--- title: "Malaysia Crypto Regulation Monitor | cryptoassets.gi" canonical: https://cryptoassets.gi/jurisdictions/malaysia/ source_html: /jurisdictions/malaysia/index.html description: "Malaysia crypto asset regulation: 9 categories, 40 sourced findings, updated 2026-10-25. Licensing, token classification, stablecoins, tax treatment." generated_at: 2026-11-07T14:19:44Z content_sha256: 233006eca6be7e7be457b1b9a347a5e4b007754f7c130e4b7c344a4c7cbb9e8b generator: "fe-fleet/md-twin@1.0" --- # Malaysia Crypto & Digital Asset Regulation schema crypto-v2.0.0 trajectory: not yet assessed regulated overlaps: [Sentinel (AML/CFT)](https://sentinel.gi/jurisdictions/malaysia/), [World Payments](https://payments.gi/jurisdictions/malaysia/) Last updated 2026-10-25 · 9 categories · 40 sourced findings · 29 sources in the cumulative register Download report (PDF) Expand all Evidence re-verified: 2026-10-25 · Position last changed: 2026-10-25 · Record history & provenance ▾ Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently. Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26 [Open in Co-Pilot ↗](/reports/?type=copilot&j=MALAYSIA)[Build Report](/reports/?j=MALAYSIA)[Compare](/compare/?j=MALAYSIA) Framework posture Regulated 8 of 9 modules populated · AI-synthesised · Tier-1/2 verified Lead supervisory authority The Block Primary statutory & supervisory perimeter Next milestone (> 2026-10-26) 2028-05-20 DAX incumbent transitional capital-rule deadline Module coverage & confidence 8 / 9 modules assessed 0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed 9 Categories 0 Moved this cycle 0 Key judgments 3 Open gaps 40 Findings 1 Tier-1 sources Confidence mix 9 unpopulated (sums to 9 rendered categories; click to filter) No categories moved this cycle. ## Jurisdiction lead brief ###### Latest update · 25 October 2026 #### Lead Signal Malaysia's Securities Commission has tightened the prudential perimeter around digital asset exchanges through a fourteenth revision of its Guidelines on Recognized Markets, effective 20 May 2026. Operators must now maintain minimum shareholders funds equal to the higher of RM5 million, or RM7 million for exchanges using a Direct Trade model, or 25% of annual operating expenses, held segregated from operating accounts. Exchanges already registered before that date have until 20 May 2028 to comply, giving the market a two-year transition window rather than an immediate step-change. Alongside the capital revision, the Commission has continued enforcement against exchanges operating without registration, taking administrative action against four such platforms and restricting their advertising to Malaysian users via Google from 14 April 2026. #### Other Developments Initial Exchange Offering operators now face explicit custody obligations. An IEO operator must establish and maintain a trust account with a licensed Malaysian financial institution and implement controls, including multi-signature arrangements, to safeguard investors monies and digital tokens from conversion or inappropriate use by any person. This sits within the Commission's broader investor-protection architecture for token issuance platforms operating under the Recognized Markets framework. Digital asset exchange operators are being brought into a formal dispute-resolution channel. Operators will become members of the Financial Markets Ombudsman Service during 2026, giving retail investors a structured avenue for complaints against exchanges that was not previously available on a mandatory basis across the sector. #### Cross-Monitor Connections The capital-floor increase and continued enforcement against unregistered exchanges intersect with concerns tracked elsewhere regarding professional-enabler and corporate-vehicle exploitation risk, insofar as a digital asset exchange operating outside the registered perimeter represents the same class of supervisory blind spot that other enablers can represent in traditional financial structures. The custody and trust-account obligations placed on Initial Exchange Offering operators are also relevant to any assessment of payment-rail integrity where token issuance platforms intersect with licensed Malaysian financial institutions holding investor funds in trust. #### Outlook The principal forward marker is the 20 May 2028 deadline by which exchanges registered before the May 2026 revision must meet the new, higher capital floor. Firms using the Direct Trade model face the steepest step, at RM7 million, and the intervening two years are likely to see continued supervisory attention to the pace of compliance. The admission of exchanges to the Financial Markets Ombudsman Service during 2026 should also be watched for its practical effect on complaint volumes and resolution patterns in a market that previously lacked a mandatory sector-wide dispute channel, while enforcement against unregistered operators appears set to continue as a standing feature of the Commission's posture rather than a one-off action. 4 earlier updates not shown here. ###### Standing brief · as of 25 August 2026 Written before the update above. Where they differ, the update is the more recent position. #### Lead Signal Malaysia's digital asset regime moved on two fronts simultaneously this cycle: the Securities Commission tightened enforcement against unregistered digital asset exchanges while also opening a new broking pathway for Capital Markets Services Licence holders. The Commission has taken administrative action against four exchanges found operating without registration or recognition under the Capital Markets and Services Order 2019, evidencing active perimeter enforcement of the existing licensing framework. At the same time, the Commission's 30 January 2026 clarification permits CMSL holders to offer digital-asset broking services, subject to a binding condition that they source digital assets only from a registered exchange or a comparably-regulated