CCTV Lightning & Surge Protection Malaysia 2026
🏠 Renovation🏢 Office Fit-Out🛍 Shop Fit-Out💦 Waterproofing❄ Aircon⚡ Electrical & Plumbing🔨 Carpentry🧹 Deep CleaningGuidesToolsAbout🔍 SearchInstant Quote
CCTV & Security Systems

CCTV Lightning & Surge Protection
Recorders, Cameras & Cable Runs (2026)

Why tropical storms destroy recorders rather than cameras, what surge protection genuinely achieves, and where it stops — including the parts most quotes leave out.

A surge protection module wired and earthed beside a network recorder
Lightning rarely hits your camera. It kills the recorder, by arriving down the mains and along the camera cables at the same time — every outdoor run is a long conductor with one end plugged into the one box you cannot afford to lose. A surge module diverts that energy to earth, and it only works if the earth it is bonded to is sound. Nothing protects absolutely, including a direct strike. Send photos of your recorder and distribution board and ClickBina will quote after a site survey.

Why the recorder is usually the thing that dies

Ask anyone who services camera systems in the Klang Valley what fails after a thunderstorm and the answer is the recorder, or a group of ports on it, far more often than a camera. The reason is structural rather than bad luck. A camera sits at the end of a long cable, outdoors, often high up. The recorder sits at the point where every one of those cables converges and where the mains supply also arrives. It is the junction of every conductor in the system, which makes it the place where energy that entered anywhere ends up.

That geometry explains the classic pattern: four cameras still working, two channels permanently dead, and a recorder that boots but has lost the network ports for those channels. The surge came in on two runs, found the shared electronics, and stopped there. It also explains why replacing the dead camera does not fix the channel — the damage is at the other end of the cable.

The three ways a surge reaches your system

There are only four doors, and a protection scheme that covers one of them and ignores the others is a scheme with a hole in it.

PathHow the energy gets inWhat it usually destroys
The mains supplyA surge on the incoming supply reaches every socket in the building, including the one feeding the recorder’s adaptorThe power adaptor first, then the recorder’s power board
The camera cablesA strike nearby induces a voltage on every long metal run outdoors; the cable delivers it straight to the recorderNetwork ports, the Power-over-Ethernet stage, and the camera at the far end
The earth itselfA strike raises the potential of the ground near it, so two pieces of equipment earthed at different points sit at different voltages for an instantAnything bridging the two — typically the recorder, a switch or a router
The network and internet sideA surge arriving on an incoming line reaches the router and then everything connected to itRouter, switch, and whatever shares that network segment

Get your exact price in minutes

Send us a photo of the job on WhatsApp — we reply with an instant quote.

💬 Get Your Instant Quote
Free quoteFlat price, no hidden chargesExperienced KL & Selangor contractor

The third path is the one people find counter-intuitive and it matters most on larger sites. If the camera at the gatehouse is earthed to a rod out there, and the recorder is earthed to the building’s system fifty metres away, a nearby strike can put those two “earths” at very different potentials for a fraction of a second — and the camera cable running between them becomes the path that equalises them. Nothing was struck. Everything on that path is destroyed anyway.

Direct strike versus induced surge

These are different events with different answers, and conflating them is how protection gets oversold.

A direct strike on the building or on the pole your camera is mounted to delivers energy on a scale that no small module in a distribution board is designed to survive intact. What manages a direct strike is a lightning protection system — air terminals, down conductors and an earth termination network — whose job is to give the current a controlled path to ground instead of letting it choose one through the structure. That is a building-level installation, not a CCTV accessory, and it belongs with an electrical contractor: see lightning and surge arrester installation.

An induced or conducted surge from a strike some distance away is a far more common event and is what surge protection is actually for. No conductor was hit; a fast-changing magnetic field simply induced a voltage on every long metal run in the neighbourhood, and the mains network carried some of it in from further away still. This is the category that kills recorders on a weekly basis in a Malaysian wet season, and it is the category a properly bonded surge module genuinely reduces.

Being honest about the difference is the whole point of this page. Protection reduces the frequency and the severity of the common event. It does not make the uncommon event survivable, and any quotation that implies otherwise should be read again.

