Malaysia
Overview
Malaysia’s core AML/CFT statute is AMLA 2001 (Act 613). Bank Negara Malaysia issues risk-based AML/CFT/CPF and targeted-financial-sanctions policy documents for financial institutions and designated non-financial sectors, complemented by sector supervisors.
Companies (Amendment) Act 2024 introduced a statutory beneficial-ownership reporting framework and electronic BO system under SSM. Reporting institutions also apply beneficial-owner identification through CDD.
AMLA establishes suspicious-transaction reporting and related preventive obligations. BNM policy documents operationalise reporting, CDD, risk assessment and TFS requirements by sector.
Compliance Calendar4
Requirement
Cash Threshold Report (CTR)
Authority / Report toBank Negara Malaysia
Deadline / triggerCTR submission is mandatory for in-scope institutions. The current public BNM pages checked in mapped sources verify threshold/scope but do not expose one universal filing-day clock, so no universal numeric deadline is shown.
Requirement
- Subject scope
- Currently applicable to banking institutions, selected prescribed development financial institutions, Lembaga Tabung Haji and licensed casino, as stated by BNM.
- Trigger
- Single or multiple cash transactions within the same account in a day totalling RM25,000 or above.
- Filing channel
- BNM/FINS reporting route as applicable.
Impact
- Consequences of non-compliance
- Non-reporting can lead to AMLA/BNM enforcement; exact consequence is breach-specific.
- Enforcement authority
- Bank Negara Malaysia
- Operational impact
- Cash aggregation controls should apply the BNM same-account/day threshold and keep any deadline configuration linked to the operative reporting specification.
Requirement
Compliance Officer appointment/change notification
Authority / Report toBank Negara Malaysia
Deadline / triggerWithin 10 working days from the date of appointment or change.
Requirement
- Subject scope
- Reporting institutions required to appoint an AML/CFT Compliance Officer.
- Trigger
- Appointment of, or change to, the Compliance Officer.
- Filing channel
- Written notification; BNM provides physical/online forms for DNFBP/NBFI reporters.
Impact
- Consequences of non-compliance
- Failure to comply may result in supervisory action under the applicable AMLA/BNM framework.
- Enforcement authority
- Bank Negara Malaysia
- Operational impact
- HR/governance changes affecting the AML Compliance Officer should trigger an automatic regulatory-notification workflow.
Requirement
Suspicious Transaction Report (STR)
Authority / Report toFinancial Intelligence and Enforcement Department (FIED), Bank Negara Malaysia
Deadline / triggerWithin the next working day from the date the Compliance Officer establishes the suspicion.
Requirement
- Subject scope
- Reporting institutions under AMLA when the institution suspects or has reasonable grounds to suspect a transaction, attempted transaction or proposed transaction.
- Trigger
- Compliance Officer establishes the suspicion.
- Filing channel
- FINS where applicable; BNM also lists prescribed email/mail channels.
Impact
- Consequences of non-compliance
- Failure to meet AMLA reporting/control duties can lead to supervisory, administrative or criminal consequences depending on the breached provision. A single STR-failure fine is not shown as one general value.
- Enforcement authority
- Bank Negara Malaysia / competent authority
- Operational impact
- Compliance Officer decisioning and filing should be treated as a next-working-day external SLA, with internal escalation designed accordingly.
Requirement
AML/CFT/CPF compliance programme and risk assessment
Authority / Report toBank Negara Malaysia
Deadline / triggerOngoing; controls and risk assessment must be maintained and regularly assessed rather than filed on one universal date.
Requirement
- Subject scope
- Reporting institutions within the applicable BNM policy documents.
- Trigger
- Continuous while conducting regulated/reporting-institution activities.
- Filing channel
- Internal programme with supervisory evidence/submissions as required.
Impact
- Consequences of non-compliance
- Weak controls may lead to BNM supervisory/enforcement action under AMLA and sector legislation.