offshore counterparty with the Commission's concurrence. This combination, simultaneous enforcement tightening and market-access liberalisation, is the defining signal of the cycle and should be read as a mixed but net-active regulatory trajectory rather than a one-directional shift. #### Other Developments Financial Markets Ombudsman Service membership incoming. All digital asset exchange operators will become members of the Financial Markets Ombudsman Service beginning in 2026, a forward-looking obligation, not yet effective, that will add a formal dispute-resolution mechanism for investors once it lands. Investor asset-safeguarding requirements strengthened. The Securities Commission's 14th revision of the Guidelines on Recognized Markets, effective 20 May 2026, strengthens requirements relating to the safeguarding of digital asset exchange investors' assets, a net-positive development for investor protection specifically within the regulated exchange perimeter. Cross-border sourcing restriction now binding. The same 30 January 2026 clarification that opened CMSL-holder broking also imposes a binding restriction: broking firms must source digital assets only from a registered exchange or an offshore counterparty regulated to comparable standards, with the Commission's concurrence required. #### Cross-Monitor Connections This cycle's crypto developments intersect with the financial-integrity monitor's coverage of Malaysia: the financial-integrity monitor separately tracks that digital asset exchanges remain full-scope AMLA reporting institutions subject to customer due diligence, transaction monitoring, targeted financial sanctions screening, and suspicious-transaction-report obligations, a scope that is unchanged despite the licensing liberalisation described above. No overlap with the world-payments or advennt monitors was identified in this cycle's crypto-specific evidence. #### Outlook Watch for whether the Financial Markets Ombudsman Service membership requirement takes effect on schedule during 2026, and whether the Commission extends its enforcement action against unregistered exchanges beyond the four already named. The interaction between the newly-liberalised CMSL-holder broking pathway and its binding cross-border sourcing condition will be the clearest test of whether Malaysia's simultaneous tightening-and-liberalising approach holds together in practice, or whether the sourcing restriction proves to be a meaningful constraint on the new broking activity's growth. Read full brief · 888 words Key regulatory facts for Malaysia Regulatory Dimension Malaysia Standing Position Jurisdiction Malaysia (MY) Regulatory Scope Crypto & Digital Asset Regulation (9 modules, 40 sourced findings) Crypto Licensing Malaysia regulates digital asset trading, fundraising and custody activity through the Securities Commission Malaysia (SC) under the Capital Markets and Services Act 2007 (CMSA), as extended by the Capital Markets... Token Classification Malaysia's Prescription Order 2019 deems 'digital currency' and 'digital token' meeting prescribed criteria to be securities, bringing them under CMSA disclosure/registration rules. On-Chain Activity Regime Malaysia's on-chain activity oversight is concentrated on fundraising/tokenisation via SC-registered Initial Exchange Offering (IEO) platforms. Stablecoin Regime Malaysia has no finalised statutory stablecoin-issuance authorisation regime. Primary Instruments Cited The Block, CoinDesk, CoinDesk, Securities Commission Malaysia, Securities Commission Malaysia Last Confirmed / Updated 2026-10-25 (29 sources in cumulative register) 9 of 9 categories Signal Moved Judgment Gap Density Comfortable Compact Expand all sources Reset all Selections OR within a group, AND across groups. Press / to search. ### Malaysia: C1 Crypto LicensingAmberEnacted in forceModule confidence: Probable▾ Malaysia regulates digital asset trading, fundraising and custody activity through the Securities Commission Malaysia (SC) under the Capital Markets and Services Act 2007 (CMSA), as extended by the Capital Markets and Services (Prescription of Securities)(Digital Currency and Digital Token) Order 2019. Operators of digital asset exchanges (DAX) must register as a Recognised Market Operator (RMO); issuers seeking to raise funds via token issuance must use a registered Initial Exchange Offering (IEO) platform. The regime is actively enforced, with several unregistered foreign exchanges (Binance, Huobi Global, Bybit) ordered to cease Malaysian operations. Horizon · 2028-05-20 (± a quarter) DAX transitional shareholders'-funds compliance deadline Adopted, not yet in force · Tier 3 source Horizon · 2028-05-20 (± more than a year) DAX operator transitional capital/shareholding deadline Adopted, not yet in force · Tier 3 source Horizon · 2028-05-20 (± more than a year) DAX incumbent transitional capital-rule deadline Adopted, not yet in force · Tier 3 source Horizon · 2028-05-20 (± more than a year) DAX operator capital-floor transition deadline Adopted, not yet in force · Tier 3 source #### Crypto Licensing Malaysia's digital asset exchange regime tightened and liberalised simultaneously this cycle. The Securities Commission Malaysia requires digital asset exchange operators to be registered or recognised under the Capital Markets and Services Order 2019, and has taken administrative action against four exchanges found operating without such registration, indicating active supervisory enforcement of the registration perimeter. Separately, the SC clarified on 30 January 2026 that Capital Markets Services Licence holders may offer digital-asset broking services, subject to prescribed conditions including sourcing digital assets only from a registered exchange or a comparably-regulated offshore counterparty. Looking ahead, all digital asset exchange operators will become members of the Financial Markets Ombudsman Service beginning in 