What surge damage actually looks like

What you findWhat it usually meansWhat to check next
Two or three channels dead since one storm, the rest fineSurge arrived on those runs and took the recorder’s portsBench-test one of those cameras at the recorder on a short lead
Camera works on a different port, dead on its ownThe port is destroyed, the camera survivedWhether spare ports exist, or a switch is needed
Recorder completely dead, no lightsMains path — adaptor or power stageThe adaptor first; it is the cheapest part and often the only casualty
Recorder boots but no network at allThe network port or the switch it feedsWhether the router and switch also died in the same storm
Camera dead and its port deadEnergy travelled the length of that cableBoth ends, and whether that run is the longest or the most exposed
Intermittent faults starting after a stormPartial damage — components stressed but not destroyedNothing to fix cleanly; expect the full failure later
Everything survived except the routerSurge on the incoming line rather than on the camera runsProtection on the incoming service, not on the cameras

The last row on that table is the cruel one. Partial damage is real: semiconductors that took a hit and kept working tend to fail weeks later for no visible reason, which is why a system that behaves strangely after a storm is often described as haunted rather than damaged.

Telling surge damage from a water fault

Both arrive in the same weather, so they get confused constantly, and the repair is completely different. The distinguishing test is recovery. Water faults recover. A wet connector dries out, and the channel comes back for a few days until the next storm. Surge damage does not recover. A dead channel is dead in the sunshine too, and it stays dead until something is replaced.

Two supporting signs. Water faults are usually one camera at a time, because each joint is independent; surge often takes several channels at once, or takes a camera and the recorder’s port for it together. And water faults get gradually worse over seasons, while surge damage appears in a single step, on a date you can name. Work through the wet-weather diagnosis in why CCTV goes offline when it rains before you assume it was lightning — water is far more common and much cheaper to put right.

What a surge module actually does

A surge protection device is a clamp, not a barrier. In normal conditions it does nothing at all and the circuit runs through it as if it were not there. When the voltage across it rises past its rated threshold, it becomes conductive very quickly and diverts the excess energy away from the equipment and into the earth conductor, holding the voltage that the protected equipment actually sees down to something it can tolerate. When the surge has passed, it goes back to doing nothing.

Three consequences follow from that description, and they are the three things worth understanding before you buy one.

  • It needs somewhere to send the energy. The diverted current has to reach earth through a low-impedance path. A device with a long, thin or corroded earth connection cannot do its job, however good the device is.
  • It has to be close to what it protects. The length of conductor between the module and the equipment carries its own voltage during the event, so a module fitted in the distribution board and a socket ten metres away are not equally protected.
  • It is sacrificial. Each event consumes some of its capacity. A device that has absorbed several surges may be degraded while looking identical, which is why status indication and periodic checking are part of the specification rather than a luxury.

On a camera system the useful places for protection are three: on the mains feeding the recorder, on the incoming network or internet line, and on the camera runs themselves at the recorder end — because that is where the long outdoor conductors meet the expensive box.

What it does not do

This is the section most product pages leave out, so it is worth being blunt.

  • It does not make a direct strike survivable. Nothing in a distribution board is sized for that. Building-level lightning protection is a separate installation with a separate purpose.
  • It does not work without a sound earth. Fitted to a poor earthing system, it is decoration. This is the single commonest reason protection fails to protect.
  • It does not protect the far end. A module at the recorder does nothing for the camera at the other end of the cable, and vice versa.
  • It does not last forever. It degrades with use and it can fail without announcing it, so it needs checking and eventually replacing.
  • It does not stop a power cut. A surge device and a backup supply are different products solving different problems.
  • It does not replace unplugging. For a genuinely severe storm on an unoccupied property, physical isolation is still the strongest measure available to anyone.
  • It offers no guarantee. Well-designed protection substantially reduces losses. It does not eliminate them, and a contractor who promises it will has told you something that is not true.

Earthing and bonding: the part that makes it work

Every claim a surge device makes depends on the earthing behind it, which is why an honest assessment starts at the distribution board rather than at the camera. Two ideas do most of the work.

