Opening a Corporate Bank Account in Malaysia as a Foreign Company (2026): BNM Rules, CDD, FX Policy and the Step-by-Step Guide

1. Why Malaysia's Banking Environment Is Both Attractive and Demanding for Foreign Companies

Malaysia's banking sector is one of Southeast Asia's most developed and internationally connected. The system encompasses both conventional and Islamic banking institutions, with Malaysia recognised as a global leader in Islamic finance representing approximately 43% of total banking system assets. There are 27 commercial banks operating in the country — eight local and 19 foreign-owned — offering multi-currency facilities, sophisticated trade finance, FPX/DuitNow Business payment rails, and direct SWIFT connectivity that serves cross-border businesses well.

At the same time, the regulatory environment has grown progressively more exacting. BNM administers the banking sector under the Financial Services Act 2013 (FSA) and the Islamic Financial Services Act 2013 (IFSA), and its Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLA 2001) framework sets comprehensive AML/CFT obligations for all financial institutions. For foreign-owned companies, this translates into a real and significant compliance burden at the account-opening stage — one that catches many first-time entrants off guard.

The good news: once your account is open and your compliance profile is established, Malaysia's foreign exchange policies remain among the most liberal in the region, specifically designed to promote financial stability while supporting a competitive economy and facilitating cross-border economic activities. Understanding the distinction between the demanding entry gate and the open operating environment on the other side of it is the key to planning your banking setup correctly.

2. The Regulatory Architecture: BNM, AML/CFT, and the FEP Notices

To understand what banks actually ask for — and why — you need to understand the two parallel regulatory frameworks that govern corporate banking for foreign companies.

The AML/CFT Framework

BNM's AML/CFT and Targeted Financial Sanctions (TFS) Policy Document (issued 31 December 2019, in force from 1 January 2020, with 2025 updates) sets the compliance requirements that every bank must implement. The framework covers a wide range of reporting institutions and includes detailed Customer Due Diligence (CDD), Suspicious Transaction Reports (STRs), and compliance management systems. BNM mandates a Risk-Based Approach (RBA): banks must assess risk throughout the entire customer lifecycle, including at onboarding and on an ongoing basis. Enhanced Due Diligence (EDD) measures are specifically mandated for high-risk customers and jurisdictions.

For foreign-owned companies, the single most operationally significant element is beneficial ownership. BNM's Guidance on Beneficial Ownership — referenced in its AML/CFT FAQs — requires banks to identify the natural person who ultimately owns, controls, or derives benefit from the legal entity, even if ownership is registered under another name. A Chinese holding company owning 100% of a Malaysian Sdn Bhd does not end the inquiry: the bank must trace through to the individual shareholder(s) of that Chinese holding company. This requirement creates significant documentation work for companies with multi-layer group structures, which is typical of China, Taiwan and Hong Kong corporate groups.

The Foreign Exchange Policy (FEP) Framework

BNM administers Malaysia's FX controls through the Foreign Exchange Policy Notices (FEP Notices), issued under the FSA 2013 and IFSA 2013. The overarching policy position is clearly stated on BNM's official FEP portal: Malaysia's foreign exchange policies remain liberal, designed to promote financial stability while supporting a competitive economy. The key operative distinction for your business is whether your Malaysian company is classified as a "resident entity" or whether you are operating as a non-resident entity.

3. FEP Rules That Directly Affect Your Malaysian Bank Account

Once you understand whether your entity is a resident or non-resident, the specific FEP rules that govern your account become much clearer. Below is a structured breakdown of the rules most relevant to foreign-owned companies operating in Malaysia.

The export proceeds rule deserves particular attention for manufacturing, trading and services export companies. Once your Malaysian Sdn Bhd is exporting goods, export proceeds must be repatriated to Malaysia in full within 6 months of the shipment date. An exporter with goods proceeds of RM200,000 equivalent or less per invoice may repatriate within 24 months from the date of shipment for permitted reasons. Separately, exporters may retain up to 25% of their proceeds in a Trade Foreign Currency Account with a licensed onshore bank. These rules have practical treasury implications: you cannot simply park export proceeds offshore indefinitely — your corporate treasurer or CFO needs to plan cash flows accordingly.

