Regulatory Bodies
SC Malaysia — Digital asset exchange registration, IEO oversight, cease-and-desist enforcement
BNM — AML/CFT standards
Operating Models
0/9 verdictsCan specific business models operate in Malaysia? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
No verdict yet — falls back to topic articles below.
Primary Legislation
| Law / Regulation | Year | Scope |
|---|---|---|
| Capital Markets and Services (Prescription of Securities) Order 2019 | 2019 | Digital currency and digital token as prescribed securities |
| Guidelines on Digital Assets | 2020 | DAX operator requirements |
Licensing Requirements
SC Malaysia — Digital asset exchange registration, IEO oversight, cease-and-desist enforcement
AML/KYC Requirements
**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA 2001)**
**Capital Markets and Services Act 2007 (CMSA):** For digital assets that are deemed "securities," the Securities Commission Malaysia (SC) regulates entities like Digital Asset Exchanges (DAX) under this Act and its accompanying guidelines. These entities are also subject to specific AML/CFT requirements imposed by the SC.
**Guidelines on Recognised Markets (SC Guidelines):** Specifically for operators of recognised markets, including DAX, detailing operational, conduct, and AML/CFT requirements.
**Role:** The central bank of Malaysia and the primary regulator for AML/CFT compliance across all reporting institutions, including VASPs, under the AMLATFPUAA 2001. BNM also houses the Financial Intelligence Unit (FIU) responsible for receiving Suspicious Transaction Reports (STRs).
**Role:** Regulates the capital markets in Malaysia. The SC specifically licenses and oversees Digital Asset Exchanges (DAX) and other entities involved in the offering or trading of digital assets that are classified as securities. SC-regulated entities must comply with both SC-specific AML/CFT requirements and the broader BNM framework.
Exchanges between digital currencies and fiat currencies.
Exchanges between one or more forms of digital currencies.
Safekeeping and/or administration of digital currencies or instruments enabling control over digital currencies.
Participation in and provision of financial services related to an issuer’s offer and/or sale of a digital currency.
Obtain and verify the identity of individual customers (name, address, date of birth, nationality, identification document details, contact information).
For legal entities/corporate customers, obtain and verify: legal name, legal form, proof of existence (e.g., certificate of incorporation), address of registered office, names of directors/partners/trustees, details of shareholders and beneficial owners, and constitution/governing documents.
For partnerships and trusts, similar information must be collected for partners, trustees, settlors, and beneficiaries.
**Beneficial Ownership:** Identify and verify the ultimate beneficial owner (UBO) for all corporate and legal arrangements. This involves looking through layers of ownership to identify the natural person(s) who ultimately own or control the customer, or on whose behalf a transaction is being conducted.
**Purpose and Intended Nature of Business Relationship:** Understand the rationale behind the customer's request to use the VASP's services and the anticipated level and type of activity.
**Source of Funds/Wealth:** For higher-risk customers or transactions, obtain information on the source of funds or source of wealth.
**Ongoing Monitoring:** Continuously monitor the business relationship and transactions to ensure consistency with the VASP's knowledge of the customer, their business, risk profile, and source of funds. Update customer information regularly.
**Non-Face-to-Face (NFF) Customers:** Given the online nature of many VASPs, robust measures for NFF CDD are crucial, including multi-factor authentication, video verification, and cross-referencing with reliable independent sources.
**Politically Exposed Persons (PEPs):** Implement Enhanced Due Diligence (EDD) measures for PEPs, their family members, and close associates, including obtaining senior management approval to establish or continue the relationship and taking reasonable measures to establish the source of wealth and funds.
**High-Risk Customers:** PEPs, customers from high-risk jurisdictions (e.g., those identified by FATF), customers involved in cash-intensive businesses.
**High-Risk Products/Services:** Products or services that facilitate anonymity (e.g., privacy coins, mixing services).
**High-Risk Delivery Channels:** Non-face-to-face relationships without sufficient mitigating controls.
**Large, Complex, or Unusual Transactions:** Transactions that have no apparent economic or lawful purpose.
**Cross-border Correspondent Relationships:** If applicable, especially with VASPs in high-risk jurisdictions.
**Obligation:** All VASPs, as reporting institutions, are legally obliged to report any transaction (including attempted transactions) that they know or have reason to suspect is related to money laundering, terrorism financing, or proceeds of unlawful activities.
**Recipient:** Reports must be submitted to the Financial Intelligence Unit (FIU) within Bank Negara Malaysia.
**No Tipping-Off:** VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR has been or will be made.
**Reporting Thresholds:** While there are no specific monetary thresholds for STRs (suspicion is key), BNM's policy document also outlines Currency Transaction Reports (CTR) for cash transactions exceeding a certain amount. However, for most virtual asset transactions, suspicion drives the reporting.
**Customer Identification Data:** All records obtained during CDD and EDD (identification documents, verification records, beneficial ownership information) must be kept for at least **five (5) years** after the business relationship has ended.
**Transaction Records:** Records of all transactions (date, type, amount, parties involved, digital asset addresses, hash IDs) must be kept for at least **five (5) years** from the date of the transaction.
**STRs and Internal Reports:** Records of all STRs filed and any internal suspicious activity reports or investigations.
**AML/CFT Policies and Procedures:** Records of all policies, procedures, risk assessments, training materials, and audit reports.
**Internal Policies and Procedures:** Develop and implement robust internal AML/CFT policies, procedures, and controls commensurate with the VASP's risk profile.
**Compliance Officer:** Appoint a dedicated Compliance Officer (often referred to as an Money Laundering Reporting Officer - MLRO) responsible for overseeing AML/CFT compliance, receiving internal suspicious activity reports, and submitting STRs to the FIU.
**Employee Training:** Provide regular and comprehensive AML/CFT training to all relevant employees to ensure they understand their obligations and can identify suspicious activities.