- Enforcement authority
- Bank Negara Malaysia
- Operational impact
- Maintain current risk assessment, policies, screening/monitoring, governance, training and assurance.
Authorities & FIU5
FATF Assessment
Measures how fully the jurisdiction has implemented FATF’s technical requirements. It does not measure practical effectiveness.
Measures whether the AML/CFT system achieves its intended results in practice. Follow-up reports do not normally replace these ratings.
Explore 40 FATF RecommendationsSee every Technical Compliance rating and what it means.+
Explore 11 Immediate OutcomesSee how FATF rates whether the AML/CFT system works in practice.+
Regulatory Timeline38
Bank Negara Malaysia announced on 30 September 2026 that it imposed a RM22,000 administrative monetary penalty on money-changing business Wawasan Ilham (M) Sdn. Bhd. on 27 August 2026 for failure to carry out required CDD on a customer. The authority reported payment on 14 September 2026 and identified weak management oversight and compliance culture. The official release distinguishes the date of enforcement action, payment and public announcement.
FATF revised Recommendation 16 to standardise payment information and strengthen fraud/error controls in cross-border payments.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Malaysia gazetted the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities (Amendment) Act 2025 (Act A1761) on 14 May 2025 after Royal Assent on 24 April 2025. The amendments came into force on 1 March 2026.
FATF amended Recommendation 1 and related interpretive material to strengthen proportionality and simplified measures under the risk-based approach.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Malaysia operationalised a statutory beneficial-ownership reporting framework, including company BO registers and filings with the Registrar.
The policy document consolidates risk-based CDD, monitoring, reporting, CPF and targeted-financial-sanctions requirements for covered financial institutions.
FATF revised Recommendations 4, 30, 31 and 38 and related interpretive material to make asset recovery a stronger operational priority, expand tools to trace and confiscate criminal property and improve domestic and international cooperation.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗At its February 2023 Plenary FATF revised Recommendation 25 and its Interpretive Note to strengthen transparency and beneficial-ownership requirements for trusts and similar legal arrangements, complementing the 2022 strengthening of Recommendation 24 for legal persons.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗FATF strengthened Recommendation 24 on beneficial ownership transparency for legal persons.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗FATF amended Recommendations 1 and 2 and their Interpretive Notes so countries and covered private-sector entities must identify, assess and mitigate risks of breaches, non-implementation or evasion of proliferation-related targeted financial sanctions.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The Basel Committee revised its ML/TF risk-management guidelines to add principles for information exchange and cooperation between prudential and AML/CFT supervisors in authorisation, ongoing supervision and enforcement.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF adopted detailed implementation requirements for virtual assets and VASPs in June 2019, including the application of wire-transfer information requirements commonly described as the Travel Rule. This operationalised the virtual-asset perimeter introduced through the 2018 Recommendation 15 revision.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The 2019 prescription order and recognised-market framework brought qualifying digital currencies and tokens within Securities Commission oversight, including AML/CFT expectations for regulated operators.
In October 2018 FATF revised Recommendation 15 and added the definitions of virtual asset and virtual asset service provider, formally bringing virtual-asset activity into the global AML/CFT standards architecture. Detailed implementation requirements followed in 2019.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗FATF records Malaysia as a member since 2016.
