BNM Corporate Banking & FX Policy 2026: The Complete Guide for Foreign Companies — CDD Requirements, FX Rules, Digital Banks and How to Open a Malaysian Corporate Account

1. Why Malaysia's Banking Regulatory Framework Matters to Your Business

Malaysia's banking sector is one of the most developed in Southeast Asia, operating under a dual regulatory framework administered by Bank Negara Malaysia (BNM), the country's central bank. BNM supervises both conventional and Islamic banking institutions — and Malaysia is globally recognised as a leader in Islamic finance, with Islamic assets representing approximately 43% of total banking system assets.

For foreign investors, the significance of understanding BNM's rules goes beyond mere compliance. Your corporate bank account is the gateway to paying salaries (via DuitNow Business, FPX), collecting revenue from Malaysian customers, accessing trade finance, managing foreign currency exposure, and satisfying LHDN tax obligations. Without it, your Malaysian entity is operationally paralysed — you cannot pay suppliers, receive client payments, or remit dividends home.

BNM's regulatory authority over banks derives primarily from the Financial Services Act 2013 (FSA) and the Islamic Financial Services Act 2013 (IFSA). The AML/CFT framework sits on top of these, anchored in the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA), which was strengthened by amendments in 2014 and again in 2020 — the latter raising maximum penalties to MYR 3 million per offence, or five years' imprisonment, or both.

2. The CDD Landscape: What BNM Requires from Every Bank

Customer Due Diligence (CDD) is the mechanism by which banks verify that they know who they are dealing with. BNM's AML/CFT Policy Document — most recently substantively updated in 2023 — translates the AMLATFPUAA obligations into day-to-day operational standards for every licensed bank.

For a foreign-owned company, CDD is not a box-ticking exercise. Banks must:

• Identify and verify the identity of the legal entity (the Malaysian company), all directors, and all shareholders of record.
• Identify all beneficial owners (UBOs) — every natural person who ultimately owns more than a threshold percentage of the company (typically 25%), whether through direct shareholding or through a chain of intermediate holding companies.
• Understand the nature and purpose of the business relationship and the expected transaction patterns.
• Screen all parties against BNM's Domestic Sanctions List and the UN Security Council sanctions list before account opening is completed.
• Conduct ongoing monitoring — CDD does not end at onboarding; banks must periodically review customer profiles, particularly if transaction patterns deviate from the declared business purpose.

Standard CDD vs. Enhanced Due Diligence (EDD)

BNM's framework uses a risk-based approach (RBA). Simplified CDD is available only for genuinely low-risk customers — listed companies on regulated exchanges, government entities, and financial institutions supervised by BNM or an equivalent regulator abroad. Most foreign-owned SMEs will not qualify for simplified CDD.

Enhanced Due Diligence (EDD) is mandatory in four situations particularly relevant to foreign companies:

1. The company (or any UBO) is a Politically Exposed Person (PEP) — domestic or foreign.
2. The customer is from or operates in a FATF-identified jurisdiction with strategic AML/CFT deficiencies (the so-called "grey list").
3. The company has a complex or non-transparent ownership structure — e.g., multi-tier holding structures with intermediate companies in multiple jurisdictions.
4. The bank's internal risk assessment flags the industry or country of origin as elevated risk.

Under EDD, the bank must additionally obtain and verify the source of wealth and source of funds of the company and its UBOs. This means providing certified financial statements, audited accounts, investment records, or equivalent documentation demonstrating the legitimate origin of the capital being placed into the Malaysian account.

3. The FX Policy: BNM's Rules on Currency for Non-Residents and Resident Companies

BNM administers Malaysia's Foreign Exchange Policy (FEP) under the FSA and IFSA. The policy is explicitly designed to "maintain liberal foreign exchange policies" while preserving monetary and financial stability. For foreign companies and investors, the core message from BNM's official investor page is reassuring: "Malaysia continues to maintain liberal foreign exchange policies... Non-residents are free to undertake investments in Malaysia."