**Independent Audit:** Periodically review and audit the effectiveness of the VASP's AML/CFT programs.
**Sanctions Screening:** Implement measures to screen customers and transactions against targeted financial sanctions lists issued by the United Nations Security Council (UNSC) and domestic authorities to prevent terrorism financing and proliferation financing.
**Regulator Name:** Securities Commission Malaysia (SC Malaysia)
**Entity Targeted:** Binance Holdings Limited and its CEO, Changpeng Zhao (CZ).
**Violation Type:** Operating a Digital Asset Exchange (DAX) without registration/license, which is a violation under the Capital Markets and Services Act 2007. The SC considers digital assets as securities, and operating a platform for trading them requires authorization.
**Penalty Amount:** No explicit monetary fine was announced at the time of the public reprimand. The penalties were operational: a public reprimand, an order to cease all operations in Malaysia, disable access to its website and mobile applications, and cease all media and marketing activities targeting Malaysian investors.
**Outcome:** Binance was forced to shut down its direct operations in Malaysia. Malaysian users were advised to withdraw their funds. The action led Binance to later pursue a compliant pathway to re-enter the Malaysian market by acquiring a stake in and partnering with a licensed local Digital Asset Exchange (DAX), MX Global, demonstrating the effectiveness of the SC's enforcement in driving regulatory compliance.
**SC Malaysia Official Press Release:** https://www.sc.com.my/resources/media-releases-and-announcements/sc-takes-enforcement-action-against-binance-for-operating-illegally-in-malaysia
**News Article on Binance's subsequent partnership with MX Global (for context):** https://www.thestar.com.my/business/business-news/2022/03/10/binance-acquires-stake-in-malaysias-mx-global
**Entity Targeted:** Various unauthorized digital asset platforms, investment schemes involving crypto, and individuals promoting them. (Specific names are too numerous to list here, but are updated frequently).
**Violation Type:** Operating or promoting unauthorized investment schemes, digital asset exchanges, or services without the necessary licenses or approvals from the SC Malaysia.
**Penalty Amount:** Typically no specific monetary penalty is announced publicly for being added to the alert list. The "penalty" is a public warning, which often leads to the platform being unable to operate effectively in Malaysia and subsequent cessation of operations or blocking of access.
**Outcome:** Public awareness is raised, and investors are warned against dealing with these entities. This often leads to reduced or ceased operations for the targeted entities within Malaysia.
**SC Malaysia Investor Alert List:** https://www.sc.com.my/investor-alert
**Risk-based:** Regulations are introduced where risks are most apparent (e.g., trading, fundraising, AML/CFT).
**Phased:** The framework has evolved over time, starting with AML/CFT and then expanding to encompass capital market activities.
**Technology-neutral where possible:** Applying existing securities laws to digital assets that exhibit characteristics of securities.
**Focus on investor protection and market integrity:** Especially for digital assets deemed as securities.
**Emphasis on AML/CFT:** A core pillar of all digital asset regulation.
**Role:** The primary regulator for digital assets that are deemed "securities" under Malaysian law. It oversees the offering, trading, and intermediation of such digital assets. This includes licensing Digital Asset Exchanges (DAXes) and regulating fundraising via Initial Exchange Offerings (IEOs).
**Digital Assets Specific Page:** https://www.sc.com.my/regulation/guidelines/digital-assets
**Bank Negara Malaysia (BNM) – Central Bank of Malaysia**
**Role:** Primarily responsible for the financial system's stability, payment systems, and Anti-Money Laundering/Counter-Terrorism Financing (AML/CFT). BNM designates "virtual asset service providers" (VASPs) as reporting institutions under the AMLATFPUAA, requiring them to report suspicious transactions and adhere to AML/CFT measures. BNM also monitors the broader implications of digital assets on financial stability, monetary policy, and payment systems, including stablecoins and central bank digital currencies (CBDCs).
**Capital Markets and Services Act 2007 (CMSA 2007)**
**Date:** Enacted 2007 (amended periodically).
**Relevance:** Provides the foundational legal framework for the SC to regulate capital market activities. Digital assets deemed as "securities" fall under the purview of this Act.
**URL (SC Legislation page):** https://www.sc.com.my/regulation/legislation/acts/cmsa
**Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019**
**Date:** Effective 15 January 2019.
**Relevance:** This is a crucial piece of legislation. It formally **prescribes digital currencies and digital tokens as "securities"** if they are traded on a digital asset exchange or offered through an Initial Exchange Offering (IEO) platform. This brought certain virtual assets squarely under the SC's regulatory ambit.
**URL (SC Media Release announcing guidelines):** https://www.sc.com.my/resources/media-releases-and-announcements/sc-issues-guidelines-on-digital-assets (The Order itself is a gazetted law, not always directly linked as a PDF on the SC site, but its effect is explained in the guidelines and press releases.)
**Guidelines on Digital Assets (Revised as of October 2023)**
**Date:** First issued 2019, revised multiple times (latest revision October 2023).
**Relevance:** Issued by the SC, these guidelines provide detailed requirements for:
Persons seeking to operate a Digital Asset Exchange (DAX).
Persons seeking to operate an Initial Exchange Offering (IEO) platform.
Issuers of digital tokens through an IEO platform.
**URL:** https://www.sc.com.my/api/documentms/download.ashx?id=ee851174-8b63-44f2-9844-4824578b7a42 (Direct PDF link to the Guidelines on Digital Assets, dated 27 October 2023).
**Date:** Enacted 2001 (amended periodically).
**Relevance:** This Act is the cornerstone of Malaysia's AML/CFT regime. BNM leverages this Act to designate "virtual asset service providers" (VASPs) as "reporting institutions," compelling them to implement robust AML/CFT measures, conduct customer due diligence, and report suspicious transactions.