4. Enhanced Due Diligence: What Banks Will Ask Foreign-Owned Companies

BNM's updated CDD framework is the primary reason foreign-owned companies experience longer, more documentation-intensive account-opening processes compared to domestically-owned firms. Here is exactly what you should expect.

Standard CDD Requirements (All Companies)

• Certified copies of SSM registration documents — Certificate of Incorporation (Form 9 / Notice of Registration under CA 2016), Memorandum & Articles of Association or Constitution, Form 24 (Allotment of Shares), Form 49 (Directors & Secretaries register)
• Corporate Tax Identification Number (TIN) — banks now require this at onboarding to link the account cleanly to the MyInvois e-invoicing system
• Proof of registered office address — tenancy agreement, utility bill, or virtual office agreement
• Identification documents (passports and/or MyKad) for all directors and authorised signatories
• Board resolution authorising account opening and designating authorised signatories

Enhanced Due Diligence (EDD) — Triggered for Foreign-Owned Companies

• Beneficial Ownership Declaration: Mandatory under BNM's enhanced CDD requirements. Banks must identify and verify the ultimate beneficial owner — the natural person who ultimately owns, controls, or derives benefit from the legal entity. For companies with complex ownership structures or those from jurisdictions with limited corporate transparency, this can be challenging and time-consuming.
• Source of Funds & Source of Wealth: Banks must verify the origin of the capital being introduced into the Malaysian entity — including paid-up capital, shareholder loans and any initial deposits.
• Business Purpose & Activity Verification: A detailed business plan, contracts, letters of intent, or evidence of commercial activity in Malaysia. Banks need to understand the company's commercial rationale for operating in Malaysia.
• Corporate Structure Chart: For companies with holding structures (e.g., a BVI/Cayman holding company owned by a PRC corporate, owned in turn by a natural person), a complete corporate structure diagram tracing to the natural person UBO is required.
• Foreign Investment Approvals: For certain business activities, evidence of foreign investment approval from relevant authorities (e.g., MIDA approval letters, specific sector licences) may be required before the bank will proceed.
• Sanctions Screening: Mandatory screening against domestic and international watchlists — including the UN Security Council Consolidated List and Malaysia's domestic list — for all foreign applicants and their beneficial owners.
• Director Interview: Many banks require a face-to-face or video interview with at least one director to confirm the nature of the business, the source of funds, and the intended use of the account.
• Country Risk Assessment: If your beneficial owners or parent company are based in jurisdictions that BNM or FATF classifies as higher-risk, additional documentation requirements will apply and some banks may decline the application entirely.

5. Choosing the Right Bank: Local Banks, Foreign Banks and Digital Banks Compared

Malaysia's 27 commercial banks are not equally accessible or equally practical for every foreign-owned company. Your choice of banking partner will materially affect your account-opening timeline, fee structure, FX capability, and ongoing operational experience.

For most foreign-owned companies setting up in Malaysia — particularly those from China, Taiwan, Hong Kong or Singapore — the recommended approach is to open a primary account with a local or foreign commercial bank for core operational and compliance purposes, and optionally pair it with an MSB/payment institution account for efficient cross-border transfers. A local commercial bank account is required for payroll (EPF, SOCSO contributions), tax payments to LHDN, and trade finance facilities.

6. Step-by-Step Account Opening Process for a Foreign-Owned Sdn Bhd

The process below reflects the standard workflow for a 100% foreign-owned private limited company (Sdn Bhd) incorporated in Malaysia. Timing assumes complete documentation is prepared upfront.

