← All Regulations

Malaysia

Comprehensive Framework Risk: low Updated 40 days ago Research: Grade A
VASP/CASP Registry: None — no registry data for this jurisdiction

Regulatory Bodies

SC Malaysia

SC Malaysia — Digital asset exchange registration, IEO oversight, cease-and-desist enforcement

BNM

BNM — AML/CFT standards

Primary Legislation

Law / Regulation Year Scope
Capital Markets and Services (Prescription of Securities) Order 2019 2019 Digital currency and digital token as prescribed securities
Guidelines on Digital Assets 2020 DAX operator requirements

Licensing Requirements

30%

SC Malaysia — Digital asset exchange registration, IEO oversight, cease-and-desist enforcement

licensingregulator
Verified Apr 12, 2026 Report Issue

(6 more unverified fact(s) )

AML/KYC Requirements

60%

**Capital Markets and Services Act 2007 (CMSA):** For digital assets that are deemed "securities," the Securities Commission Malaysia (SC) regulates entities like Digital Asset Exchanges (DAX) under this Act and its accompanying guidelines. These entities are also subject to specific AML/CFT requirements imposed by the SC.

amlcapital-markets-and-services-act
View article →
60%

**Guidelines on Recognised Markets (SC Guidelines):** Specifically for operators of recognised markets, including DAX, detailing operational, conduct, and AML/CFT requirements.

amlguidelines-on-recognised-markets-sc
View article →
60%

**Role:** The central bank of Malaysia and the primary regulator for AML/CFT compliance across all reporting institutions, including VASPs, under the AMLATFPUAA 2001. BNM also houses the Financial Intelligence Unit (FIU) responsible for receiving Suspicious Transaction Reports (STRs).

amlrole-the-central-bank-of
View article →
60%

**Role:** Regulates the capital markets in Malaysia. The SC specifically licenses and oversees Digital Asset Exchanges (DAX) and other entities involved in the offering or trading of digital assets that are classified as securities. SC-regulated entities must comply with both SC-specific AML/CFT requirements and the broader BNM framework.

amlrole-regulates-the-capital-markets
View article →
60%

Exchanges between digital currencies and fiat currencies.

amlexchanges-between-digital-currencies-and
View article →
60%

Exchanges between one or more forms of digital currencies.

amlexchanges-between-one-or-more
View article →
60%

Safekeeping and/or administration of digital currencies or instruments enabling control over digital currencies.

amlsafekeeping-andor-administration-of-digital
View article →
60%

Participation in and provision of financial services related to an issuer’s offer and/or sale of a digital currency.

amlparticipation-in-and-provision-of
View article →
60%

Obtain and verify the identity of individual customers (name, address, date of birth, nationality, identification document details, contact information).

amlobtain-and-verify-the-identity
View article →
60%

For legal entities/corporate customers, obtain and verify: legal name, legal form, proof of existence (e.g., certificate of incorporation), address of registered office, names of directors/partners/trustees, details of shareholders and beneficial owners, and constitution/governing documents.

amlfor-legal-entitiescorporate-customers-obtain
View article →
60%

For partnerships and trusts, similar information must be collected for partners, trustees, settlors, and beneficiaries.

amlfor-partnerships-and-trusts-similar
View article →
60%

**Beneficial Ownership:** Identify and verify the ultimate beneficial owner (UBO) for all corporate and legal arrangements. This involves looking through layers of ownership to identify the natural person(s) who ultimately own or control the customer, or on whose behalf a transaction is being conducted.

amlbeneficial-ownership-identify-and-verify
View article →
60%

**Purpose and Intended Nature of Business Relationship:** Understand the rationale behind the customer's request to use the VASP's services and the anticipated level and type of activity.

amlpurpose-and-intended-nature-of
View article →
60%

**Source of Funds/Wealth:** For higher-risk customers or transactions, obtain information on the source of funds or source of wealth.

amlsource-of-fundswealth-for-higher-risk
View article →
60%

**Ongoing Monitoring:** Continuously monitor the business relationship and transactions to ensure consistency with the VASP's knowledge of the customer, their business, risk profile, and source of funds. Update customer information regularly.

amlongoing-monitoring-continuously-monitor-the
View article →
60%

**Non-Face-to-Face (NFF) Customers:** Given the online nature of many VASPs, robust measures for NFF CDD are crucial, including multi-factor authentication, video verification, and cross-referencing with reliable independent sources.

amlnon-face-to-face-nff-customers-given-the
View article →
60%

**Politically Exposed Persons (PEPs):** Implement Enhanced Due Diligence (EDD) measures for PEPs, their family members, and close associates, including obtaining senior management approval to establish or continue the relationship and taking reasonable measures to establish the source of wealth and funds.

amlpolitically-exposed-persons-peps-implement
View article →
60%

**High-Risk Customers:** PEPs, customers from high-risk jurisdictions (e.g., those identified by FATF), customers involved in cash-intensive businesses.