The Basel Committee issued Sound management of risks related to money laundering and financing of terrorism, superseding its 2001 CDD and 2004 consolidated KYC papers and integrating ML/TF risk management with prudential supervisory expectations.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF adopted a consolidated revised set of 40 Recommendations integrating AML, CFT and proliferation-financing safeguards.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Resolution 1737 imposed binding measures concerning Iran’s proliferation-sensitive nuclear activities, including an asset freeze on designated individuals and entities. Together with the DPRK regime, it forms a foundational UN counter-proliferation targeted-financial-sanctions architecture.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗Following the DPRK nuclear test, Resolution 1718 imposed binding sanctions including an asset freeze on designated persons and entities connected to the nuclear programme. It became a central UN targeted-financial-sanctions pillar for counter-proliferation financing.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗FATF added a ninth Special Recommendation addressing cash couriers and cross-border movement of currency.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Resolution 1540 requires all States to adopt and enforce laws and domestic controls to prevent non-State actors from acquiring or using weapons of mass destruction and related materials. It forms a binding global legal pillar of the proliferation-financing control environment later reflected in FATF CPF standards.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The UN General Assembly adopted the United Nations Convention against Corruption on 31 October 2003. UNCAC addresses prevention of money laundering, laundering of corruption proceeds, confiscation and a dedicated asset-recovery framework; the Convention entered into force globally on 14 December 2005.
Current UN depositary relationship to 2003 UN Convention against Corruption. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The Egmont Group's official Member FIU Information register records Malaysia's FIU admission date as 2003-07-01.
FATF comprehensively revised its AML/CFT Recommendations, strengthening preventive measures and extending coverage.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The Basel Committee issued Customer due diligence for banks, setting minimum supervisory expectations for customer acceptance, identification, ongoing monitoring and risk management. It became an influential global banking KYC/CDD benchmark and was later reflected in FATF standards.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF expanded its standards to terrorist financing through eight Special Recommendations.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Resolution 1373 requires all States to prevent and suppress terrorist financing, criminalise the provision or collection of funds for terrorist acts, freeze terrorist assets without delay and prohibit making funds or financial services available to terrorists and related entities.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗AMLA establishes the money-laundering offence, preventive and reporting measures, asset forfeiture and the statutory basis for Malaysia’s AML/CFT framework.
The Palermo Convention was adopted on 15 November 2000 and broadened the international money-laundering framework beyond drug proceeds through criminalisation and preventive measures tied to transnational organised crime. It entered into force globally on 29 September 2003.
Current UN depositary relationship to 2000 Palermo Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗Bank Negara Malaysia records Malaysia as an APG member since May 2000.
The UN General Assembly adopted the International Convention for the Suppression of the Financing of Terrorism on 9 December 1999, creating the treaty framework for criminalising terrorist financing and international cooperation. It entered into force globally on 10 April 2002.
Current UN depositary relationship to 1999 Terrorist Financing Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗Resolution 1267 imposed an assets freeze and other targeted sanctions in the Taliban context and created the Security Council committee that became the foundation of the UN 1267 sanctions architecture. It is a key global precursor to modern terrorist-financing targeted financial sanctions.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗FATF revised the Forty Recommendations to reflect evolving money-laundering methods and countermeasures.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗Representatives of 13 financial intelligence units met in Brussels on 9 June 1995 and founded what became the Egmont Group. The milestone created the operational global network for FIU-to-FIU cooperation and exchange of financial intelligence.
Current profile relationship to the Egmont network. This does not imply membership in 1995; admission history is a separate LOCAL/STATUS fact.
Egmont Group · Member FIUs ↗FATF issued its original Forty Recommendations, establishing the first global AML standard framework.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The G7 established FATF in 1989 to examine and develop measures to combat money laundering. FATF became the central global standard-setting body whose recommendations are implemented through national and regional AML/CFT frameworks.
Current relationship. Direct FATF membership and any listed regional assessment network participation are current profile relationships only. The GLOBAL milestone does not prove membership or domestic implementation on the event date; those remain LOCAL/STATUS evidence.
FATF Global Network ↗The Vienna Convention was adopted on 20 December 1988 and created the first treaty-level international obligation to criminalise laundering conduct linked to drug-trafficking proceeds, alongside confiscation and international-cooperation measures. It entered into force globally on 11 November 1990.
Current UN depositary relationship to 1988 Vienna Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The Basel Committee published a Statement of Principles for banks aimed at reducing the risk that banking institutions would be used by criminals or as channels for money laundering. This helped establish the preventive and supervisory side of AML alongside the emerging criminal-law framework.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