2026, a forward-looking obligation not yet effective but adding a formal dispute-resolution channel once it lands. #### Outlook Watch for whether the Commission extends its enforcement action against unregistered exchanges beyond the four already named, and whether the CMSL-holder broking pathway sees meaningful market uptake given its binding cross-border sourcing condition. Read full sub-brief · 161 words Periodic update · new data 2026-10-25 #### Crypto Licensing A person operating a digital asset exchange in Malaysia must be registered by the Securities Commission as a Recognised Market Operator under the Capital Markets and Services Act 2007, a requirement dating to the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019 and set out in the Guidelines on Recognized Markets for Digital Asset Exchange. This registration requirement is in force and has been the foundation of the Malaysian digital asset exchange perimeter since January 2019. The Commission has now enhanced that framework through a fourteenth revision of the Guidelines, effective 20 May 2026, which raises the prudential bar for registered operators. A digital asset exchange operator must maintain minimum shareholders funds at all times equal to the higher of RM5 million, or RM7 million where the operator runs a Direct Trade model, or 25% of annual operating expenses, with those funds segregated from operating accounts. Operators registered before 20 May 2026 are given a transition period running to 20 May 2028 to come into compliance, which means the market-wide effect of the new floor will play out gradually over roughly two years rather than immediately. Malaysia currently hosts five regulated crypto exchanges, three digital asset custodians, and two Initial Exchange Offering operators operating under this registered perimeter. Alongside the capital revision, the Commission has continued to police the boundary of the registered perimeter itself. It has taken administrative action against four exchanges found to be operating without registration, and from 14 April 2026 restricted the ability of unregistered digital asset exchanges to advertise to Malaysian users via Google. Neither the administrative action's penalty details nor the identities of the four platforms have been disclosed in the available reporting, which limits the ability to assess the severity of the response, but the direction of travel is clear: continued active enforcement against unregistered operation rather than a reactive, one-off intervention. Taken together, the capital-floor increase and the parallel enforcement activity point to a tightening trajectory for the licensing module. The registration requirement itself is unchanged in substance, remaining anchored to the 2019 Order and the Capital Markets and Services Act 2007, but the prudential conditions attached to holding that registration have been raised meaningfully, and the Commission has signalled continued intolerance for operation outside the registered perimeter. #### Outlook The transition deadline of 20 May 2028 is the clearest forward marker for this module. Firms using the Direct Trade model, which carries the highest capital floor at RM7 million, face the most significant adjustment, and the two-year runway suggests the Commission is managing this as a structural upgrade to sector resilience rather than seeking an immediate contraction in the number of registered operators. Continued administrative action against unregistered exchanges, together with the Google advertising restriction introduced in April 2026, suggests perimeter enforcement will remain a standing feature of the Commission's posture through the transition period. 3 earlier distinct update(s) Periodic update · new data 2026-10-18 #### Crypto Licensing Malaysia's digital-asset exchange licensing regime runs through the Securities Commission Malaysia (SC), exercising powers derived from the Capital Markets and Services Act 2007. The SC's Guidelines on Recognized Markets, now in their 14th revision and effective 20 May 2026, set the operative framework for Digital Asset Exchange (DAX) operators. Under the revised Guidelines, a DAX operator must secure SC authorisation before operating a digital-asset trading venue, and decisions on token-listing eligibility under paragraph 15.21 must now be taken at board or senior-management level under paragraph 15.22 rather than delegated further down the organisation. This is a governance tightening: listing decisions, previously handled with more operational discretion, now carry an explicit accountability requirement at the most senior level of the operator. The most consequential change is prudential. A new paragraph 15.04 requires DAX operators to maintain a minimum shareholders' fund in the form of cash or liquid assets, excluding Digital Assets, and to hold that fund segregated from operating accounts. Independent annual custody assessments are now mandatory alongside this segregation requirement. For operators licensed before 20 May 2026, this is not an immediate change: they are permitted to continue meeting the prior, lower paid-up capital requirement until 20 May 2028, at which point the new segregated-fund standard becomes mandatory for the entire sector without exception. This creates a two-tier capital landscape for the next two years, with newly licensed operators subject to the full standard immediately and incumbents operating on a longer runway. Enforcement against unregistered activity continues to anchor the licensing perimeter. Bybit Technology Ltd was directed by the SC to cease operating its website, mobile applications and other digital platforms in Malaysia within 14 business days of 11 December 2024, for operating without registration under the Capital Markets and Services Act 2007. The SC's May 2026 statement on the revised Guidelines also referenced other unregistered DAX operators drawing similar scrutiny, indicating