amlhigh-risk-customers-peps-customers-from
View article →
60%

**High-Risk Products/Services:** Products or services that facilitate anonymity (e.g., privacy coins, mixing services).

amlhigh-risk-productsservices-products-or-services
View article →
60%

**High-Risk Delivery Channels:** Non-face-to-face relationships without sufficient mitigating controls.

amlhigh-risk-delivery-channels-non-face-to-face-relationships
View article →
60%

**Large, Complex, or Unusual Transactions:** Transactions that have no apparent economic or lawful purpose.

amllarge-complex-or-unusual-transactions
View article →
60%

**Cross-border Correspondent Relationships:** If applicable, especially with VASPs in high-risk jurisdictions.

amlcross-border-correspondent-relationships-if-applicable
View article →
60%

**Obligation:** All VASPs, as reporting institutions, are legally obliged to report any transaction (including attempted transactions) that they know or have reason to suspect is related to money laundering, terrorism financing, or proceeds of unlawful activities.

amlobligation-all-vasps-as-reporting
View article →
60%

**Recipient:** Reports must be submitted to the Financial Intelligence Unit (FIU) within Bank Negara Malaysia.

amlrecipient-reports-must-be-submitted
View article →
60%

**No Tipping-Off:** VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR has been or will be made.

amlno-tipping-off-vasps-and-their
View article →
60%

**Reporting Thresholds:** While there are no specific monetary thresholds for STRs (suspicion is key), BNM's policy document also outlines Currency Transaction Reports (CTR) for cash transactions exceeding a certain amount. However, for most virtual asset transactions, suspicion drives the reporting.

amlreporting-thresholds-while-there-are
View article →
60%

**Customer Identification Data:** All records obtained during CDD and EDD (identification documents, verification records, beneficial ownership information) must be kept for at least **five (5) years** after the business relationship has ended.

amlcustomer-identification-data-all-records
View article →
60%

**Transaction Records:** Records of all transactions (date, type, amount, parties involved, digital asset addresses, hash IDs) must be kept for at least **five (5) years** from the date of the transaction.

amltransaction-records-records-of-all
View article →
60%

**STRs and Internal Reports:** Records of all STRs filed and any internal suspicious activity reports or investigations.

amlstrs-and-internal-reports-records
View article →
60%

**AML/CFT Policies and Procedures:** Records of all policies, procedures, risk assessments, training materials, and audit reports.

amlamlcft-policies-and-procedures-records
View article →
60%

**Internal Policies and Procedures:** Develop and implement robust internal AML/CFT policies, procedures, and controls commensurate with the VASP's risk profile.

amlinternal-policies-and-procedures-develop
View article →
60%

**Compliance Officer:** Appoint a dedicated Compliance Officer (often referred to as an Money Laundering Reporting Officer - MLRO) responsible for overseeing AML/CFT compliance, receiving internal suspicious activity reports, and submitting STRs to the FIU.

amlcompliance-officer-appoint-a-dedicated
View article →
60%

**Employee Training:** Provide regular and comprehensive AML/CFT training to all relevant employees to ensure they understand their obligations and can identify suspicious activities.

amlemployee-training-provide-regular-and
View article →
60%

**Independent Audit:** Periodically review and audit the effectiveness of the VASP's AML/CFT programs.

amlindependent-audit-periodically-review-and
View article →
60%

**Sanctions Screening:** Implement measures to screen customers and transactions against targeted financial sanctions lists issued by the United Nations Security Council (UNSC) and domestic authorities to prevent terrorism financing and proliferation financing.

amlsanctions-screening-implement-measures-to
View article →
60%

**Violation Type:** Operating a Digital Asset Exchange (DAX) without registration/license, which is a violation under the Capital Markets and Services Act 2007. The SC considers digital assets as securities, and operating a platform for trading them requires authorization.

amlviolation-type-operating-a-digital
View article →
60%

**Penalty Amount:** No explicit monetary fine was announced at the time of the public reprimand. The penalties were operational: a public reprimand, an order to cease all operations in Malaysia, disable access to its website and mobile applications, and cease all media and marketing activities targeting Malaysian investors.

amlpenalty-amount-no-explicit-monetary
View article →
60%

**Outcome:** Binance was forced to shut down its direct operations in Malaysia. Malaysian users were advised to withdraw their funds. The action led Binance to later pursue a compliant pathway to re-enter the Malaysian market by acquiring a stake in and partnering with a licensed local Digital Asset Exchange (DAX), MX Global, demonstrating the effectiveness of the SC's enforcement in driving regulatory compliance.

amloutcome-binance-was-forced-to
View article →
60%

**Entity Targeted:** Various unauthorized digital asset platforms, investment schemes involving crypto, and individuals promoting them. (Specific names are too numerous to list here, but are updated frequently).

amlentity-targeted-various-unauthorized-digital
View article →
60%

**Penalty Amount:** Typically no specific monetary penalty is announced publicly for being added to the alert list. The "penalty" is a public warning, which often leads to the platform being unable to operate effectively in Malaysia and subsequent cessation of operations or blocking of access.