1. Complete SSM incorporation — Your company must be fully registered with the Companies Commission of Malaysia (SSM) before any bank will accept an account application. You will need your Certificate of Incorporation, Constitution, SSM MyData extract, and confirmation of your company secretary's appointment. (See our Incorporation service for the full process.)
2. Obtain your Tax Identification Number (TIN) — Register with LHDN immediately after incorporation. Banks now request the TIN at account opening so the account links cleanly to the MyInvois e-invoicing system. This typically takes 3–5 business days.
3. Prepare your full documentation package — Assemble all SSM statutory documents, director/shareholder passports (certified copies), the beneficial ownership declaration and corporate structure chart, source-of-funds supporting documents, business plan, proof of registered office address, and the board resolution authorising account opening. For documents originating from overseas jurisdictions, arrange notarisation and apostille/legalisation well in advance.
4. Select your bank and pre-screen eligibility — Shortlist 2–3 banks and, if possible, engage a relationship manager before submitting your application. Disclose your ownership structure upfront — discovering a disqualifying issue after submission wastes weeks. If your parent entity is incorporated in a jurisdiction that a bank treats as high-risk, identify this early.
5. Submit the application — Most banks require the application form, full KYC package, and certified documents to be submitted in person at a branch by an authorised director. Bring originals and certified copies of all documents.
6. Attend the director interview / KYC meeting — A compliance officer or relationship manager will interview the director(s) to confirm business purpose, source of funds, and anticipated transaction volumes. Be prepared with clear, consistent answers.
7. Respond to additional information requests — Banks routinely issue requests for additional documents during their internal review. Respond within 2–3 business days to avoid delays. Common additional requests include: group structure confirmation, MIDA/sector licence copies, and evidence of business contracts or clients.
8. Fund the initial deposit and activate the account — Once approved, deposit the minimum required initial balance (varies by bank and account type — some digital accounts require no deposit; traditional commercial bank accounts may require several thousand ringgit). Collect your account number, internet banking token, and business debit card.
9. Declare residency and FEP status to the bank — Formally declare your company's residency status and domestic ringgit borrowing status to the bank. You are required to keep the bank updated if either status changes. This declaration governs which FEP rules apply to your account.

7. Worked Example: A China-Based Group Setting Up a Malaysian Trading Subsidiary

Consider a practical scenario that ONEKEY BIZ frequently encounters: a Shenzhen-based trading company (incorporated in China) wishes to set up a 100% wholly-owned Malaysian Sdn Bhd to serve as a regional distribution hub for Southeast Asia. The Malaysian entity will import goods from China, warehouse them in Selangor, and sell to local and regional customers. The UBO is a Chinese national who is the sole director and major shareholder of the Shenzhen parent.

Residency status: The Malaysian Sdn Bhd is a resident entity under BNM's FEP — it is incorporated in Malaysia via SSM. The Shenzhen parent is a non-resident entity. This matters because the Malaysian Sdn Bhd will be the exporting entity for cross-border sales, and its ringgit and FX accounts will be governed by the resident-entity rules described above.

EDD triggers: The bank's compliance team will identify: (1) 100% foreign ownership by a PRC entity; (2) ultimate beneficial owner is a PRC national; (3) high-value cross-border trade flows anticipated; (4) potential for trade-based financial crime risk given the import/export nature. This places the company in an elevated-risk category, triggering comprehensive EDD.

Documentation prepared (in addition to standard SSM docs):

• Notarised and apostilled business licence (营业执照) of the Shenzhen parent company, with certified English translation
• Notarised passport copy of the Chinese national UBO, with certified English translation
• Corporate structure diagram showing: Chinese national → Shenzhen parent company → Malaysian Sdn Bhd (100%)
• Beneficial ownership declaration form (bank-issued) completed and signed by the UBO
• Source of funds declaration: paid-up capital of RM500,000 sourced from retained earnings of the Shenzhen parent company, supported by audited financial statements
• Business plan: describes the distribution business, projected revenue, customer profile, supplier profile, and anticipated transaction volumes
• MIDA project registration letter (if applicable for manufacturing or incentive-linked activities)
• Board resolution authorising account opening and designating the local company secretary as authorised signatory

Bank choice: For this scenario, CIMB Bank or UOB Malaysia are commonly preferred choices. CIMB has extensive PRC corporate banking experience and a strong Greater China relationship management desk. UOB Malaysia similarly has deep Singapore–China–Malaysia group connectivity. Both are equipped to handle PRC-structured CDD efficiently.