that the enforcement perimeter against unlicensed exchanges remains active alongside the prudential tightening applied to licensed operators. As of September 2026, Malaysia's regulated population comprised five licensed digital asset exchanges, three digital asset custodians, and two Initial Exchange Offering operators, a narrow but formally licensed cohort operating under an increasingly detailed supervisory framework. #### Outlook The defining date ahead for this module is 20 May 2028, when the segregated-shareholders'-fund requirement under paragraph 15.04 becomes mandatory for all DAX operators, closing the transitional window currently available to pre-20 May 2026 incumbents. Until then, expect a bifurcated compliance landscape between newly licensed and legacy operators. The SC's demonstrated willingness to act against unregistered platforms, as shown in the Bybit direction, suggests licensing-perimeter enforcement will continue in parallel with the phased prudential rollout, rather than being treated as a settled, closed matter. Periodic update · new data 2026-09-28 #### Crypto Licensing Malaysia's Digital Asset Exchange licensing regime, administered by the Securities Commission under the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019, was revised this cycle through the Guidelines on Recognized Markets, effective 20 May 2026. The revision raises financial, shareholding and governance standards applicable to DAX operators, representing the most significant modernisation of Malaysia's crypto-licensing framework identified this cycle. The revision was paired with concrete enforcement: administrative action was taken against four digital-asset exchanges found to be operating without registration, and advertising restrictions took effect from 14 April 2026, evidently supported in part by cooperation with Google on ad-placement restrictions targeting unregistered platforms. A transitional compliance mechanism accompanies the revision: DAX operators registered prior to 20 May 2026 have until 20 May 2028 to comply fully with the new minimum shareholders'-funds requirements. This two-year runway reflects a proportionate approach to imposing materially higher capital standards on an already-registered incumbent population, rather than requiring immediate compliance that could disrupt existing licensed operations. The combination of raised standards, a proportionate transition mechanism, and active enforcement against unregistered operators indicates a licensing regime that is simultaneously modernising and defending its perimeter. #### Outlook The 20 May 2028 transitional deadline is the principal date to track for Malaysia's crypto-licensing framework going forward. In the nearer term, watch for whether the four exchanges subject to this cycle's administrative action achieve registration, cease Malaysian operations, or face further enforcement, any of which would clarify how strictly the Securities Commission intends to police the boundary between registered and unregistered digital-asset-exchange activity. Periodic update · new data 2026-09-14 #### Crypto Licensing Malaysia's crypto-licensing framework rests on the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019, which classifies digital currencies and digital tokens as securities and establishes the Securities Commission Malaysia's jurisdictional basis over the asset class. Operating a digital-asset exchange in Malaysia requires registration as a Recognized Market Operator specifically authorised to run a digital-asset exchange, a requirement that has been in force since the 2019 Order and functions as the core gateway into Malaysia's regulated crypto market. As of 3 December 2025, six Recognised Market Operators were registered to establish and operate digital-asset exchanges in the jurisdiction, confirming this is an active and populated licensing category rather than a framework existing on paper without market participants. This cycle brings a substantive update to the licensing framework: the Securities Commission's revised Guidelines on Recognized Markets took effect 20 May 2026, strengthening the financial standing, shareholding structure, and management-proficiency requirements imposed on registered digital-asset-exchange operators, alongside reinforced requirements for safeguarding investors' assets. At the same time, the revision liberalises the token-listing framework itself, streamlining the approval process for new digital assets to be listed on registered exchanges. The combined effect is a licensing regime that is simultaneously raising the bar for who may operate an exchange while lowering the bar for what may be listed on one, a recalibration of where regulatory friction sits within the market structure rather than a uniform tightening or loosening. #### Outlook The question for coming cycles is whether the six currently registered Recognised Market Operators can all satisfy the strengthened financial, shareholding and management-proficiency standards, or whether the revised guidelines produce consolidation, exits, or a wave of new applications from entities better positioned to meet the higher bar. The streamlined token-listing pathway is a separate development to watch for whether it produces a measurable increase in the number of tokens available on registered Malaysian exchanges in coming cycles. 