amlpenalty-amount-typically-no-specific
View article →
60%

**Role:** Primarily responsible for the financial system's stability, payment systems, and Anti-Money Laundering/Counter-Terrorism Financing (AML/CFT). BNM designates "virtual asset service providers" (VASPs) as reporting institutions under the AMLATFPUAA, requiring them to report suspicious transactions and adhere to AML/CFT measures. BNM also monitors the broader implications of digital assets on financial stability, monetary policy, and payment systems, including stablecoins and central bank digital currencies (CBDCs).

amlrole-primarily-responsible-for-the
View article →

(9 more unverified fact(s) )

Travel Rule

60%

**Bank Negara Malaysia (BNM) Policy Document on Anti-Money Laundering, Counter-Terrorism Financing and Targeted Financial Sanctions for Financial Institutions (AML/CFT and TFS Policy Document):** This is the primary document.

travel-rulebank-negara-malaysia-bnm-policy
View article →
60%

Specifically, **Paragraph 10.1.2** states: "A reporting institution that conducts virtual asset transfers shall apply the obligations outlined in this policy document relating to funds or wire transfers to virtual assets." This explicitly extends the Travel Rule to virtual assets.

travel-rulespecifically-paragraph-1012-states-a
View article →
60%

**Securities Commission Malaysia (SC) Guidelines on Digital Assets:** These guidelines govern Digital Asset Exchanges (DAX) and other entities dealing with digital assets. They mandate compliance with BNM's AML/CFT framework.

travel-rulesecurities-commission-malaysia-sc-guidelines
View article →
60%

**Section 9 (Anti-Money Laundering and Counter-Terrorism Financing):** Requires registered Digital Asset Exchanges (DAX) to comply with the AMLA and BNM's AML/CFT and TFS Policy Document.

travel-rulesection-9-anti-money-laundering-and
View article →
60%

**Official URL (latest version):** Search for "SC Guidelines on Digital Assets" on www.sc.com.my.

travel-ruleofficial-url-latest-version-search
View article →
60%

**Cross-Border Transfers (both traditional and virtual assets):** All required originator and beneficiary information must be obtained and transmitted, **regardless of the amount**.

travel-rulecross-border-transfers-both-traditional-and
View article →
60%

**Domestic Transfers (both traditional and virtual assets):**

travel-ruledomestic-transfers-both-traditional-and
View article →
60%

For transfers **equal to or exceeding RM3,000 (or equivalent in foreign currency/virtual assets)**: All required originator and beneficiary information must be obtained and transmitted.

travel-rulefor-transfers-equal-to-or
View article →
60%

For transfers **below RM3,000 (or equivalent)**: Reporting institutions are permitted to omit certain information (e.g., originator's address or national identity number, beneficiary's address), provided they can produce this information within 3 working days if requested by authorities.

travel-rulefor-transfers-below-rm3000-or
View article →
60%

**Digital Asset Exchanges (DAX) registered with the Securities Commission Malaysia:** These are explicitly identified as VASPs and reporting institutions under the SC's guidelines and are thus fully covered.

travel-ruledigital-asset-exchanges-dax-registered
View article →
60%

**Other entities providing VASP services** (e.g., crypto custodians, issuers of certain virtual assets, brokers dealing in virtual assets) would be covered if their activities fall within the definitions of "financial institutions" or "reporting institutions" under the AMLA or are otherwise regulated by BNM or SC.

travel-ruleother-entities-providing-vasp-services
View article →
60%

**Information Collection:** VASPs must collect the required originator (sender) and beneficiary (recipient) information, including names, account numbers (or wallet addresses), and physical addresses or national identity numbers/customer identification numbers.

travel-ruleinformation-collection-vasps-must-collect
View article →
60%

**Information Holding:** This information must be securely stored and readily retrievable.

travel-ruleinformation-holding-this-information-must
View article →
60%

**Information Transmission:** The collected information must be transmitted to the beneficiary VASP during or before the virtual asset transfer.

travel-ruleinformation-transmission-the-collected-information
View article →
60%

**Sanctions Screening:** Both originator and beneficiary information must be screened against relevant sanctions lists.

travel-rulesanctions-screening-both-originator-and
View article →
60%

**Record Keeping:** Records of all transactions and the associated Travel Rule data must be maintained for a prescribed period (typically at least 7 years under AMLA).

travel-rulerecord-keeping-records-of-all
View article →
60%

**Risk-Based Approach:** VASPs are expected to adopt a risk-based approach to assess and mitigate ML/TF risks, which includes enhanced due diligence where appropriate.

travel-rulerisk-based-approach-vasps-are-expected
View article →
60%

**Fines:** Significant monetary penalties, which can run into millions of Ringgit for entities.

travel-rulefines-significant-monetary-penalties-which
View article →
60%

**Imprisonment:** Individuals (e.g., directors, compliance officers) found responsible for non-compliance may face imprisonment.