**URL (BNM Legislation page):** https://www.bnm.gov.my/legislation/acts/aml-cft
**Policy Document on Anti-Money Laundering, Countering Financing of Terrorism and Targeted Financial Sanctions for Financial Institutions (AML/CFT and TFS Policy Document)**
**Date:** Various iterations, latest effective 1 January 2020 (with subsequent clarifications/revisions).
**Relevance:** Issued by BNM, this policy document details the specific AML/CFT obligations for various financial institutions, including virtual asset service providers (VASPs) operating in Malaysia. It outlines requirements for risk assessment, customer due diligence, record-keeping, and suspicious transaction reporting.
**URL:** https://www.bnm.gov.my/documents/20124/960527/PD_AML+CFT+and+TFS_FI.pdf (Direct PDF link to BNM's AML/CFT and TFS Policy Document, updated as of 17 April 2023).
**Legality:** Engaging in crypto trading and establishing crypto exchanges is legal, provided they comply with the SC's regulatory framework.
**Licensing Requirement:** Any entity that wishes to operate a Digital Asset Exchange (DAX) in Malaysia, or an Initial Exchange Offering (IEO) platform, must be **licensed by the Securities Commission Malaysia (SC)**. Operating without an SC license is illegal and carries severe penalties.
**Investor Protection:** The SC's framework focuses heavily on investor protection, requiring licensed DAXes to implement robust cybersecurity measures, adequate capital, clear rules for listing digital assets, dispute resolution mechanisms, and transparent fee structures.
**AML/CFT Compliance:** Licensed DAXes and IEO platforms are designated as reporting institutions under the AMLATFPUAA and must comply with BNM's stringent AML/CFT requirements. This involves "Know Your Customer" (KYC) procedures, transaction monitoring, and suspicious transaction reporting.
**List of Licensed DAXes:** The SC publicly maintains a list of licensed Digital Asset Exchanges. As of my last update, licensed DAXes typically include operators like Luno, SINEGY, Tokenize Technology, and MX Global. It is crucial for users to verify that they are using an SC-licensed platform.
**URL (SC Licensed and Registered Persons - filter by Digital Asset Exchange):** https://www.sc.com.my/regulation/licensing/licensed-and-registered-persons
Travel Rule
**Bank Negara Malaysia (BNM) Policy Document on Anti-Money Laundering, Counter-Terrorism Financing and Targeted Financial Sanctions for Financial Institutions (AML/CFT and TFS Policy Document):** This is the primary document.
Specifically, **Paragraph 10.1.2** states: "A reporting institution that conducts virtual asset transfers shall apply the obligations outlined in this policy document relating to funds or wire transfers to virtual assets." This explicitly extends the Travel Rule to virtual assets.
**Securities Commission Malaysia (SC) Guidelines on Digital Assets:** These guidelines govern Digital Asset Exchanges (DAX) and other entities dealing with digital assets. They mandate compliance with BNM's AML/CFT framework.
**Section 9 (Anti-Money Laundering and Counter-Terrorism Financing):** Requires registered Digital Asset Exchanges (DAX) to comply with the AMLA and BNM's AML/CFT and TFS Policy Document.
**Official URL (latest version):** Search for "SC Guidelines on Digital Assets" on www.sc.com.my.
**Cross-Border Transfers (both traditional and virtual assets):** All required originator and beneficiary information must be obtained and transmitted, **regardless of the amount**.
**Domestic Transfers (both traditional and virtual assets):**
For transfers **equal to or exceeding RM3,000 (or equivalent in foreign currency/virtual assets)**: All required originator and beneficiary information must be obtained and transmitted.
For transfers **below RM3,000 (or equivalent)**: Reporting institutions are permitted to omit certain information (e.g., originator's address or national identity number, beneficiary's address), provided they can produce this information within 3 working days if requested by authorities.
**Digital Asset Exchanges (DAX) registered with the Securities Commission Malaysia:** These are explicitly identified as VASPs and reporting institutions under the SC's guidelines and are thus fully covered.
**Other entities providing VASP services** (e.g., crypto custodians, issuers of certain virtual assets, brokers dealing in virtual assets) would be covered if their activities fall within the definitions of "financial institutions" or "reporting institutions" under the AMLA or are otherwise regulated by BNM or SC.
**Information Collection:** VASPs must collect the required originator (sender) and beneficiary (recipient) information, including names, account numbers (or wallet addresses), and physical addresses or national identity numbers/customer identification numbers.
**Information Holding:** This information must be securely stored and readily retrievable.
**Information Transmission:** The collected information must be transmitted to the beneficiary VASP during or before the virtual asset transfer.
**Sanctions Screening:** Both originator and beneficiary information must be screened against relevant sanctions lists.
**Record Keeping:** Records of all transactions and the associated Travel Rule data must be maintained for a prescribed period (typically at least 7 years under AMLA).
**Risk-Based Approach:** VASPs are expected to adopt a risk-based approach to assess and mitigate ML/TF risks, which includes enhanced due diligence where appropriate.
**Fines:** Significant monetary penalties, which can run into millions of Ringgit for entities.
**Imprisonment:** Individuals (e.g., directors, compliance officers) found responsible for non-compliance may face imprisonment.
**Revocation or Suspension of Licenses:** For regulated entities like DAXes, their licenses can be revoked or suspended by the SC or BNM.
**Reputational Damage:** Significant damage to the VASP's reputation.
**Enforcement Actions:** BNM and SC have the power to issue directives, impose administrative penalties, or take other enforcement actions.
Tax Reporting
**Business Income (Taxable):** If an individual or company engages in systematic, repetitive, and organized trading activities with the intention of profit, it will likely be treated as a "business" under Section 4(a) of the ITA 1967.