1 further periodic run re-emitted the standing brief unchanged and is not shown. Sources and findings (13) - T4[The Block](https://www.theblock.co/post/332552/malaysia-orders-bybit-to-halt-local-operations-over-registration-failure) — Operating a digital asset exchange (DAX) in Malaysia without registering as a Recognised Market Operator (RMO) with the SC is an offence under Section 7(1) of the Capital Markets and Services Act 2007. - T3[CoinDesk](https://www.coindesk.com/markets/2019/01/14/malaysia-to-regulate-icos-as-securities-offerings-from-tuesday/) — The Capital Markets and Services (Prescription of Securities)(Digital Currency and Digital Token) Order 2019 brought digital currency and digital token offerings and exchanges within the SC's licensing/registration remit, effective 15 January 2019. - T4[The Block](https://www.theblock.co/post/332552/malaysia-orders-bybit-to-halt-local-operations-over-registration-failure) — As of December 2024, six digital asset exchanges were registered with the SC to legally operate in Malaysia, and investors trading on unregistered platforms are not protected under Malaysian securities laws. - T3[CoinDesk](https://www.coindesk.com/policy/2025/01/16/malaysia-weighs-introduction-of-crypto-blockchain-legislation) — SC has taken direct enforcement action against unregistered digital asset exchanges operating in Malaysia, ordering Binance to halt operations in 2021, Huobi Global in 2023, and Bybit in December 2024. - T1[Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — registration as a Recognised Market Operator (RMO) for operating a Digital Asset Exchange (DAX) - T3[Securities Commission Malaysia](https://www.bitget.com/news/detail/12560605499513) — segregated minimum shareholders' fund and at least one Institutional Corporation shareholder with 5%+ equity and a board seat for licensed DAX operators - T1[Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — four unregistered DAX operators; restricted via Google Ads compliance gate from advertising to Malaysians, effective 14 April 2026 - T1[Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — Digital Asset Exchange (DAX) operators must be registered under the Guidelines on Recognized Markets, revised effective 20 May 2026 with raised financial, shareholding and governance standards - T1[Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — Administrative action taken against four digital asset exchanges operating without registration, with Google-assisted advertising restrictions from 14 April 2026 - T3[DAX operators](https://www.lexology.com/library/detail.aspx?g=25e073b6-a1da-4dae-ac1b-4b607768088a) — DAX operators registered prior to 20 May 2026 have until 20 May 2028 to comply with new minimum shareholders'-funds requirements - T1[Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — A person operating a digital asset exchange in Malaysia must be registered by the SC as a Recognised Market Operator (RMO) under the Capital Markets and Services Act 2007, per Order 2019 and the Guidelines on Recognized Markets DAX Framework. - T3[Digital Asset Exchange (DAX) operator](https://www.lexology.com/library/detail.aspx?g=25e073b6-a1da-4dae-ac1b-4b607768088a) — A DAX operator must maintain minimum shareholders' funds equal to the higher of RM5 million (RM7 million for Direct Trade model) or 25% of annual operating expenses, segregated from operating accounts; operators registered before 20 May 2026 have until 20 May 2028 to comply. - T1[Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — The SC has taken administrative action against four exchanges operating without registration, and restricted unregistered DAX advertising to Malaysians via Google from 14 April 2026. ### Malaysia: C2 Token ClassificationAmberEnacted in forceModule confidence: Probable▾ Malaysia's Prescription Order 2019 deems 'digital currency' and 'digital token' meeting prescribed criteria to be securities, bringing them under CMSA disclosure/registration rules. Tokens that do not meet the prescribed criteria (e.g. pure utility tokens) fall outside this prescribed-securities perimeter, creating an unclassified residual category. Privately issued stablecoins (e.g. the RMJDT ringgit-pegged token) currently sit outside any dedicated statutory token-classification test. C2 · Token Classification — Full Module Record 0 sub-modules · 180 words · 7 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login) [View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malaysia: C3 On-Chain Activity RegimeAmberEnacted in forceModule confidence: Probable▾ Malaysia's on-chain activity oversight is concentrated on fundraising/tokenisation via SC-registered Initial Exchange Offering (IEO) platforms. No SC or BNM instrument located during this research specifically addresses staking, DeFi lending, DEX operation, mining, node operation, or validator activity; these remain outside any identified dedicated regime as of the research date. C3 · On-Chain Activity — Full Module Record 0 sub-modules · 180 words · 2 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malaysia: C4 Stablecoin RegimeRedEnacted in forceModule confidence: Probable▾ Malaysia has no finalised statutory stablecoin-issuance authorisation regime. BNM's Digital Asset Innovation Hub (DAIH) is onboarding a B2B ringgit stablecoin settlement pilot (Standard Chartered Malaysia / Capital A) and two tokenised-deposit pilots (Maybank, CIMB) in 2026, with BNM stating it intends to provide greater clarity on ringgit stablecoin and tokenised-deposit use by end-2026. Separately, a private ringgit-pegged stablecoin (RMJDT) has already launched without a dedicated BNM authorisation framework. C4 · Stablecoins & EMTs — Full Module Record 0 sub-modules · 180 words · 3 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malaysia: C5 Consumer ProtectionAmberEnacted in forceModule confidence: Probable▾ SC enforcement practice shows consumer-protection levers operating through registration conditions: unregistered platforms are ordered to cease advertising/marketing to Malaysian investors, and the SC issues public advisories that trading on unregistered platforms is unprotected under securities law. No dedicated custody-segregation or complaint-handling instrument specific to digital assets was located during this research pass. #### Consumer Protection The Securities Commission's 14th revision of the Guidelines on Recognized Markets, effective 20 May 2026, strengthens requirements relating to the safeguarding of