However, "liberal" does not mean "unregulated." Understanding the resident vs. non-resident distinction is essential.

Resident vs. Non-Resident: The Crucial Distinction

Under BNM's FEP, your Malaysian-incorporated Sdn Bhd is classified as a Resident — even if 100% of its shareholders are foreign nationals. A "Non-Resident" is a foreign company or individual that is not established or domiciled in Malaysia. This classification determines which FX rules apply.

Domestic Ringgit Borrowing (DRB) and FX Investment Limits

One nuance that catches foreign companies off guard: if your Malaysian Sdn Bhd takes on Domestic Ringgit Borrowing (DRB) — any credit facility, overdraft, credit card, or ringgit financing from a Malaysian bank — BNM imposes limits on how much foreign currency assets you can hold onshore and offshore. DRB is defined broadly and includes even unused credit card or financing facilities. Companies with active treasury management and hedging programmes need to map their DRB carefully before structuring FX positions.

4. Malaysia's Banking Landscape: Who Can You Bank With?

There are 27 commercial banks operating in Malaysia — 8 local and 19 foreign-owned. Beyond these, 5 licensed digital banks became operational following BNM's landmark licensing exercise. Each category has different implications for a foreign-owned company.

Digital Banks: A New Frontier for Foreign SMEs

BNM licensed five digital banks under the FSA and IFSA — a milestone in Malaysia's Financial Sector Blueprint 2022–2026. The digital banking framework was designed to use technology to expand access to financial services, particularly for SMEs and under-served segments. For foreign-owned SMEs that have historically found traditional bank onboarding slow and document-heavy, digital banks represent a genuinely different option.

BNM's e-KYC policy enables digital on-boarding of customers "anytime and anywhere" — the technology enables video conferencing and selfie comparison to verify identity without requiring a physical branch visit. Not all digital banks have fully extended their corporate account offerings at the time of writing, so foreign companies should check directly with the specific institution. However, the trajectory is clearly toward lower-friction onboarding for legitimate businesses.

5. Step-by-Step: How to Open a Malaysian Corporate Bank Account as a Foreign Company

The process below assumes you have already incorporated your Malaysian Sdn Bhd through SSM. If you have not yet done so, the account cannot be opened — Malaysian banks require an SSM-registered entity. ONEKEY BIZ can assist with your Sdn Bhd incorporation before you proceed to banking.

Step 1: Incorporate Your Malaysian Company (SSM)

Before any bank application, you need: the SSM Certificate of Incorporation, Constitution, Notice of Registration, and director/shareholder filings. These are the foundational documents every bank will request.

Step 2: Select the Right Bank for Your Profile

Consider: (a) Do you need multi-currency accounts and international wire capabilities? International banks excel here. (b) Do you have a complex holding structure? Choose a bank experienced with foreign-owned companies. (c) Are you a lean startup with a simple structure? A digital bank may offer faster onboarding. (d) Does your business need trade finance, letters of credit, or overdraft facilities? Prioritise established commercial banks.

Step 3: Prepare Your Complete Documentation Package

For a foreign-owned Sdn Bhd, the document checklist typically includes:

• SSM documents: Current Business Profile (e-Info, dated within the last few weeks), Section 14 Constitution, Section 15 Notice of Registration, Section 58 (Directors), Section 78 (Return of Allotment)
• Board Resolution: Formally authorising account opening and specifying all authorised signatories
• Director & shareholder passports: All directors and shareholders (certified copies acceptable for non-present parties; originals for present parties)
• Parent company documents (if a corporate shareholder): Certified Certificate of Incorporation from the home country, list of directors and shareholders of the parent entity — demonstrating the full UBO chain up to natural persons
• Proof of registered address: Utility bill, tenancy agreement, or equivalent for the Malaysian office
• Tax Identification Number (TIN): LHDN now requires banks to collect your corporate TIN at onboarding (linked to Malaysia's e-invoicing rollout)
• Business plan / explanation of business activities: Many banks (especially for new companies with no track record) will request a brief description of business activities, expected monthly turnover, and key customers/suppliers
• Source of funds evidence: For EDD cases — audited accounts, investment records, or equivalent documentation

Important: All documents not in Bahasa Malaysia or English must be accompanied by a certified translation.