travel-ruleimprisonment-individuals-eg-directors-compliance
View article →
60%

**Revocation or Suspension of Licenses:** For regulated entities like DAXes, their licenses can be revoked or suspended by the SC or BNM.

travel-rulerevocation-or-suspension-of-licenses
View article →
60%

**Reputational Damage:** Significant damage to the VASP's reputation.

travel-rulereputational-damage-significant-damage-to
View article →
60%

**Enforcement Actions:** BNM and SC have the power to issue directives, impose administrative penalties, or take other enforcement actions.

travel-ruleenforcement-actions-bnm-and-sc
View article →

(2 more unverified fact(s) )

Tax Reporting

60%

**Business Income (Taxable):** If an individual or company engages in systematic, repetitive, and organized trading activities with the intention of profit, it will likely be treated as a "business" under Section 4(a) of the ITA 1967.

taxbusiness-income-taxable-if-an
View article →
60%

**Investment Income (Generally Not Taxable for Individuals):** If cryptocurrencies are acquired and held for long-term appreciation with no intention of frequent trading, and they are disposed of infrequently, the gains are generally considered capital gains, which are not taxed in Malaysia for individuals (see Capital Gains Tax section below).

taxinvestment-income-generally-not-taxable
View article →
60%

**Staking/Lending Rewards:** Income received from staking (participating in proof-of-stake networks) or lending cryptocurrencies is generally taxable. The classification (business income vs. other income under Section 4(f) ITA 1967) depends on the scale, frequency, and intent. If it's part of a systematic activity for profit, it's likely business income.

taxstakinglending-rewards-income-received-from
View article →
60%

**Airdrops/Forks:** The tax treatment can be complex. Generally, if an airdrop or hard fork results in the receipt of new tokens that have market value, this could be considered income at the time of receipt, particularly if it's related to existing taxable activities.

taxairdropsforks-the-tax-treatment-can
View article →
60%

**Salaries/Wages Paid in Crypto:** If an employee receives cryptocurrency as part of their employment remuneration, it is considered taxable employment income and must be converted to its Ringgit Malaysia (RM) equivalent at the time of receipt.

taxsalarieswages-paid-in-crypto-if
View article →
60%

**Individuals:** Subject to progressive income tax rates ranging from 0% to 30% (for resident individuals), depending on their total chargeable income. Non-resident individuals are taxed at a flat rate of 30%.

taxindividuals-subject-to-progressive-income
View article →
60%

**For Individuals:** Gains from the disposal of cryptocurrencies, when they are genuinely held as long-term investments and not part of an "adventure in the nature of trade," are generally considered capital gains and are **not subject to income tax**.

taxfor-individuals-gains-from-the
View article →
60%

**For Companies:** While companies are generally subject to corporate income tax on profits, gains from the disposal of movable properties (including crypto) are typically treated as capital gains and are not taxed, *unless* the company's ordinary course of business involves dealing in such assets, in which case it would be treated as revenue income.

taxfor-companies-while-companies-are
View article →
60%

**Real Property Gains Tax (RPGT):** This is a specific tax on gains from the disposal of real property (land and buildings) and shares in real property companies. It is **not applicable** to cryptocurrencies.

taxreal-property-gains-tax-rpgt
View article →
60%

**Sales Tax:** This is a single-stage tax on taxable goods manufactured in Malaysia or imported into Malaysia. **Cryptocurrency is not considered a 'good' for sales tax purposes.** Therefore, sales tax is not applicable to the buying or selling of cryptocurrency itself.

taxsales-tax-this-is-a
View article →
60%
60%

**Related Services:** However, services provided by Digital Asset Exchanges (DAXs) or other businesses related to cryptocurrency (e.g., transaction fees, platform fees, custodial services, advisory services) **may be subject to service tax (6%)** if the service provider is a registered person under the Service Tax Act 2018 and the service falls under a taxable category. For example, financial services are generally exempt, but certain related services might not be.

taxrelated-services-however-services-provided
View article →
60%

If income from cryptocurrency activities is deemed taxable (e.g., as business income or employment income), individuals are required to declare this income in their **Annual Income Tax Return (Form B or Form P)**.

taxif-income-from-cryptocurrency-activities
View article →
60%

**Compliance with Regulatory Bodies:** Businesses operating Digital Asset Exchanges (DAXs) or offering digital assets must comply with reporting requirements set by the Securities Commission Malaysia (SC) and Bank Negara Malaysia (BNM) for Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT). This includes reporting suspicious transactions.

taxcompliance-with-regulatory-bodies-businesses
View article →
60%

**Securities Commission Malaysia (SC):** Regulates digital asset exchanges (DAXs), initial coin offerings (ICOs), and the offering of digital assets that are deemed securities. The SC aims to protect investors and maintain market integrity.

taxsecurities-commission-malaysia-sc-regulates
View article →
60%

**Bank Negara Malaysia (BNM):** Focuses on the financial stability implications of digital assets and plays a key role in developing regulatory frameworks for anti-money laundering and counter-financing of terrorism (AML/CFT) related to virtual assets.

