#
Malaysia regulates digital asset trading, fundraising and custody activity through the Securities Commission Malaysia (SC) under the Capital Markets and Services Act 2007 (CMSA), as extended by the Capital Markets and Services (Prescription of Securities)(Digital Currency and Digital Token) Order 2019. Operators of digital asset exchanges (DAX) must register as a Recognised Market Operator (RMO); issuers seeking to raise funds via token issuance must use a registered Initial Exchange Offering (IEO) platform. The regime is actively enforced, with several unregistered foreign exchanges (Binance, Huobi Global, Bybit) ordered to cease Malaysian operations.
Outlook
Watch for whether the Commission extends its enforcement action against unregistered exchanges beyond the four already named, and whether the CMSL-holder broking pathway sees meaningful market uptake given its binding cross-border sourcing condition.
Crypto Licensing
Malaysia's digital-asset exchange licensing regime runs through the Securities Commission Malaysia (SC), exercising powers derived from the Capital Markets and Services Act 2007. The SC's Guidelines on Recognized Markets, now in their 14th revision and effective 20 May 2026, set the operative framework for Digital Asset Exchange (DAX) operators. Under the revised Guidelines, a DAX operator must secure SC authorisation before operating a digital-asset trading venue, and decisions on token-listing eligibility under paragraph 15.21 must now be taken at board or senior-management level under paragraph 15.22 rather than delegated further down the organisation. This is a governance tightening: listing decisions, previously handled with more operational discretion, now carry an explicit accountability requirement at the most senior level of the operator.
The most consequential change is prudential. A new paragraph 15.04 requires DAX operators to maintain a minimum shareholders' fund in the form of cash or liquid assets, excluding Digital Assets, and to hold that fund segregated from operating accounts. Independent annual custody assessments are now mandatory alongside this segregation requirement. For operators licensed before 20 May 2026, this is not an immediate change: they are permitted to continue meeting the prior, lower paid-up capital requirement until 20 May 2028, at which point the new segregated-fund standard becomes mandatory for the entire sector without exception. This creates a two-tier capital landscape for the next two years, with newly licensed operators subject to the full standard immediately and incumbents operating on a longer runway.
Enforcement against unregistered activity continues to anchor the licensing perimeter. Bybit Technology Ltd was directed by the SC to cease operating its website, mobile applications and other digital platforms in Malaysia within 14 business days of 11 December 2024, for operating without registration under the Capital Markets and Services Act 2007. The SC's May 2026 statement on the revised Guidelines also referenced other unregistered DAX operators drawing similar scrutiny, indicating that the enforcement perimeter against unlicensed exchanges remains active alongside the prudential tightening applied to licensed operators. As of September 2026, Malaysia's regulated population comprised five licensed digital asset exchanges, three digital asset custodians, and two Initial Exchange Offering operators, a narrow but formally licensed cohort operating under an increasingly detailed supervisory framework.
Outlook
The defining date ahead for this module is 20 May 2028, when the segregated-shareholders'-fund requirement under paragraph 15.04 becomes mandatory for all DAX operators, closing the transitional window currently available to pre-20 May 2026 incumbents. Until then, expect a bifurcated compliance landscape between newly licensed and legacy operators. The SC's demonstrated willingness to act against unregistered platforms, as shown in the Bybit direction, suggests licensing-perimeter enforcement will continue in parallel with the phased prudential rollout, rather than being treated as a settled, closed matter.
2 earlier distinct update(s)
Crypto Licensing
Malaysia's Digital Asset Exchange licensing regime, administered by the Securities Commission under the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019, was revised this cycle through the Guidelines on Recognized Markets, effective 20 May 2026. The revision raises financial, shareholding and governance standards applicable to DAX operators, representing the most significant modernisation of Malaysia's crypto-licensing framework identified this cycle. The revision was paired with concrete enforcement: administrative action was taken against four digital-asset exchanges found to be operating without registration, and advertising restrictions took effect from 14 April 2026, evidently supported in part by cooperation with Google on ad-placement restrictions targeting unregistered platforms.
A transitional compliance mechanism accompanies the revision: DAX operators registered prior to 20 May 2026 have until 20 May 2028 to comply fully with the new minimum shareholders'-funds requirements. This two-year runway reflects a proportionate approach to imposing materially higher capital standards on an already-registered incumbent population, rather than requiring immediate compliance that could disrupt existing licensed operations. The combination of raised standards, a proportionate transition mechanism, and active enforcement against unregistered operators indicates a licensing regime that is simultaneously modernising and defending its perimeter.
Outlook
The 20 May 2028 transitional deadline is the principal date to track for Malaysia's crypto-licensing framework going forward. In the nearer term, watch for whether the four exchanges subject to this cycle's administrative action achieve registration, cease Malaysian operations, or face further enforcement, any of which would clarify how strictly the Securities Commission intends to police the boundary between registered and unregistered digital-asset-exchange activity.
Crypto Licensing
Malaysia's crypto-licensing framework rests on the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019, which classifies digital currencies and digital tokens as securities and establishes the Securities Commission Malaysia's jurisdictional basis over the asset class. Operating a digital-asset exchange in Malaysia requires registration as a Recognized Market Operator specifically authorised to run a digital-asset exchange, a requirement that has been in force since the 2019 Order and functions as the core gateway into Malaysia's regulated crypto market. As of 3 December 2025, six Recognised Market Operators were registered to establish and operate digital-asset exchanges in the jurisdiction, confirming this is an active and populated licensing category rather than a framework existing on paper without market participants.
This cycle brings a substantive update to the licensing framework: the Securities Commission's revised Guidelines on Recognized Markets took effect 20 May 2026, strengthening the financial standing, shareholding structure, and management-proficiency requirements imposed on registered digital-asset-exchange operators, alongside reinforced requirements for safeguarding investors' assets. At the same time, the revision liberalises the token-listing framework itself, streamlining the approval process for new digital assets to be listed on registered exchanges. The combined effect is a licensing regime that is simultaneously raising the bar for who may operate an exchange while lowering the bar for what may be listed on one, a recalibration of where regulatory friction sits within the market structure rather than a uniform tightening or loosening.
Outlook
The question for coming cycles is whether the six currently registered Recognised Market Operators can all satisfy the strengthened financial, shareholding and management-proficiency standards, or whether the revised guidelines produce consolidation, exits, or a wave of new applications from entities better positioned to meet the higher bar. The streamlined token-listing pathway is a separate development to watch for whether it produces a measurable increase in the number of tokens available on registered Malaysian exchanges in coming cycles.
1 further periodic run re-emitted the standing brief unchanged and is not shown.
Sources and findings (4)
- T4 · The BlockThe Block — Operating a digital asset exchange (DAX) in Malaysia without registering as a Recognised Market Operator (RMO) with the SC is an offence under Section 7(1) of the Capital Markets and Services Act 2007.retrieved M5bindingin force
- T3 · CoinDeskCoinDesk — The Capital Markets and Services (Prescription of Securities)(Digital Currency and Digital Token) Order 2019 brought digital currency and digital token offerings and exchanges within the SC's licensing/registration remit, effective 15 January 2019.retrieved M5bindingin force
- T4 · The BlockThe Block — As of December 2024, six digital asset exchanges were registered with the SC to legally operate in Malaysia, and investors trading on unregistered platforms are not protected under Malaysian securities laws.retrieved M3non-binding
- T3 · CoinDeskCoinDesk — SC has taken direct enforcement action against unregistered digital asset exchanges operating in Malaysia, ordering Binance to halt operations in 2021, Huobi Global in 2023, and Bybit in December 2024.retrieved M4bindingin force