Step 4: Submit Application and Attend KYC Interview

Most traditional banks require at least one director or authorised signatory to appear in person at a branch for identity verification. This is a BNM KYC requirement — the bank must satisfy itself of the physical identity of the persons behind the account. For digital banks using e-KYC, video conferencing and selfie submission may substitute for in-branch visits. Foreign-owned companies and complex ownership structures often face a dedicated compliance interview to confirm the nature of the business — prepare to explain your business model, expected transaction volumes, and ultimate beneficial owners clearly.

Step 5: Fund the Account and Await Approval

Once KYC is cleared, you make the initial deposit (RM 0 to RM 10,000+ depending on bank and account type) and await formal approval. You will then receive your account number, internet banking credentials, security tokens, and a business debit card.

Timeline Expectations

• International banks (OCBC, HSBC, UOB): 1–4 weeks for a well-prepared foreign-owned Sdn Bhd
• Local banks (Maybank, CIMB, Public Bank): 4–12 weeks; more conservative compliance reviews
• Digital banks (GXBank, AEON Bank): Potentially days to 2 weeks if e-KYC is accepted for corporate profiles
• Complex multi-tier structures: Up to 3 months; additional time for UBO verification across jurisdictions

ONEKEY BIZ's Bank Account Opening (OCBC & Alliance Bank) service streamlines this process — we prepare your full document package, coordinate with the relationship manager, and accompany you through compliance review to maximise your approval odds and minimise delays.

6. Worked Example: A China-Based Tech Company Setting Up in Malaysia

Consider ShenzhenTech Co., Ltd. — a Chinese technology company planning to set up a Malaysian subsidiary (MyTech Sdn Bhd, 100% owned by the Chinese parent) to service Southeast Asian clients and collect MYR/USD revenue.

Structure: Two Chinese directors (no local director initially), 100% foreign-owned, parent company incorporated in Shenzhen.

Banking choice: ShenzhenTech selects OCBC Malaysia — it has experience with Chinese-owned businesses, offers a multi-currency eBiz account with online application capabilities, and accepts lower initial deposits (approximately RM 500).

Key challenges encountered:

• UBO documentation chain: OCBC requests certified copies of the Shenzhen parent company's business licence, list of shareholders, and ultimate beneficial owners — all in English (or with certified translation). ShenzhenTech must provide a certified translated copy of its Chinese business licence and shareholder register.
• No local director: Some local banks decline applications with no Malaysian director. OCBC (an international bank) is more accommodating but requests a detailed business plan and evidence of the Malaysian entity's genuine business purpose.
• Source of funds (EDD): The parent company is asked to provide its most recent audited financial statements to demonstrate the legitimate origin of the paid-up capital (RM 500,000) injected into MyTech Sdn Bhd.
• In-person visit: One Chinese director flies to Malaysia for the KYC interview — a branch appointment is scheduled in advance. The session takes approximately 1.5 hours.

Timeline: From SSM incorporation to first deposit clearing — approximately 5 weeks. With ONEKEY BIZ's bank account opening support, the document preparation phase was compressed from the typical 2–3 weeks to under one week.

FX setup: MyTech Sdn Bhd also opens a USD sub-account to receive USD payments from overseas clients. When remitting profits back to the Shenzhen parent, the company converts MYR to USD first (via the bank's FX desk), then executes an outward remittance — in full compliance with BNM's FEP requirement that repatriation be made in foreign currency.