digital asset exchange investors' assets, a net-positive custody and segregation development for this cycle. This sits alongside the forthcoming requirement for all digital asset exchange operators to join the Financial Markets Ombudsman Service beginning in 2026, which will give investors a formal, out-of-court dispute-resolution channel for the first time. #### Outlook Watch for whether the Ombudsman Service membership requirement takes effect on schedule during 2026, and whether the strengthened safeguarding requirements produce any visible enforcement action against exchanges falling short of the new standard. Read full sub-brief · 107 words Periodic update · new data 2026-10-25 #### Consumer Protection Malaysia's Securities Commission has strengthened investor-protection obligations on digital asset market participants through two distinct mechanisms. First, Initial Exchange Offering operators are now required to establish and maintain a trust account with a licensed Malaysian financial institution and to implement controls, including multi-signature arrangements, specifically designed to ensure that investors monies and digital tokens are properly safeguarded from conversion or inappropriate use by any person. This custody obligation sits within the Commission's Guidelines and applies to token issuance activity conducted through the IEO channel, which currently comprises two operators in the Malaysian market. Second, digital asset exchange operators are being brought into the Financial Markets Ombudsman Service during 2026, giving retail investors who transact with registered exchanges a formal, structured dispute-resolution channel that was announced as part of the same wave of guideline revisions that raised capital requirements for exchange operators. This extends to the digital asset sector a dispute-resolution mechanism that investors in other parts of the Malaysian capital market already rely upon, rather than leaving digital asset exchange customers dependent on bilateral complaint handling by the operator itself. Together, these two developments represent a tightening of the investor-protection architecture surrounding Malaysia's registered digital asset market, addressing two different points of potential investor harm: the custody and segregation of funds at the point of token issuance, and the availability of redress once a dispute with an exchange has arisen. Neither development introduces a dedicated crypto market-abuse regime, and no such regime has been located in the available sourcing, which remains a gap in the broader consumer-protection architecture even as the custody and redress elements are strengthened. The custody requirement for IEO operators is of particular note because it specifies a concrete operational control, a licensed-institution trust account combined with multi-signature arrangements, rather than a general principle of safekeeping. This gives the obligation practical teeth and a means of verification that a general safeguarding duty would not necessarily provide. #### Outlook The practical effect of DAX operators joining the Financial Markets Ombudsman Service during 2026 will become clearer as complaint volumes and resolution outcomes begin to accumulate under the new channel. The continued absence of a dedicated crypto market-abuse regime remains the most significant open gap in the consumer-protection architecture, and whether the Commission moves to address that gap, as distinct from the custody and redress improvements already made, is the principal question to watch going forward. 3 earlier distinct update(s) Periodic update · new data 2026-10-18 #### Consumer Protection Malaysia's consumer-protection architecture for digital-asset exchange users is being strengthened on two fronts simultaneously: dispute resolution and custodial soundness. All Digital Asset Exchange (DAX) operators are set to become members of the Financial Markets Ombudsman Service beginning in 2026, which will give investors access to a formal dispute-resolution mechanism specific to the digital-asset sector for the first time. The exact commencement date within 2026 for this membership requirement has not been specified in available reporting, but the direction of travel is clear: retail users of regulated exchanges will gain an institutional complaints channel that previously did not exist for this asset class in Malaysia. Alongside the Ombudsman membership requirement, the Securities Commission's revised Guidelines on Recognized Markets, effective 20 May 2026, introduce mandatory independent annual custody assessments for DAX operators and require a segregated minimum shareholders' fund, held in cash or liquid assets and excluded from Digital Assets, separate from operating accounts under new paragraph 15.04. Although framed as a prudential capital rule, this requirement functions as consumer protection in substance: it is designed to ensure client assets and operator solvency are kept structurally apart, reducing the risk that an operator's own financial distress exposes customer holdings. Token-level consumer safeguards have also been reinforced. Under paragraph 15.26 as amended, a DAX operator may not list a Nascent Utility Token to retail investors, restricting a category of less-established tokens to sophisticated investors only. The same provision requires prior consultation with Bank Negara Malaysia before a DAX operator may list a stablecoin, adding a second regulator's sign-off to the listing pathway for that asset class. Whether a dedicated, crypto-specific market-abuse regime exists alongside these protections has not been independently confirmed; general market-conduct provisions under the Capital Markets and Services Act 2007 may extend to digital-asset trading, but no source specific to this question was located. #### Outlook The Ombudsman Service membership rollout and the custody/segregation requirements under