**Indicators of a "Business" (Adventure in the Nature of Trade):**
**Frequency and volume of transactions:** High frequency and volume suggest trading.
**System and organisation:** Use of sophisticated trading strategies, dedicated software, or a structured approach.
**Duration of ownership:** Short holding periods.
**Financing:** Use of borrowed funds for trading.
**Nature of the asset:** While crypto itself isn't productive, the intent behind its acquisition and disposal matters.
**Taxpayer's motive:** Clear intention to make a profit from buying and selling.
**Activities likely treated as business income:**
Active day trading or swing trading of cryptocurrencies.
Operating a cryptocurrency mining farm commercially.
Providing services paid in cryptocurrency.
Earning income from staking, lending, or yield farming activities done systematically for profit.
Receiving cryptocurrency as a salary or remuneration for services rendered.
**Investment Income (Generally Not Taxable for Individuals):** If cryptocurrencies are acquired and held for long-term appreciation with no intention of frequent trading, and they are disposed of infrequently, the gains are generally considered capital gains, which are not taxed in Malaysia for individuals (see Capital Gains Tax section below).
**Activities likely treated as investment income:**
Holding a small portfolio of various cryptocurrencies for several years, with infrequent sales.
Buying and holding for a specific long-term goal (e.g., retirement).
**Trading Gains:** If determined to be a business, profits derived from buying and selling cryptocurrencies are taxable as business income.
**Mining:** If conducted commercially (i.e., with an intention to profit, involving significant investment and systematic activity), the profits from mining are taxable as business income.
**Staking/Lending Rewards:** Income received from staking (participating in proof-of-stake networks) or lending cryptocurrencies is generally taxable. The classification (business income vs. other income under Section 4(f) ITA 1967) depends on the scale, frequency, and intent. If it's part of a systematic activity for profit, it's likely business income.
**Airdrops/Forks:** The tax treatment can be complex. Generally, if an airdrop or hard fork results in the receipt of new tokens that have market value, this could be considered income at the time of receipt, particularly if it's related to existing taxable activities.
**Salaries/Wages Paid in Crypto:** If an employee receives cryptocurrency as part of their employment remuneration, it is considered taxable employment income and must be converted to its Ringgit Malaysia (RM) equivalent at the time of receipt.
**Goods/Services Paid in Crypto:** If a business receives cryptocurrency as payment for goods or services, the RM value of the crypto at the time of receipt is considered business income.
**Individuals:** Subject to progressive income tax rates ranging from 0% to 30% (for resident individuals), depending on their total chargeable income. Non-resident individuals are taxed at a flat rate of 30%.
**Companies:** Subject to corporate income tax rates.
SME (Paid-up capital up to RM2.5 million and gross income up to RM50 million): 17% on the first RM150,000 of chargeable income, and 24% on the subsequent chargeable income.
Non-SME: 24% on all chargeable income.
Internet and software subscriptions used for trading/mining.
Professional fees (e.g., for tax advice on crypto business).
**For Individuals:** Gains from the disposal of cryptocurrencies, when they are genuinely held as long-term investments and not part of an "adventure in the nature of trade," are generally considered capital gains and are **not subject to income tax**.
**For Companies:** While companies are generally subject to corporate income tax on profits, gains from the disposal of movable properties (including crypto) are typically treated as capital gains and are not taxed, *unless* the company's ordinary course of business involves dealing in such assets, in which case it would be treated as revenue income.
**Real Property Gains Tax (RPGT):** This is a specific tax on gains from the disposal of real property (land and buildings) and shares in real property companies. It is **not applicable** to cryptocurrencies.
**Sales Tax:** This is a single-stage tax on taxable goods manufactured in Malaysia or imported into Malaysia. **Cryptocurrency is not considered a 'good' for sales tax purposes.** Therefore, sales tax is not applicable to the buying or selling of cryptocurrency itself.
**Service Tax:** This is a tax on certain prescribed services provided by registered businesses in Malaysia.
**Cryptocurrency Transactions Themselves:** The direct buying and selling of cryptocurrency is generally **not subject to service tax**, as it is not a prescribed taxable service.
**Related Services:** However, services provided by Digital Asset Exchanges (DAXs) or other businesses related to cryptocurrency (e.g., transaction fees, platform fees, custodial services, advisory services) **may be subject to service tax (6%)** if the service provider is a registered person under the Service Tax Act 2018 and the service falls under a taxable category. For example, financial services are generally exempt, but certain related services might not be.
If income from cryptocurrency activities is deemed taxable (e.g., as business income or employment income), individuals are required to declare this income in their **Annual Income Tax Return (Form B or Form P)**.
The income should be converted to its Ringgit Malaysia (RM) equivalent at the time of the taxable event (e.g., when received, when sold for profit).
**Record-keeping:** Individuals must keep detailed records of all cryptocurrency transactions, including:
Date of acquisition and disposal.
Companies or businesses engaging in taxable cryptocurrency activities must declare this income and any deductible expenses in their **Annual Income Tax Return (Form C)**.
Financial statements should reflect the cryptocurrency assets and related transactions appropriately.
**Record-keeping:** Businesses must maintain comprehensive records similar to individuals, but also including:
Full accounting records in compliance with accounting standards.
Audit trails for all crypto transactions.
Policies and procedures related to virtual asset management.
**Compliance with Regulatory Bodies:** Businesses operating Digital Asset Exchanges (DAXs) or offering digital assets must comply with reporting requirements set by the Securities Commission Malaysia (SC) and Bank Negara Malaysia (BNM) for Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT). This includes reporting suspicious transactions.
**Securities Commission Malaysia (SC):** Regulates digital asset exchanges (DAXs), initial coin offerings (ICOs), and the offering of digital assets that are deemed securities. The SC aims to protect investors and maintain market integrity.