taxbank-negara-malaysia-bnm-focuses
View article →
60%

*Reference:* **Bank Negara Malaysia's Policy Document on Anti-Money Laundering, Counter-Terrorism Financing and Targeted Financial Sanctions for Financial Institutions (AML/CFT and TFS for FIs).** While not crypto-specific, it includes virtual asset service providers (VASPs) under its scope. https://www.bnm.gov.my/documents/20124/960529/PD_AML_CFT.pdf (Check BNM's official website for the latest version).

taxreference-bank-negara-malaysias-policy
View article →
60%

**Guidelines on Digital Assets:** https://www.sc.com.my/regulation/guidelines/digital-assets (Crucial for understanding the regulatory framework, even if not directly tax-related).

taxguidelines-on-digital-assets-httpswwwsccommyregulationguidelinesdigital-assets
View article →

(17 more unverified fact(s) )

Custody Requirements

Custody regulation data collection in progress.

Stablecoin Regulation

(3 more unverified fact(s) )

Securities Classification

Securities classification data collection in progress.

Sanctions & Restrictions

60%

**Direct Implementation:** Malaysia implements UN Security Council Resolutions (UNSCRs) related to targeted financial sanctions (TFSR) through the **AMLA 2001** and specific Ministerial Orders.

sanctionsdirect-implementation-malaysia-implements-un
View article →
60%

The **Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities (Declaration of Specified Entities and Reporting Requirements) Order 2014** (and subsequent amendments) lists individuals and entities designated by the UN Security Council as terrorists or terrorist financiers, and those involved in proliferation financing.

sanctionsthe-anti-money-laundering-anti-terrorism-financing
View article →
60%

**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities (Declaration of Specified Entities and Reporting Requirements) Order 2014:** While a direct official government link might be harder to find due to frequent updates, it is enacted under Section 66B of AMLA 2001 and is referenced extensively in the BNM AML/CFT and TFS Policy Document. The consolidated list is found on the UN website.

sanctionsanti-money-laundering-anti-terrorism-financing-and
View article →
60%

**UN Security Council Consolidated List:** https://www.un.org/securitycouncil/sanctions/consolidated-list

sanctionsun-security-council-consolidated-list
View article →
60%

**VASP Obligations:** VASPs in Malaysia are required to immediately freeze the funds and assets of individuals and entities on the UN Security Council Consolidated List and the domestic list (derived from the UN list), and report such freezes to the Financial Intelligence Unit (FIU) at BNM without delay. They must also prohibit making any funds or financial services available to such designated persons.

sanctionsvasp-obligations-vasps-in-malaysia
View article →
60%

**Indirect Applicability & Risk:** Malaysian VASPs may not be legally compelled by Malaysian law to *enforce* OFAC sanctions directly, but practical and commercial realities dictate compliance:

sanctionsindirect-applicability-risk-malaysian-vasps
View article →
60%

**Correspondent Banking Relationships:** Most Malaysian financial institutions rely on U.S. correspondent banks for international transfers. Non-compliance with OFAC sanctions could lead to de-risking by these correspondent banks, affecting a VASP's ability to conduct international transactions.

sanctionscorrespondent-banking-relationships-most-malaysian
View article →
60%

**Secondary Sanctions:** Engaging in transactions with OFAC-sanctioned entities or jurisdictions could expose a Malaysian VASP, its directors, or its personnel to secondary sanctions by the U.S. government, impacting their ability to access the U.S. financial system or conduct business with U.S. persons.

sanctionssecondary-sanctions-engaging-in-transactions
View article →
60%

**Reputational Risk:** Associating with sanctioned entities carries significant reputational risk.

sanctionsreputational-risk-associating-with-sanctioned
View article →
60%

**VASP Obligations:** Due to these risks, prudent Malaysian VASPs typically screen their customers and transactions against OFAC's Specially Designated Nationals (SDN) List and other sanctions lists (e.g., related to Cuba, Iran, North Korea, Syria, Russia) as a best practice for risk management.

sanctionsvasp-obligations-due-to-these
View article →
60%

**Indirect Applicability & Risk:** While not directly enforceable in Malaysia, EU sanctions also carry extraterritorial implications, especially for VASPs that deal with EU customers, have EU counterparties, or process transactions involving EU financial systems. Non-compliance could lead to:

sanctionsindirect-applicability-risk-while-not
View article →
60%

**VASP Obligations:** Similar to OFAC, many Malaysian VASPs will screen against EU sanctions lists (e.g., the EU Sanctions Map or Consolidated List of Persons, Groups, Entities Subject to EU Financial Sanctions) as part of their robust compliance programs.

sanctionsvasp-obligations-similar-to-ofac
View article →

(1 more unverified fact(s) )

Regulatory Forecast

high confidence

Likely enforcement action expected around 2026-05-10

Based on 99 historical regulatory events for Malaysia, averaging every 18 days, with increasing regulatory activity.