paragraph 15.04 together mark a shift toward treating DAX consumer protection as a structural, standing feature of the licensing regime rather than an ancillary concern. Watch for confirmation of the specific 2026 commencement date for mandatory Ombudsman membership, and for any clarification of whether crypto-specific market-conduct rules will be added to supplement the general CMSA 2007 framework. Periodic update · new data 2026-09-28 #### Consumer Protection Malaysia's digital-asset-exchange consumer-protection framework strengthened concretely this cycle through the same Guidelines on Recognized Markets revision that tightened licensing standards. DAX operators became members of the Financial Markets Ombudsman Service (FMOS) in 2026, providing investors with a formal, independent dispute-resolution channel for complaints against exchange operators that had not previously been available in this sector. This closes a structural gap in Malaysia's crypto-consumer-protection architecture, since digital-asset-exchange customers had previously lacked the kind of formal ombudsman recourse available to consumers of more traditional regulated financial products. Alongside FMOS membership, minimum shareholders'-funds requirements for DAX operators now specify that qualifying funds must be held in cash or liquid assets excluding digital assets themselves, and must be segregated from operating accounts. This segregation requirement is a direct structural safeguard against the commingling risk that has historically been a significant vulnerability in digital-asset-exchange failures generally, where client-protection capital held in volatile digital-asset form or mixed with operating funds has proven insufficient to protect customers when an exchange becomes distressed. Requiring segregation in liquid, non-digital-asset form materially reduces this specific failure mode for Malaysian-registered exchanges. #### Outlook Watch for the first cases brought to the Financial Markets Ombudsman Service involving DAX-operator complaints, which will provide an early indication of how the new dispute-resolution channel functions in practice for digital-asset consumers. The segregation and liquidity requirements for minimum shareholders' funds should also be monitored for how they interact with the 20 May 2028 transitional compliance deadline applicable to pre-existing DAX operators. Periodic update · new data 2026-09-14 #### Consumer Protection Malaysia's digital-asset consumer-protection framework strengthened on two distinct fronts this cycle, both dated within 2026. First, the Financial Markets Ombudsman Service is set to admit digital-asset-exchange operators as members starting in 2026, extending an independent dispute-resolution mechanism to investors dealing with registered exchanges, a recourse channel that gives retail participants a formal avenue for complaints beyond internal exchange processes or general civil litigation. Second, the Securities Commission Malaysia partnered with Google to restrict unregistered digital-asset-exchange operators from advertising to Malaysian users through social media and other online channels, with this restriction taking effect 14 April 2026. This anti-unregistered-advertising mechanism functions as a pre-harm control, reducing Malaysian retail investors' exposure to unregistered platforms at the point of marketing and discovery, rather than only providing recourse after harm has occurred. Both developments should be read alongside the same-cycle tightening of operator governance and asset-safeguarding requirements under the revised Guidelines on Recognized Markets: the Financial Markets Ombudsman Service membership and the advertising restriction extend consumer protection beyond the point of exchange registration itself, addressing both what happens when something goes wrong at a registered exchange and what happens when an unregistered platform tries to reach Malaysian users in the first place. Together, these represent a materially more complete consumer-protection perimeter for Malaysia's digital-asset market than existed prior to this cycle. #### Outlook The development to watch is how the Financial Markets Ombudsman Service's admission of digital-asset-exchange operators functions in practice once complaints begin to be filed, which will be the first real test of whether this recourse mechanism delivers meaningful outcomes for retail investors in this asset class. On the advertising-restriction side, watch for any reporting on measurable reduction in unregistered-platform marketing reach to Malaysian users following the 14 April 2026 effective date. 1 further periodic run re-emitted the standing brief unchanged and is not shown. Sources and findings (8) - T4[The Block](https://www.theblock.co/post/332552/malaysia-orders-bybit-to-halt-local-operations-over-registration-failure) — As part of its enforcement action against an unregistered DAX operator, the SC ordered the platform to cease all advertising activities directed at Malaysian investors and to discontinue local investor support channels. - T3[CoinDesk](https://www.coindesk.com/policy/2025/01/16/malaysia-weighs-introduction-of-crypto-blockchain-legislation) — SC has publicly advised that investors trading on unregistered digital asset platforms are not protected under Malaysian securities laws and face elevated exposure to financial crime. - T1[Initial Exchange Offering (IEO) operator](https://www.sc.com.my/api/documentms/download.ashx?id=ae96213d-e71b-4682-8ac6-127a6da558ea) — An IEO operator must establish and maintain a trust account with a licensed Malaysian financial institution and implement controls, including multi-signature arrangements, to safeguard investors' monies and digital tokens. - T1[DAX operators](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — DAX operators become members of the Financial Markets Ombudsman Service (FMOS) in 2026, giving