*Reference:* **Securities Commission Malaysia's Guidelines on Digital Assets.** https://www.sc.com.my/regulation/guidelines/digital-assets
**Bank Negara Malaysia (BNM):** Focuses on the financial stability implications of digital assets and plays a key role in developing regulatory frameworks for anti-money laundering and counter-financing of terrorism (AML/CFT) related to virtual assets.
*Reference:* **Bank Negara Malaysia's Policy Document on Anti-Money Laundering, Counter-Terrorism Financing and Targeted Financial Sanctions for Financial Institutions (AML/CFT and TFS for FIs).** While not crypto-specific, it includes virtual asset service providers (VASPs) under its scope. https://www.bnm.gov.my/documents/20124/960529/PD_AML_CFT.pdf (Check BNM's official website for the latest version).
**Inland Revenue Board of Malaysia (LHDN / IRBM):**
**Guidelines on Digital Assets:** https://www.sc.com.my/regulation/guidelines/digital-assets (Crucial for understanding the regulatory framework, even if not directly tax-related).
Custody Requirements
Custody regulation data collection in progress.
Stablecoin Regulation
**As E-Money/Payment Token (Regulated by Bank Negara Malaysia - BNM):**
**Criteria:** If a stablecoin functions as a widely accepted medium of exchange, stores value, and is used for payment purposes, it is likely to be classified as **e-money** under the **Payment Systems Act 2003 (PSA)** and the **Financial Services Act 2013 (FSA)**.
**Key Consideration:** BNM's **Guidelines on E-Money (BNM/RH/GL 002-7)** define e-money as monetary value represented by a claim on the issuer, stored electronically, issued on receipt of funds, and accepted as a means of payment by persons other than the issuer.
**Payment Systems Act 2003:** https://www.bnm.gov.my/documents/20124/960537/Payment+Systems+Act+2003.pdf
**Financial Services Act 2013:** https://www.bnm.gov.my/documents/20124/960537/Financial+Services+Act+2013.pdf
**Guidelines on E-Money (updated 2021):** https://www.bnm.gov.my/documents/20124/938096/Guidelines+on+E-Money.pdf
**As Securities/Digital Token (Regulated by Securities Commission Malaysia - SC):**
**Criteria:** If a stablecoin is structured to represent an interest in a company, debt, or an asset, or is offered as an investment product where buyers expect a return, it may be classified as a **security token** or **digital token** under the **Capital Markets and Services Act 2007 (CMSA)**.
**Key Consideration:** The SC's **Guidelines on Digital Assets** define "digital assets" and "digital tokens" and outline the circumstances under which they are considered "securities." The crucial test is whether the token falls within the definition of "securities" in the CMSA, which includes shares, debentures, units in a collective investment scheme, and derivatives.
**Capital Markets and Services Act 2007:** https://www.sc.com.my/api/documentms/download.ashx?id=e74c7e3f-671c-4235-8663-e387c932a39a
**Guidelines on Digital Assets (Revised 2020):** https://www.sc.com.my/api/documentms/download.ashx?id=80a0669e-d716-43b8-80f2-e6e23259e8f0
**Framework for Digital Assets:** https://www.sc.com.my/regulation/guidance/guidance-note-on-digital-assets
While not explicitly termed "reserve requirements" for stablecoins, e-money issuers are subject to stringent safeguarding requirements under the Guidelines on E-Money. These include:
**Segregation of Funds:** Funds received for the issuance of e-money must be safeguarded and clearly separated from the issuer's own funds.
**Placement in Trust Accounts:** These funds typically need to be placed in trust accounts with licensed financial institutions, ensuring their availability for redemption.
**Capital Adequacy:** E-money issuers must meet minimum capital funds requirements, usually RM 5 million (for non-bank entities).
These measures ensure that the value of e-money (and thus a stablecoin classified as e-money) is fully backed and can be redeemed at par value.
**For Security Token Stablecoins (SC):**
There are no specific "reserve requirements" for the tokens themselves similar to e-money. However, the issuer of a security token would be subject to:
**Disclosure Requirements:** Comprehensive disclosure of the underlying assets, risks, and terms of the security.
**Issuance Rules:** Compliance with all capital market rules for offering and issuing securities, including potentially prospectus requirements, depending on the nature of the offer.
**Capital Requirements:** Entities involved in capital market activities (e.g., Digital Asset Exchanges, fund managers managing such assets) are subject to capital adequacy requirements set by the SC.
Any entity wishing to issue a stablecoin classified as e-money must obtain an **e-money issuer license** from Bank Negara Malaysia under the PSA. This process involves thorough due diligence, assessment of financial soundness, risk management capabilities, and compliance with all relevant guidelines.
**Issuance:** If a stablecoin is deemed a security, its issuance would fall under the CMSA. This may require SC approval for public offers, or adherence to specific exemptions.
**Trading:** Operators of platforms facilitating the trading of such stablecoins (if classified as securities) must be registered and licensed as **Digital Asset Exchanges (DAX)** by the SC. As of now, these are restricted to trading only specific types of digital assets approved by the SC.
Users of e-money (and thus stablecoins classified as such) have a statutory right to redeem their e-money for fiat currency (Ringgit Malaysia) at par value upon demand, subject to any prescribed terms and conditions related to minimum redemption amounts or processing fees. This right is fundamental to the e-money framework.
Redemption rights would depend entirely on the specific terms and conditions stipulated in the whitepaper, offering document, or smart contract of the security token itself. If it represents a debt, redemption would be governed by the debt instrument's terms. If it represents an equity interest, redemption might not be applicable in the same way.
Malaysia has **no specific rules or guidelines** addressing algorithmic stablecoins.
Given the "substance over form" approach, algorithmic stablecoins would likely face significant regulatory hurdles:
They would **not qualify as e-money** due to the lack of stable, fiat-backed reserves, making it difficult to guarantee par value redemption.
