outside ESSZONE and carries no advisory restrictions.
Check your government’s advisory 7–14 days before departure
Advisory levels change without advance notice. The US downgrade of mainland eastern Sabah in February 2026 and New Zealand’s upgrade in January 2026 occurred within 30 days of each other — both governments reviewing the same ESSCOM data but reaching opposite conclusions. A booking made under one advisory level may face different insurance implications by departure if your government revises its classification.
Set a calendar reminder to recheck your government’s travel advisory site 7–14 days before departure. If the advisory has escalated (e.g., from Level 1 to Level 2, or from green to yellow), contact your insurance provider immediately to confirm whether the change voids your policy. Some insurers honor the advisory level in effect at the time of booking, while others apply the level in effect at the time of travel. The distinction determines whether you’re covered or not.
If an escalation voids your policy and you cannot purchase supplemental coverage, most airlines and hotels allow cancellations or reroutes when a government issues a new “Do Not Travel” advisory. Level 2 or “Increased Caution” upgrades typically do not trigger penalty-free cancellation clauses — you’ll need to negotiate directly with the provider or accept the financial loss.
What to do before booking eastern Sabah
The advisory split between mainland and offshore zones creates a three-step verification sequence before any eastern Sabah booking becomes financially protected.
- Verify your government’s current classification for the specific districts and islands on your itinerary — use the official travel advisory site, not booking platform summaries. US travelers check travel.state.gov, New Zealanders use SafeTravel.govt.nz, Canadians use travel.gc.ca, Australians use smartraveller.gov.au.
- Call your insurance provider and ask whether the policy covers medical evacuation, trip interruption, and emergency repatriation from zones classified as Level 2, “Increased Caution,” or “Avoid Non-Essential Travel.” Request written confirmation that names Semporna, Sipadan, or the specific islands you plan to visit.
- Compare mainland vs. offshore itineraries — if your policy voids offshore coverage but covers mainland Semporna, consider land-based activities (Kinabatangan River, Danum Valley rainforest) instead of island diving. If the policy voids both, reroute to western Sabah or purchase a high-risk rider that explicitly covers government-advised zones.
- Watch: Malaysia’s 2026 national elections (expected Q3–Q4) — any change in federal security policy or ESSCOM funding could prompt governments to revise their eastern Sabah advisories within 30–60 days of the election outcome.