FEP compliance going forward: Once the account is open, the company must comply with the export proceeds repatriation rule: all export proceeds from goods shipped from Malaysia must be repatriated to the Malaysian bank account in full within 6 months of the shipment date. Up to 25% may be retained in a Trade FCA. The company also nominates the Shenzhen parent as the group entity from which it may borrow ringgit (any amount) to finance real-sector activities in Malaysia — a useful and permissible inter-company financing structure under BNM's FEP.

Timeline: With full documentation prepared in advance and with ONEKEY BIZ coordinating with the bank's relationship manager, the account was activated in approximately 5 weeks from initial submission — including a two-week delay while apostille of the Chinese business licence was processed by the relevant Chinese notary bureau.

8. Common Mistakes and Pitfalls That Delay or Kill Applications

Based on practical experience with foreign company clients, the following are the most frequent causes of account-opening delays or outright rejections:

• Incomplete beneficial ownership disclosure: The single biggest cause of delays. Submitting a corporate structure chart that ends at the holding company level — rather than tracing through to the natural person UBO — will result in the bank returning the application for supplementary information. Prepare the full chain from Day 1.
• Documents not in English or BM without certified translations: Chinese, Japanese or Korean corporate documents submitted without certified English translations will be returned. Budget for professional legal translation by a certified translator.
• Apostille / notarisation not arranged for overseas documents: Many first-time applicants underestimate the time required to apostille overseas corporate documents. The process in China (involving notary bureaus, the Ministry of Foreign Affairs or provincial foreign affairs offices) can take 3–6 weeks. Start this process simultaneously with SSM incorporation, not after.
• Virtual office address without substance: Some banks are increasingly skeptical of virtual office addresses, particularly for companies that cannot demonstrate any operational substance in Malaysia (employees, equipment, local clients). If your company has no physical presence yet, be prepared to explain your business ramp-up plan clearly.
• Applying to the wrong bank first: Some banks have internal policies that effectively preclude accounts for companies from certain offshore holding structures or jurisdictions. A rejected application can make it harder to open elsewhere, as banks often check application history. Research bank appetite for your structure before applying.
• No local authorised signatory or representative: Most commercial banks require at least one director or authorised signatory who can appear in person at the branch. A 100% absentee structure (all directors resident overseas) is a significant obstacle. Having a local company secretary or appointed representative helps substantially.
• Failure to declare residency status correctly: Failing to formally declare your residency and domestic ringgit borrowing status at account opening — and failing to update the bank when status changes — is a compliance breach under BNM's FEP Notices. Banks are required to ensure customers comply at all times.
• Inconsistent information across documents: Discrepancies between the company constitution, the board resolution, the beneficial ownership declaration, and the application form — even minor ones — raise red flags in the bank's compliance review and trigger additional scrutiny or outright rejection.

9. What to Do Next: Getting Your Malaysian Bank Account Open

The corporate bank account is the operational foundation of your Malaysian business — without it, you cannot pay employees' EPF and SOCSO contributions, receive customer payments via FPX or DuitNow Business, pay corporate income tax to LHDN, or access trade finance for import/export operations. Getting it right the first time is worth the investment in preparation.

ONEKEY BIZ's approach combines pre-submission eligibility assessment, documentation preparation support, and direct coordination with bank relationship managers at Maybank, CIMB, UOB Malaysia and HSBC Malaysia. We identify potential EDD triggers in your corporate structure before the application is submitted, advise on the optimal bank for your business profile, and manage the process end-to-end — including coordinating the certified translation and apostille of overseas corporate documents.

If you are at the incorporation stage, the best time to start planning your banking setup is before SSM registration is complete — so that document preparation for both filings runs in parallel and the account can be opened within weeks of receiving your Certificate of Incorporation. Visit our Corporate Services page to see how our incorporation and banking packages work together, or contact our team directly for a confidential assessment of your specific corporate structure and banking eligibility.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.