They might be considered **securities** if offered as an investment opportunity with an expectation of profit, but their inherent volatility and complex stability mechanisms could pose significant investor protection concerns for the SC.
Generally, regulators are highly skeptical of algorithmic stablecoins due to their inherent risks and past failures, making approval or classification under existing frameworks very challenging.
**Coexistence/Complementarity:** Well-regulated, fiat-backed stablecoins could potentially coexist with a CBDC, serving specific niches (e.g., cross-border payments, specific industry use cases) that a CBDC might not fully address immediately.
**Competition/Substitution:** A retail CBDC could potentially reduce the demand for private stablecoins if it offers similar benefits (efficiency, accessibility) with the added trust of central bank issuance.
**Regulatory Alignment:** BNM's research into CBDC will likely inform future policy directions for private digital currencies, including stablecoins, aiming for a consistent and robust digital payment ecosystem.
BNM's statements on CBDC exploration (search for "BNM CBDC" on their official website): https://www.bnm.gov.my/publications/digital-currencies
Securities Classification
Securities classification data collection in progress.
Sanctions & Restrictions
**Direct Implementation:** Malaysia implements UN Security Council Resolutions (UNSCRs) related to targeted financial sanctions (TFSR) through the **AMLA 2001** and specific Ministerial Orders.
The **Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities (Declaration of Specified Entities and Reporting Requirements) Order 2014** (and subsequent amendments) lists individuals and entities designated by the UN Security Council as terrorists or terrorist financiers, and those involved in proliferation financing.
**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities (Declaration of Specified Entities and Reporting Requirements) Order 2014:** While a direct official government link might be harder to find due to frequent updates, it is enacted under Section 66B of AMLA 2001 and is referenced extensively in the BNM AML/CFT and TFS Policy Document. The consolidated list is found on the UN website.
**UN Security Council Consolidated List:** https://www.un.org/securitycouncil/sanctions/consolidated-list
**VASP Obligations:** VASPs in Malaysia are required to immediately freeze the funds and assets of individuals and entities on the UN Security Council Consolidated List and the domestic list (derived from the UN list), and report such freezes to the Financial Intelligence Unit (FIU) at BNM without delay. They must also prohibit making any funds or financial services available to such designated persons.
**Indirect Applicability & Risk:** Malaysian VASPs may not be legally compelled by Malaysian law to *enforce* OFAC sanctions directly, but practical and commercial realities dictate compliance:
**Correspondent Banking Relationships:** Most Malaysian financial institutions rely on U.S. correspondent banks for international transfers. Non-compliance with OFAC sanctions could lead to de-risking by these correspondent banks, affecting a VASP's ability to conduct international transactions.
**Secondary Sanctions:** Engaging in transactions with OFAC-sanctioned entities or jurisdictions could expose a Malaysian VASP, its directors, or its personnel to secondary sanctions by the U.S. government, impacting their ability to access the U.S. financial system or conduct business with U.S. persons.
**Reputational Risk:** Associating with sanctioned entities carries significant reputational risk.
**VASP Obligations:** Due to these risks, prudent Malaysian VASPs typically screen their customers and transactions against OFAC's Specially Designated Nationals (SDN) List and other sanctions lists (e.g., related to Cuba, Iran, North Korea, Syria, Russia) as a best practice for risk management.
**Indirect Applicability & Risk:** While not directly enforceable in Malaysia, EU sanctions also carry extraterritorial implications, especially for VASPs that deal with EU customers, have EU counterparties, or process transactions involving EU financial systems. Non-compliance could lead to:
**De-risking** by EU financial institutions.
**Loss of business** with EU-connected entities.
**VASP Obligations:** Similar to OFAC, many Malaysian VASPs will screen against EU sanctions lists (e.g., the EU Sanctions Map or Consolidated List of Persons, Groups, Entities Subject to EU Financial Sanctions) as part of their robust compliance programs.
Research & Articles
Regulatory Forecast
high confidenceLikely enforcement action expected around 2026-05-10
Based on 99 historical regulatory events for Malaysia, averaging every 18 days, with increasing regulatory activity.
Recent Updates
**Penalties:** Fines and/or imprisonment for individuals under AMLA 2001.
**Penalties:** Fines and/or imprisonment for individuals under AMLA 2001.
**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001):** This is...
**Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001):** This is the cornerstone legislation. It imposes obligations on reporting institutions (which include VASPs) to detect, deter, and report suspicious transactions, and to implement robust AML/CFT measures, including sanctions screening.
**Financial Sanctions Act 2009 (FSA 2009):** This Act provides the legal basis for implementing financial sanctions i...
**Financial Sanctions Act 2009 (FSA 2009):** This Act provides the legal basis for implementing financial sanctions imposed by the United Nations Security Council (UNSC) in Malaysia. It empowers the Minister of Finance to issue freezing orders against designated persons and entities, and to enforce other restrictive measures.
**Labuan FSA Policy on Digital Asset Businesses (2020) and related Guidance Notes:** This policy document sets out th...
**Labuan FSA Policy on Digital Asset Businesses (2020) and related Guidance Notes:** This policy document sets out the regulatory framework for digital asset businesses in Labuan. It explicitly requires VASPs to comply with AMLA 2001 and FSA 2009, and to implement robust AML/CFT systems and controls. This includes:
**UN Sanctions Compliance (Direct Enforcement):**
**UN Sanctions Compliance (Direct Enforcement):**
**OFAC/EU Sanctions Compliance (Indirect but Critical Enforcement):**
**OFAC/EU Sanctions Compliance (Indirect but Critical Enforcement):**
**Sanctioned Jurisdictions:** VASPs are explicitly prohibited from engaging in transactions with individuals or entit...
**Sanctioned Jurisdictions:** VASPs are explicitly prohibited from engaging in transactions with individuals or entities located in, or associated with, jurisdictions under comprehensive UN financial sanctions (e.g., DPRK, Iran under certain resolutions). Due to the indirect enforcement mentioned above, engagement with OFAC-sanctioned jurisdictions (e.g., Cuba, Iran, North Korea, Syria, certain regions of Ukraine) and EU-sanctioned jurisdictions is also severely restricted or prohibited.