investors a formal dispute-resolution channel - T3[DAX operators](https://www.lexology.com/library/detail.aspx?g=25e073b6-a1da-4dae-ac1b-4b607768088a) — Minimum shareholders' funds must be maintained in cash or liquid assets excluding digital assets and held separately from operating accounts - T3[Securities Commission Malaysia](https://www.bitget.com/news/detail/12560605499513) — mandatory independent annual custody assessments and strengthened client-asset segregation for DAX operators - T1[Financial Markets Ombudsman Service (FMOS)](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) — DAX operators during 2026, providing formal independent dispute-resolution channel - T3[DAX operators](https://www.thestar.com.my/business/business-news/2026/05/20/sc-revises-guidelines-to--strengthen-malaysia039s-digital-asset-market) — DAX operators will become members of the Financial Markets Ombudsman Service (FMOS) during 2026, giving investors a formal dispute-resolution channel. ### Malaysia: C6 Tax TreatmentAmberEnacted in forceModule confidence: Probable▾ No Malaysia-specific Inland Revenue Board (LHDN) guidance on the tax treatment of cryptocurrency transactions (capital gains, income tax characterisation of trading/staking/mining, VAT/GST, withholding, or reporting obligations) was located via this research pass. This module is flagged as a coverage gap pending primary-source escalation rather than a settled position. C6 · Tax Treatment — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malaysia: C7 Cross-Border TransferAmberEnacted in forceModule confidence: Probable▾ Digital asset intermediaries in Malaysia must comply with BNM's Foreign Exchange Notices (e.g. Notice 4, Payment and Receipt) in addition to SC's digital-asset licensing regime; BNM has collaborated with SC to ensure digital asset intermediaries observe applicable foreign exchange measures. Crypto-assets themselves are not recognised as legal tender or a BNM-regulated payment instrument, so no crypto-specific cross-border payment corridor rule (distinct from general FX control) was identified. C7 · Cross-Border & Travel Rule — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malaysia: C8 AML/CFT RegimeGreenEnacted in forceModule confidence: Probable▾ AML/CFT obligations for crypto are governed by BNM under the Anti-Money Laundering and Counter-Financing of Terrorism Policy for Digital Currencies (2018), which designates crypto exchanges offering fiat-to-crypto and crypto-to-crypto services as 'reporting institutions'. Per fleet module-subscription rules, crypto AML/CFT claims are sourced via the FIM aml_ctf module rather than populated here; this entry is disambiguation context only. C8 · AML/CFT Regime — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malaysia: C9 Commercial Activity ▾ ## Commercial Activity Two confirmed commercial events mark this period for Malaysia's digital-asset sector. BLOX Blockchain Sdn Bhd closed a US$1 million seed funding round led by Kivo Technology, announced 14 August 2026, specifically to scale its MYRC ringgit-backed stablecoin. The funding round is notable in context: it occurred while BLOX's own token continues to operate, by the company's own public acknowledgment, outside a specific regulatory framework in Malaysia, meaning investors committed capital to a stablecoin issuer ahead of any settled domestic licensing pathway. Separately, Khazanah Nasional Berhad, together with the Securities Commission, priced Malaysia's first tokenised sukuk on 28 April 2026, a MYR100 million nominal issuance under the Sukuk Danum Programme, with Maybank and CIMB also named as participants in the transaction. These two events describe different segments of Malaysia's digital-asset commercial landscape. The BLOX funding round is private-sector venture investment into a stablecoin issuer operating in advance of regulatory settlement, while the Khazanah tokenised sukuk is a regulator-engaged, institutional tokenisation milestone within the existing Islamic capital-markets and securities framework, reflecting the Securities Commission's direct involvement in bringing the instrument to market. Read together, they show that commercial activity in Malaysia's digital-asset space is proceeding on two distinct tracks: one within the settled regulatory perimeter (tokenised sukuk, under SC oversight) and one operating in the acknowledged regulatory gap for stablecoin issuance (BLOX's MYRC). Both events are commercial facts drawn from primary-adjacent, company- or regulator-reported sources rather than binding legal developments, and neither event itself changes the regulatory status of the instruments involved; the tokenised sukuk operates within the existing securities framework, and BLOX's stablecoin remains outside a dedicated framework regardless of its fundraising success. — Outlook: The commercial-activity trajectory for Malaysia's digital-asset sector is emerging, with discrete, confirmed events in both the regulated tokenisation space and the unregulated stablecoin-issuance space this period. The marker to watch is whether further institutional tokenisation issuances follow the Khazanah sukuk precedent, and whether BLOX's successful fundraising is followed either by a formal regulatory engagement outcome or by further private capital inflow into similarly positioned ringgit-stablecoin issuers operating ahead of a settled licensing framework. No periodic updates recorded in this cycle Sources and findings (2) - T3[BLOX Blockchain Sdn Bhd](https://theedgemalaysia.com/node/814517) — BLOX closed a US$1 million seed funding round led by Kivo Technology, announced 14 August 2026, to scale its MYRC ringgit stablecoin. - T3[Khazanah Nasional Berhad / Securities Commission Malaysia](https://theedgemalaysia.com/node/801631) — Khazanah Nasional, with the SC, priced Malaysia's first tokenised sukuk, MYR100 million nominal, on 28 April 2026, under the Sukuk Danum Programme.