Trend: Increasing Data points: 99 Avg frequency: 18 days Last action: 2026-04-22

Recent Updates

2026-04-22(1 month ago)
medium MY

**Penalties:** Fines and/or imprisonment for individuals under AMLA 2001.

**Penalties:** Fines and/or imprisonment for individuals under AMLA 2001.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001):** This is...

**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001):** This is the cornerstone legislation. It imposes obligations on reporting institutions (which include VASPs) to detect, deter, and report suspicious transactions, and to implement robust AML/CFT measures, including sanctions screening.

2026-04-22(1 month ago)
medium MY

**Financial Sanctions Act 2009 (FSA 2009):** This Act provides the legal basis for implementing financial sanctions i...

**Financial Sanctions Act 2009 (FSA 2009):** This Act provides the legal basis for implementing financial sanctions imposed by the United Nations Security Council (UNSC) in Malaysia. It empowers the Minister of Finance to issue freezing orders against designated persons and entities, and to enforce other restrictive measures.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Labuan FSA Policy on Digital Asset Businesses (2020) and related Guidance Notes:** This policy document sets out th...

**Labuan FSA Policy on Digital Asset Businesses (2020) and related Guidance Notes:** This policy document sets out the regulatory framework for digital asset businesses in Labuan. It explicitly requires VASPs to comply with AMLA 2001 and FSA 2009, and to implement robust AML/CFT systems and controls. This includes:

2026-04-22(1 month ago)
medium MY

**UN Sanctions Compliance (Direct Enforcement):**

**UN Sanctions Compliance (Direct Enforcement):**

enforcement View article →
2026-04-22(1 month ago)
medium MY

**OFAC/EU Sanctions Compliance (Indirect but Critical Enforcement):**

**OFAC/EU Sanctions Compliance (Indirect but Critical Enforcement):**

enforcement View article →
2026-04-22(1 month ago)
high MY

**Sanctioned Jurisdictions:** VASPs are explicitly prohibited from engaging in transactions with individuals or entit...

**Sanctioned Jurisdictions:** VASPs are explicitly prohibited from engaging in transactions with individuals or entities located in, or associated with, jurisdictions under comprehensive UN financial sanctions (e.g., DPRK, Iran under certain resolutions). Due to the indirect enforcement mentioned above, engagement with OFAC-sanctioned jurisdictions (e.g., Cuba, Iran, North Korea, Syria, certain regions of Ukraine) and EU-sanctioned jurisdictions is also severely restricted or prohibited.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Labuan FSA Enforcement:** LFSA can also impose administrative penalties, revoke licenses, issue directives, and tak...

**Labuan FSA Enforcement:** LFSA can also impose administrative penalties, revoke licenses, issue directives, and take other supervisory actions against non-compliant VASPs under its regulatory powers.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**UN Security Council Consolidated List and other UN Sanctions Lists:** These are the primary lists legally enforced ...

**UN Security Council Consolidated List and other UN Sanctions Lists:** These are the primary lists legally enforced in Malaysia through the FSA 2009. BNM ensures these lists are disseminated.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Malaysia's Domestic Terrorism Financing Lists:** While Malaysia has domestic lists related to terrorism financing, ...

**Malaysia's Domestic Terrorism Financing Lists:** While Malaysia has domestic lists related to terrorism financing, these are primarily for law enforcement purposes and less for general financial sanctions blocking obligations compared to the UN lists. Financial institutions' primary focus for blocking is the UN lists.

enforcement View article →
2026-04-22(1 month ago)
medium MY

Labuan's regulatory framework does **not contain specific legislation solely on stablecoin redemption rights**.

Labuan's regulatory framework does **not contain specific legislation solely on stablecoin redemption rights**.

2026-04-22(1 month ago)
high MY

**No specific regulatory framework for private stablecoins interacting with a Central Bank Digital Currency (CBDC) in...

**No specific regulatory framework for private stablecoins interacting with a Central Bank Digital Currency (CBDC) in Labuan.**

2026-04-22(1 month ago)
high MY

**Malaysia's CBDC Exploration:** Bank Negara Malaysia (BNM), the central bank for Malaysia, has been actively explori...

**Malaysia's CBDC Exploration:** Bank Negara Malaysia (BNM), the central bank for Malaysia, has been actively exploring the potential issuance of a CBDC. However, this is primarily focused on the domestic Malaysian financial system and national policy.

2026-04-22(1 month ago)
medium MY

**Specific Digital Asset/Fintech Guidelines (issued by Labuan FSA):**

**Specific Digital Asset/Fintech Guidelines (issued by Labuan FSA):**

2026-04-22(1 month ago)
medium MY

**Regulatory Frameworks:** While tax laws are general, several regulatory bodies have issued guidelines or frameworks...

**Regulatory Frameworks:** While tax laws are general, several regulatory bodies have issued guidelines or frameworks that indirectly impact the tax treatment by defining the nature of crypto assets:

2026-04-22(1 month ago)
medium MY

**Labuan Financial Services Authority (LFSA) Enforcement Powers:** LFSA has wide-ranging powers under the Labuan Fina...

**Labuan Financial Services Authority (LFSA) Enforcement Powers:** LFSA has wide-ranging powers under the Labuan Financial Services and Securities Act 2010 (LFSSA) and the Labuan Islamic Financial Services and Securities Act 2010 (LIFSSA). These include:

enforcement View article →
2026-04-22(1 month ago)
high MY

**AML/CFT and Targeted Financial Sanctions for Financial Institutions (AML/CFT TFS for FIs) Policy Document (BNM Poli...

**AML/CFT and Targeted Financial Sanctions for Financial Institutions (AML/CFT TFS for FIs) Policy Document (BNM Policy Document):** Issued by Bank Negara Malaysia, this comprehensive policy document provides detailed guidance and requirements for reporting institutions to comply with AMLATFPUAA 2001. This document has specific sections/appendices applicable to "Digital Currencies" or "Virtual Assets."

enforcement View article →
2026-04-22(1 month ago)
high MY

**Bank Negara Malaysia (BNM):**

**Bank Negara Malaysia (BNM):**

2026-04-22(1 month ago)
high MY

**Recipient:** Reports must be submitted to the Financial Intelligence Unit (FIU) within Bank Negara Malaysia.

**Recipient:** Reports must be submitted to the Financial Intelligence Unit (FIU) within Bank Negara Malaysia.

2026-04-22(1 month ago)
medium MY

**Sanctions Screening:** Implement measures to screen customers and transactions against targeted financial sanctions...

**Sanctions Screening:** Implement measures to screen customers and transactions against targeted financial sanctions lists issued by the United Nations Security Council (UNSC) and domestic authorities to prevent terrorism financing and proliferation financing.

enforcement View article →
2026-04-22(1 month ago)
high MY

**Penalty Amount:** No explicit monetary fine was announced at the time of the public reprimand. The penalties were o...

**Penalty Amount:** No explicit monetary fine was announced at the time of the public reprimand. The penalties were operational: a public reprimand, an order to cease all operations in Malaysia, disable access to its website and mobile applications, and cease all media and marketing activities targeting Malaysian investors.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Outcome:** Binance was forced to shut down its direct operations in Malaysia. Malaysian users were advised to withd...

**Outcome:** Binance was forced to shut down its direct operations in Malaysia. Malaysian users were advised to withdraw their funds. The action led Binance to later pursue a compliant pathway to re-enter the Malaysian market by acquiring a stake in and partnering with a licensed local Digital Asset Exchange (DAX), MX Global, demonstrating the effectiveness of the SC's enforcement in driving regulatory compliance.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Penalty Amount:** Typically no specific monetary penalty is announced publicly for being added to the alert list. T...

**Penalty Amount:** Typically no specific monetary penalty is announced publicly for being added to the alert list. The "penalty" is a public warning, which often leads to the platform being unable to operate effectively in Malaysia and subsequent cessation of operations or blocking of access.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Securities Commission Malaysia (SC) Guidelines on Digital Assets:** These guidelines, particularly the latest amend...

**Securities Commission Malaysia (SC) Guidelines on Digital Assets:** These guidelines, particularly the latest amendments, impose specific AML/CTF requirements on DAX operators (VASPs) licensed by the SC. They mandate the implementation of policies and procedures to prevent money laundering and terrorism financing, which inherently includes sanctions compliance.

enforcement View article →
2026-04-22(1 month ago)
high MY

**Bank Negara Malaysia (BNM) Policy Document on Anti-Money Laundering, Countering Financing of Terrorism and Targeted...

**Bank Negara Malaysia (BNM) Policy Document on Anti-Money Laundering, Countering Financing of Terrorism and Targeted Financial Sanctions (AML/CFT and TFS Policy Document):** This document sets out the regulatory requirements for financial institutions, including reporting institutions dealing with digital assets, regarding AML/CTF and targeted financial sanctions. It is mandatory for VASPs to adhere to the principles and requirements outlined in this policy.

2026-04-22(1 month ago)
medium MY

**Direct Implementation:** Malaysia implements UN Security Council Resolutions (UNSCRs) related to targeted financial...

**Direct Implementation:** Malaysia implements UN Security Council Resolutions (UNSCRs) related to targeted financial sanctions (TFSR) through the **AMLA 2001** and specific Ministerial Orders.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Indirect Applicability & Risk:** Malaysian VASPs may not be legally compelled by Malaysian law to *enforce* OFAC sa...

**Indirect Applicability & Risk:** Malaysian VASPs may not be legally compelled by Malaysian law to *enforce* OFAC sanctions directly, but practical and commercial realities dictate compliance:

enforcement View article →
2026-04-22(1 month ago)
medium MY

**VASP Obligations:** Due to these risks, prudent Malaysian VASPs typically screen their customers and transactions a...

**VASP Obligations:** Due to these risks, prudent Malaysian VASPs typically screen their customers and transactions against OFAC's Specially Designated Nationals (SDN) List and other sanctions lists (e.g., related to Cuba, Iran, North Korea, Syria, Russia) as a best practice for risk management.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Indirect Applicability & Risk:** While not directly enforceable in Malaysia, EU sanctions also carry extraterritori...