**Labuan FSA Enforcement:** LFSA can also impose administrative penalties, revoke licenses, issue directives, and tak...
**Labuan FSA Enforcement:** LFSA can also impose administrative penalties, revoke licenses, issue directives, and take other supervisory actions against non-compliant VASPs under its regulatory powers.
**Indirect Penalties (OFAC/EU):** While not Malaysian legal penalties, non-compliance with OFAC/EU sanctions can lead...
**Indirect Penalties (OFAC/EU):** While not Malaysian legal penalties, non-compliance with OFAC/EU sanctions can lead to:
**UN Security Council Consolidated List and other UN Sanctions Lists:** These are the primary lists legally enforced ...
**UN Security Council Consolidated List and other UN Sanctions Lists:** These are the primary lists legally enforced in Malaysia through the FSA 2009. BNM ensures these lists are disseminated.
**Malaysia's Domestic Terrorism Financing Lists:** While Malaysia has domestic lists related to terrorism financing, ...
**Malaysia's Domestic Terrorism Financing Lists:** While Malaysia has domestic lists related to terrorism financing, these are primarily for law enforcement purposes and less for general financial sanctions blocking obligations compared to the UN lists. Financial institutions' primary focus for blocking is the UN lists.
Labuan's regulatory framework does **not contain specific legislation solely on stablecoin redemption rights**.
Labuan's regulatory framework does **not contain specific legislation solely on stablecoin redemption rights**.
**No specific regulatory framework for private stablecoins interacting with a Central Bank Digital Currency (CBDC) in...
**No specific regulatory framework for private stablecoins interacting with a Central Bank Digital Currency (CBDC) in Labuan.**
**Malaysia's CBDC Exploration:** Bank Negara Malaysia (BNM), the central bank for Malaysia, has been actively explori...
**Malaysia's CBDC Exploration:** Bank Negara Malaysia (BNM), the central bank for Malaysia, has been actively exploring the potential issuance of a CBDC. However, this is primarily focused on the domestic Malaysian financial system and national policy.
**Specific Digital Asset/Fintech Guidelines (issued by Labuan FSA):**
**Specific Digital Asset/Fintech Guidelines (issued by Labuan FSA):**
**Regulatory Frameworks:** While tax laws are general, several regulatory bodies have issued guidelines or frameworks...
**Regulatory Frameworks:** While tax laws are general, several regulatory bodies have issued guidelines or frameworks that indirectly impact the tax treatment by defining the nature of crypto assets:
**AML/CFT and Targeted Financial Sanctions for Financial Institutions (AML/CFT TFS for FIs) Policy Document (BNM Poli...
**AML/CFT and Targeted Financial Sanctions for Financial Institutions (AML/CFT TFS for FIs) Policy Document (BNM Policy Document):** Issued by Bank Negara Malaysia, this comprehensive policy document provides detailed guidance and requirements for reporting institutions to comply with AMLATFPUAA 2001. This document has specific sections/appendices applicable to "Digital Currencies" or "Virtual Assets."
**Bank Negara Malaysia (BNM):**
**Bank Negara Malaysia (BNM):**
**Recipient:** Reports must be submitted to the Financial Intelligence Unit (FIU) within Bank Negara Malaysia.
**Recipient:** Reports must be submitted to the Financial Intelligence Unit (FIU) within Bank Negara Malaysia.
**Sanctions Screening:** Implement measures to screen customers and transactions against targeted financial sanctions...
**Sanctions Screening:** Implement measures to screen customers and transactions against targeted financial sanctions lists issued by the United Nations Security Council (UNSC) and domestic authorities to prevent terrorism financing and proliferation financing.
**Penalty Amount:** No explicit monetary fine was announced at the time of the public reprimand. The penalties were o...
**Penalty Amount:** No explicit monetary fine was announced at the time of the public reprimand. The penalties were operational: a public reprimand, an order to cease all operations in Malaysia, disable access to its website and mobile applications, and cease all media and marketing activities targeting Malaysian investors.
**Outcome:** Binance was forced to shut down its direct operations in Malaysia. Malaysian users were advised to withd...
**Outcome:** Binance was forced to shut down its direct operations in Malaysia. Malaysian users were advised to withdraw their funds. The action led Binance to later pursue a compliant pathway to re-enter the Malaysian market by acquiring a stake in and partnering with a licensed local Digital Asset Exchange (DAX), MX Global, demonstrating the effectiveness of the SC's enforcement in driving regulatory compliance.
**Penalty Amount:** Typically no specific monetary penalty is announced publicly for being added to the alert list. T...
**Penalty Amount:** Typically no specific monetary penalty is announced publicly for being added to the alert list. The "penalty" is a public warning, which often leads to the platform being unable to operate effectively in Malaysia and subsequent cessation of operations or blocking of access.
**Securities Commission Malaysia (SC) Guidelines on Digital Assets:** These guidelines, particularly the latest amend...
**Securities Commission Malaysia (SC) Guidelines on Digital Assets:** These guidelines, particularly the latest amendments, impose specific AML/CTF requirements on DAX operators (VASPs) licensed by the SC. They mandate the implementation of policies and procedures to prevent money laundering and terrorism financing, which inherently includes sanctions compliance.