Earthing is the connection that gives fault and surge current a deliberate low-impedance route to the general mass of earth. Bonding is the connection of metalwork together so that, during an event, the things a person or a piece of equipment can touch simultaneously are held at close to the same potential. The second is what stops the earth-potential-rise path described earlier from finding your camera cable.

Practically, that means an off-building camera position — a gatehouse, a guard post, a pole at the far end of a yard — is a bonding question as much as a camera question, and it should be raised at survey rather than discovered afterwards. The condition of the existing earthing also matters: an ageing installation with a corroded earth connection cannot support any of this, which is one of the practical reasons an electrical wiring safety inspection and, where it is due, a distribution board upgrade come before the protection conversation rather than after it.

Protecting both ends of a camera run

Because a camera cable is a two-ended conductor, protection at one end is half a job. The recorder end is the priority — it is where the value is concentrated and where several runs converge. The camera end matters most where the camera is genuinely exposed: on a pole in an open yard, above the roof line, on a boundary far from the building, or in a separate structure with its own earth.

Three design decisions reduce the exposure before any device is bought, and they cost nothing at the planning stage:

  • Keep runs short and inside the building envelope wherever the camera position allows it. A shorter conductor picks up less.
  • Do not run camera cable alongside a lightning down conductor or bundled with a long mains run over its whole length.
  • Use a fibre link for a genuinely remote structure. A fibre carries no current at all, so it breaks the electrical path between two buildings entirely. It costs more and it is the right answer more often than it is proposed.

Extra low voltage, low voltage, and why it matters here

People assume a camera system is “only 12 volts” and therefore outside anything an electrician needs to touch. The classification is worth getting right, because it is not what most people think and because the surge conversation lives on the mains side.

Malaysian electricity law treats ‘extra low voltage’ and ‘low voltage’ as two different defined terms, and the difference matters on a security-system job. Under regulation 2 of the Electricity Regulations 1994, ‘extra low voltage’ means a voltage normally not exceeding 50 volts alternating current or 120 volts direct current, whether between conductors or between conductor and earth. ‘Low voltage’ means a voltage normally exceeding extra low voltage but not exceeding 1,000 volts alternating current or 1,500 volts direct current between conductors, or 600 volts alternating current or 900 volts direct current between conductor and earth. Note straight away what this does NOT mean: the fact that camera and Power-over-Ethernet wiring sits in the extra low voltage band does not by itself put it outside the Energy Commission’s requirements, and nothing here should be read as saying it does. The voltage bands are definitions, not exemptions. On a typical installation the bands work out like this: the camera side sits in the extra low voltage band — a camera running on 12 V DC, or a Power-over-Ethernet camera fed at a nominal 48 V DC over its data cable — while the 240 V AC supply that feeds the recorder’s power adaptor, the door-access power supply unit or the electromagnetic lock’s PSU is low voltage. Note that ‘low voltage’ in Malaysian law is the ordinary 240 V mains, not the 12 V side; the American trade habit of calling CCTV cabling ‘low voltage work’ means something different and does not describe the Malaysian legal position.

Who is allowed to do the mains and earthing work

Surge protection at the distribution board, a new circuit for the recorder, and anything to do with the earthing of the installation are all mains-side work, and Malaysian electricity law is specific about who may carry it out. Most people have heard of half of it.

Two separate requirements then apply. First, at company level: under regulation 75(1) of the Electricity Regulations 1994, no person shall perform or carry out any electrical work unless he holds a valid Certificate of Registration as an Electrical Contractor issued under those Regulations — that is a registration held by the business, and regulation 76 makes it a condition of registration that the contractor employs, on a full-time basis, the number of Wiremen prescribed for its class. Second, at individual level: under regulation 12, any electrical wiring in an installation which receives a single-phase supply from a licensee or supply authority must be under the immediate supervision of a Wireman with Single Phase Restriction or Three Phase Restriction, who certifies a Supervision and Completion Certificate on completion; where the installation operates at low voltage and receives a three-phase supply, the supervising Wireman must hold a Three Phase Restriction. Under regulation 13 the completed work must then be tested by a Wireman authorised to test an installation, who certifies a Test Certificate. For a security system this is the mains side of the job: running a new circuit or spur to feed a recorder’s power supply or a door-access and electromagnetic-lock power supply unit, adding a socket outlet for the NVR, or doing anything inside the distribution board. That work belongs to an electrical contractor registered with the Energy Commission (Suruhanjaya Tenaga) and to its wireman — not to a general handyman and not to an installer with no Energy Commission credentials at all.