7. Common Mistakes and Pitfalls Foreign Companies Must Avoid

Based on the patterns seen across foreign market-entry cases in Malaysia, the following mistakes consistently cause delays, rejections, or post-opening compliance issues:

• Applying before SSM incorporation is complete: Banks will not accept applications from companies still in incorporation. Ensure your SSM Certificate of Incorporation, Constitution, and all director filings are finalised first.
• Incomplete UBO documentation: Banks are required to trace UBOs all the way to natural persons. If your shareholder is a BVI holding company, which in turn is owned by a Cayman fund, you must provide documentation for each layer. Incomplete chains are the single most common reason for EDD delays.
• Untranslated documents: All documents not in Bahasa Malaysia or English must be accompanied by certified translations. Chinese-language documents from China, Taiwan, or Hong Kong are commonly submitted without translation — this creates immediate compliance issues at the bank.
• Expecting instant approval: Foreign-owned company accounts go through full compliance review, not a fast-track process. Telling your bank "we need the account open in three days" signals unfamiliarity with the process and can make compliance officers more cautious, not less.
• Choosing the wrong bank for your structure: Local banks with less experience in cross-border ownership structures tend to decline or heavily delay applications from multi-tier foreign-owned companies. International banks or banks with dedicated SME-FDI teams are usually better choices.
• Ignoring the DRB / FX investment limit nexus: Companies that accept overdraft facilities or credit cards at the time of account opening inadvertently create DRB, which may cap their ability to hold foreign currency assets onshore. Discuss this with your bank relationship manager before accepting any credit facility.
• No physical presence for KYC: Sending only documentation without having any director attend in person for traditional bank accounts is a very common mistake made by foreign founders managing from overseas. Most traditional banks will not approve corporate accounts under these conditions.
• Failing to update the bank on material changes: Once your account is open, BNM's ongoing CDD requirements mean the bank will periodically request updated information. Changes in directors, shareholders, or business activities should be reported proactively — failure to do so can result in account restrictions or closure.

8. CRS, FATCA and Tax Transparency: What Foreign Owners Need to Know

Malaysian banks are signatories to the Common Reporting Standard (CRS) and cooperate with FATCA (the US Foreign Account Tax Compliance Act). In practical terms, this means: if any director, shareholder, or beneficial owner of your Malaysian company is tax-resident outside Malaysia, the bank will collect their Tax Identification Number (TIN) from their country of residence and report the Malaysian account details — including balances and income — to Malaysian tax authorities, who then exchange the data with the relevant foreign tax authority.

For Chinese, Taiwanese, Hong Kong, and Singaporean founders, this means that ownership of a Malaysian corporate account will likely be reported to their home tax authority. This is not a reason to avoid Malaysia — it is simply the international financial transparency norm. But it means your home-country tax filings should accurately reflect your Malaysian entity and account. Companies with ODI (Overseas Direct Investment) filings in China, or similar outward investment approval processes in their home country, should ensure their Malaysian banking structure is consistent with those filings.

9. What to Do Next — and How ONEKEY BIZ Can Help

Opening a Malaysian corporate bank account as a foreign company involves at least six distinct compliance layers: SSM incorporation, CDD documentation, UBO chain verification, FX policy compliance, CRS/FATCA disclosures, and ongoing AML monitoring. Each layer has the potential to cause delays or rejection if handled incorrectly.

ONEKEY BIZ helps foreign companies from China, Taiwan, Hong Kong and Singapore navigate every layer. Our Bank Account Opening (OCBC & Alliance Bank) service covers end-to-end preparation: organising and translating your document package, preparing the board resolution and signatory authorisation, coordinating with bank relationship managers, and accompanying you through the compliance interview where applicable. We have an established working relationship with both OCBC Malaysia and Alliance Bank — two institutions with strong track records for serving foreign-owned SMEs.

If you are earlier in your market-entry journey and have not yet incorporated your Malaysian company, start there. A properly structured Sdn Bhd — with the right shareholding, share capital, and director arrangements from day one — will make the banking process significantly smoother. Contact our team for a free initial consultation on your Malaysia market-entry roadmap, from incorporation through to banking and beyond.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.