**Bank Negara Malaysia (BNM) Policy Document on Anti-Money Laundering, Countering Financing of Terrorism and Targeted...
**Bank Negara Malaysia (BNM) Policy Document on Anti-Money Laundering, Countering Financing of Terrorism and Targeted Financial Sanctions (AML/CFT and TFS Policy Document):** This document sets out the regulatory requirements for financial institutions, including reporting institutions dealing with digital assets, regarding AML/CTF and targeted financial sanctions. It is mandatory for VASPs to adhere to the principles and requirements outlined in this policy.
**Direct Implementation:** Malaysia implements UN Security Council Resolutions (UNSCRs) related to targeted financial...
**Direct Implementation:** Malaysia implements UN Security Council Resolutions (UNSCRs) related to targeted financial sanctions (TFSR) through the **AMLA 2001** and specific Ministerial Orders.
**Indirect Applicability & Risk:** Malaysian VASPs may not be legally compelled by Malaysian law to *enforce* OFAC sa...
**Indirect Applicability & Risk:** Malaysian VASPs may not be legally compelled by Malaysian law to *enforce* OFAC sanctions directly, but practical and commercial realities dictate compliance:
**VASP Obligations:** Due to these risks, prudent Malaysian VASPs typically screen their customers and transactions a...
**VASP Obligations:** Due to these risks, prudent Malaysian VASPs typically screen their customers and transactions against OFAC's Specially Designated Nationals (SDN) List and other sanctions lists (e.g., related to Cuba, Iran, North Korea, Syria, Russia) as a best practice for risk management.
**Indirect Applicability & Risk:** While not directly enforceable in Malaysia, EU sanctions also carry extraterritori...
**Indirect Applicability & Risk:** While not directly enforceable in Malaysia, EU sanctions also carry extraterritorial implications, especially for VASPs that deal with EU customers, have EU counterparties, or process transactions involving EU financial systems. Non-compliance could lead to:
**VASP Obligations:** Similar to OFAC, many Malaysian VASPs will screen against EU sanctions lists (e.g., the EU Sanc...
**VASP Obligations:** Similar to OFAC, many Malaysian VASPs will screen against EU sanctions lists (e.g., the EU Sanctions Map or Consolidated List of Persons, Groups, Entities Subject to EU Financial Sanctions) as part of their robust compliance programs.
**Best Practice Screening:** Given the indirect applicability of OFAC and EU sanctions, and the global nature of cryp...
**Best Practice Screening:** Given the indirect applicability of OFAC and EU sanctions, and the global nature of crypto, leading VASPs in Malaysia will also screen against:
**Methods:** Screening should leverage reliable, up-to-date sanctions databases, often through third-party compliance...
**Methods:** Screening should leverage reliable, up-to-date sanctions databases, often through third-party compliance software solutions that integrate multiple sanctions lists and provide continuous monitoring.
**Sanctioned Jurisdictions:** Transactions with jurisdictions under comprehensive UN sanctions are strictly prohibite...
**Sanctioned Jurisdictions:** Transactions with jurisdictions under comprehensive UN sanctions are strictly prohibited. This primarily includes **North Korea** and **Iran** (subject to specific proliferation financing sanctions). Engaging in transactions with these countries, directly or indirectly, through digital assets is a severe violation.
**OFAC/EU Designated Jurisdictions:** For practical reasons and to mitigate secondary sanctions risk, many VASPs will...
**OFAC/EU Designated Jurisdictions:** For practical reasons and to mitigate secondary sanctions risk, many VASPs will avoid or apply extremely stringent controls to transactions originating from or destined for countries under broad OFAC or EU sanctions, such as **Cuba, Syria, Venezuela, and specific regions of Ukraine/Russia.**
**As E-Money/Payment Token (Regulated by Bank Negara Malaysia - BNM):**
**As E-Money/Payment Token (Regulated by Bank Negara Malaysia - BNM):**
**Bank Negara Malaysia (BNM) is actively exploring the potential issuance of a Central Bank Digital Currency (CBDC).*...
**Bank Negara Malaysia (BNM) is actively exploring the potential issuance of a Central Bank Digital Currency (CBDC).** BNM has stated its focus on understanding the strategic implications of a CBDC for Malaysia, conducting research and engaging with stakeholders.
**Legality:** Engaging in crypto trading and establishing crypto exchanges is legal, provided they comply with the SC...
**Legality:** Engaging in crypto trading and establishing crypto exchanges is legal, provided they comply with the SC's regulatory framework.
**Compliance with Regulatory Bodies:** Businesses operating Digital Asset Exchanges (DAXs) or offering digital assets...
**Compliance with Regulatory Bodies:** Businesses operating Digital Asset Exchanges (DAXs) or offering digital assets must comply with reporting requirements set by the Securities Commission Malaysia (SC) and Bank Negara Malaysia (BNM) for Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT). This includes reporting suspicious transactions.
**Bank Negara Malaysia (BNM):** Focuses on the financial stability implications of digital assets and plays a key rol...
**Bank Negara Malaysia (BNM):** Focuses on the financial stability implications of digital assets and plays a key role in developing regulatory frameworks for anti-money laundering and counter-financing of terrorism (AML/CFT) related to virtual assets.
**Sanctions Screening:** Both originator and beneficiary information must be screened against relevant sanctions lists.
**Sanctions Screening:** Both originator and beneficiary information must be screened against relevant sanctions lists.
**Fines:** Significant monetary penalties, which can run into millions of Ringgit for entities.
**Fines:** Significant monetary penalties, which can run into millions of Ringgit for entities.
**Revocation or Suspension of Licenses:** For regulated entities like DAXes, their licenses can be revoked or suspend...
**Revocation or Suspension of Licenses:** For regulated entities like DAXes, their licenses can be revoked or suspended by the SC or BNM.
**Enforcement Actions:** BNM and SC have the power to issue directives, impose administrative penalties, or take othe...
**Enforcement Actions:** BNM and SC have the power to issue directives, impose administrative penalties, or take other enforcement actions.
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.