The safe way to read that as a customer is simple: ask who is doing the mains connection and the earthing, and expect the answer to be an Energy Commission-registered electrical contractor rather than the camera crew. That is how we run our own jobs — the mains connection on a ClickBina install is done by an Energy Commission-registered electrical contractor, and the camera work happens around it. This is general information, not advice on your particular installation; a specific question about your building’s earthing needs a professional looking at it.

Isolation, backup power and storm-season habits

Three practical measures sit outside the protection device itself and are worth more than most people expect.

Physical isolation. For a property left empty during the monsoon, unplugging the recorder and the router from the wall removes the mains path completely. It is inelegant and it is the most effective single thing available. It obviously stops you recording, so it is a decision for an empty holiday home rather than for a shop.

Backup power. An uninterruptible supply keeps the recorder running through the brief outages that accompany storms, which prevents the file-system corruption that repeated hard power cuts cause on a recording drive. Many such units include surge filtering, but treat that as a bonus rather than as the protection scheme — the two products have different jobs.

Where the recorder sits. A recorder on the same socket circuit as heavy switching loads sees more disturbance than one on a clean supply, and a recorder in a hot sealed cupboard is a recorder already living at the edge of its ratings. Siting is covered in the wiring guide; adding a proper dedicated socket is on adding power points.

What to do after a storm

  1. Check every channel, not just the app. Open the recorder and look at all channels, in daylight and again after dark.
  2. Confirm it is still recording, not merely displaying. A recorder that shows live images but has stopped writing is a common and expensive surprise.
  3. Play back an hour from during the storm. That confirms the drive as well as the cameras.
  4. Look at the surge device’s status indicator if it has one, and treat a changed indication as a replacement job rather than a maybe.
  5. Check the router and any network switch. They are on the same paths and they fail quietly.
  6. Write down the date. If a component fails oddly six weeks later, that date is the most useful piece of evidence you will have.

What it costs when it does die

We do not publish a price for surge protection work — that is quoted after a survey, and whole-premises protection is priced on the arrester page. What is useful here is the replacement side, so you can weigh the risk. These are retail shelf prices for the hardware alone, not installed rates, and not a figure ClickBina quotes from (market estimate 2026, indicative Klang Valley).

HardwareTypical retail price (2026)Notes
4-channel NVRRM388 – RM449 per unitrecorder only — no hard disk in the box
8-channel NVRRM440 – RM510 per unitthe higher price buys built-in PoE ports
16-channel NVRRM580 – RM1,600 per unitPoE ports and the faster chipset drive this band
32-channel NVRRM1,550 per unitrecorder only — no hard disk in the box

Those come from one Malaysian retailer’s published list, so read them as an order of magnitude rather than as a market. Add the labour to swap and reconfigure a recorder, plus whatever cameras went with it, plus the fact that the footage on the old drive may or may not be recoverable. One Klang Valley maintenance provider publishes a call-out at RM150 – RM250 per visit with parts charged on top (market estimate 2026, indicative Klang Valley). Set that total against the cost of protecting the mains and the camera runs once, and the arithmetic usually makes itself. The full system picture is on the CCTV installation cost guide.

What to ask an installer about surge protection

  1. Which of the three paths — mains, camera runs, incoming network line — are you protecting, and which are you leaving open?
  2. What is the earth connection for each device, and how long is it?
  3. Have you looked at the existing earthing, or are you assuming it is sound?
  4. Is anything protected at the camera end, and if not, which cameras are exposed enough to need it?
  5. Who does the mains-side work and the earthing, and what are their Energy Commission credentials?
  6. How do I tell that a surge device has been used up, and who checks it?
  7. What is explicitly excluded — and is a direct strike excluded?
  8. If a camera and a recorder port both die in the same storm, what does the warranty actually cover?