**Indirect Applicability & Risk:** While not directly enforceable in Malaysia, EU sanctions also carry extraterritorial implications, especially for VASPs that deal with EU customers, have EU counterparties, or process transactions involving EU financial systems. Non-compliance could lead to:

enforcement View article →
2026-04-22(1 month ago)
medium MY

**VASP Obligations:** Similar to OFAC, many Malaysian VASPs will screen against EU sanctions lists (e.g., the EU Sanc...

**VASP Obligations:** Similar to OFAC, many Malaysian VASPs will screen against EU sanctions lists (e.g., the EU Sanctions Map or Consolidated List of Persons, Groups, Entities Subject to EU Financial Sanctions) as part of their robust compliance programs.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Best Practice Screening:** Given the indirect applicability of OFAC and EU sanctions, and the global nature of cryp...

**Best Practice Screening:** Given the indirect applicability of OFAC and EU sanctions, and the global nature of crypto, leading VASPs in Malaysia will also screen against:

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Methods:** Screening should leverage reliable, up-to-date sanctions databases, often through third-party compliance...

**Methods:** Screening should leverage reliable, up-to-date sanctions databases, often through third-party compliance software solutions that integrate multiple sanctions lists and provide continuous monitoring.

enforcement View article →
2026-04-22(1 month ago)
high MY

**Sanctioned Jurisdictions:** Transactions with jurisdictions under comprehensive UN sanctions are strictly prohibite...

**Sanctioned Jurisdictions:** Transactions with jurisdictions under comprehensive UN sanctions are strictly prohibited. This primarily includes **North Korea** and **Iran** (subject to specific proliferation financing sanctions). Engaging in transactions with these countries, directly or indirectly, through digital assets is a severe violation.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**OFAC/EU Designated Jurisdictions:** For practical reasons and to mitigate secondary sanctions risk, many VASPs will...

**OFAC/EU Designated Jurisdictions:** For practical reasons and to mitigate secondary sanctions risk, many VASPs will avoid or apply extremely stringent controls to transactions originating from or destined for countries under broad OFAC or EU sanctions, such as **Cuba, Syria, Venezuela, and specific regions of Ukraine/Russia.**

enforcement View article →
2026-04-22(1 month ago)
high MY

**As E-Money/Payment Token (Regulated by Bank Negara Malaysia - BNM):**

**As E-Money/Payment Token (Regulated by Bank Negara Malaysia - BNM):**

2026-04-22(1 month ago)
high MY

**Bank Negara Malaysia (BNM) is actively exploring the potential issuance of a Central Bank Digital Currency (CBDC).*...

**Bank Negara Malaysia (BNM) is actively exploring the potential issuance of a Central Bank Digital Currency (CBDC).** BNM has stated its focus on understanding the strategic implications of a CBDC for Malaysia, conducting research and engaging with stakeholders.

2026-04-22(1 month ago)
medium MY

**Legality:** Engaging in crypto trading and establishing crypto exchanges is legal, provided they comply with the SC...

**Legality:** Engaging in crypto trading and establishing crypto exchanges is legal, provided they comply with the SC's regulatory framework.

2026-04-22(1 month ago)
high MY

**Compliance with Regulatory Bodies:** Businesses operating Digital Asset Exchanges (DAXs) or offering digital assets...

**Compliance with Regulatory Bodies:** Businesses operating Digital Asset Exchanges (DAXs) or offering digital assets must comply with reporting requirements set by the Securities Commission Malaysia (SC) and Bank Negara Malaysia (BNM) for Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT). This includes reporting suspicious transactions.

2026-04-22(1 month ago)
high MY

**Bank Negara Malaysia (BNM):** Focuses on the financial stability implications of digital assets and plays a key rol...

**Bank Negara Malaysia (BNM):** Focuses on the financial stability implications of digital assets and plays a key role in developing regulatory frameworks for anti-money laundering and counter-financing of terrorism (AML/CFT) related to virtual assets.

2026-04-22(1 month ago)
medium MY

**Sanctions Screening:** Both originator and beneficiary information must be screened against relevant sanctions lists.

**Sanctions Screening:** Both originator and beneficiary information must be screened against relevant sanctions lists.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Fines:** Significant monetary penalties, which can run into millions of Ringgit for entities.

**Fines:** Significant monetary penalties, which can run into millions of Ringgit for entities.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Revocation or Suspension of Licenses:** For regulated entities like DAXes, their licenses can be revoked or suspend...

**Revocation or Suspension of Licenses:** For regulated entities like DAXes, their licenses can be revoked or suspended by the SC or BNM.

enforcement View article →
2026-04-22(1 month ago)
medium MY

**Enforcement Actions:** BNM and SC have the power to issue directives, impose administrative penalties, or take othe...

**Enforcement Actions:** BNM and SC have the power to issue directives, impose administrative penalties, or take other enforcement actions.

enforcement View article →

This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.