Question seven separates a careful contractor from a confident one. Anyone who will not put the words “a direct strike is not covered by this” in writing is selling certainty that does not exist.

Why ClickBina

ClickBina installs and repairs camera systems across Kuala Lumpur and Selangor, and we see the post-storm calls every wet season. We start where the damage starts — the mains supply, the earthing at the distribution board, and the exposed camera runs — and we say plainly what protection will and will not do, because a customer who was promised immunity and then lost a recorder is nobody’s idea of a good outcome. The mains and earthing side of the work is done by an Energy Commission-registered electrical contractor; see our electrical and plumbing services. We publish no package price for security work: send photos of the recorder, the distribution board and the camera positions and we will quote after a site survey.

Common Questions

Why does lightning kill the CCTV recorder and not the cameras?
Because of where the recorder sits. Every camera cable is a long conductor running outdoors, and all of them converge on the recorder, which is also plugged into the mains. Energy that entered anywhere in the system arrives there. The usual pattern is several channels permanently dead while the cameras themselves still work — and replacing those cameras changes nothing, because the damage is at the other end of the cable.
Does a surge protector stop lightning damage to CCTV?
It substantially reduces the common case — an induced or conducted surge from a strike some distance away — and it does nothing useful against a direct strike, which is on a different scale entirely and needs building-level lightning protection. It also depends completely on the earth it is bonded to: fitted to a poor earthing system it is decoration. No protection is absolute, and any quote implying otherwise should be read again.
How can I tell surge damage from a water fault in my CCTV?
By whether it recovers. A water fault dries out and the channel comes back for a few days until the next storm; surge damage is just as dead in the sunshine and stays dead until something is replaced. Water faults also tend to be one camera at a time and get gradually worse over seasons, while surge often takes several channels at once and appears in a single step on a date you can name.
Do I need surge protection at the camera as well as the recorder?
The recorder end is the priority, because that is where the value is concentrated and where several runs converge. The camera end matters where the camera is genuinely exposed — on a pole in an open yard, above the roof line, or in a separate structure with its own earth. A module at one end does nothing for the equipment at the other, so exposure is what should decide it, not symmetry.
Is CCTV cabling low voltage, and does that mean an electrician is not needed?
Not in the way people expect. Under regulation 2 of the Electricity Regulations 1994, ‘extra low voltage’ means a voltage normally not exceeding 50 volts alternating current or 120 volts direct current, whether between conductors or between conductor and earth. The voltage bands are definitions, not exemptions. Note that ‘low voltage’ in Malaysian law is the ordinary 240 V mains, not the 12 V side; the American trade habit of calling CCTV cabling ‘low voltage work’ means something different and does not describe the Malaysian legal position.
Who should install surge protection for a CCTV system?
The mains side of it — protection at the distribution board, a new circuit for the recorder, and anything touching the earthing of the installation — is not camera-crew work. Two separate duties apply, one on the firm and one on the individual doing the wiring, and they are set out with their regulation references in the section above. The practical version for a customer is short: ask who is doing the mains connection and the earthing, and expect an Energy Commission-registered electrical contractor rather than the people mounting the cameras.
Should I unplug my CCTV during a thunderstorm?
For an empty property during a severe storm, physical isolation is genuinely the strongest measure available — unplugging the recorder and the router removes the mains path completely. The obvious cost is that you stop recording while it is unplugged, so it is a decision for a holiday home or a closed premises rather than for a shop or a house you are living in.
What should I check after a thunderstorm?
Open the recorder and look at every channel, in daylight and again after dark. Confirm it is still recording rather than merely displaying, and play back an hour from during the storm to test the drive as well as the cameras. Check the router and any network switch, look at the surge device’s status indicator if it has one, and write the date down — partially damaged components often fail weeks later.

Get a Free Quote

Tell us what you need — we reply within the hour.

WhatsApp ClickBina← All Guides
💬 Get Your Instant Quote