BNM Corporate Banking 2026: The Complete Guide for Foreign Companies — CDD Rules, FX Policy, Digital Banks and How to Open a Malaysian Corporate Account

1. Why Malaysia's Corporate Banking Environment Matters More Than You Think

Malaysia operates one of Southeast Asia's most sophisticated and well-regulated banking systems, supervised by Bank Negara Malaysia under the Financial Services Act 2013 (FSA) and the Islamic Financial Services Act 2013 (IFSA). The sector encompasses 27 commercial banks — eight local and 19 foreign-owned institutions — plus Islamic banks, development financial institutions, and, since 2024–2025, five licensed digital banks. For foreign investors, this depth and diversity is a strength: trade finance, multi-currency accounts, Islamic banking, and sophisticated online treasury tools are all available.

However, the very stability and international integration of Malaysia's banking system is also why compliance has become so rigorous. Since Malaysia's mutual evaluation by the Financial Action Task Force (FATF) and subsequent policy tightening, BNM has progressively strengthened its AML/CFT Policy Documents, beneficial ownership guidance, and customer due diligence frameworks. For a foreign-owned company — particularly one from a jurisdiction with high cross-border capital flows like China, Hong Kong, or Taiwan — banks are required by BNM policy to apply a risk-based approach, and foreign-owned entities are often initially classified as higher risk profiles until their ownership, business activities, and source of funds are fully verified.

This matters enormously at a practical level. It means your account application will face a different standard of scrutiny than a locally-owned SME. Understanding what BNM requires — and preparing your documents accordingly — is the difference between an account that opens in two weeks and one that is rejected or delayed for months.

2. The BNM Regulatory Architecture: FSA, AML/CFT and the CDD Framework

Every Malaysian bank is obliged to comply with BNM's AML/CFT Policy Documents, which are issued under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA). These policy documents set out detailed Customer Due Diligence (CDD) obligations that banks must apply at account opening and on an ongoing basis.

2.1 The Risk-Based Approach

Under BNM's framework, banks classify customers by risk level — low, medium, or high. Foreign-owned companies, particularly those with complex multi-tier ownership structures, offshore holding companies, or ultimate beneficial owners resident in jurisdictions subject to enhanced monitoring, are typically categorised as medium to high risk at the outset. This classification determines the depth of documentation and verification the bank will require before opening the account.

Banks adopt a risk-based approach, often classifying foreign-owned entities or non-resident individuals as "high risk" until proven otherwise. This is not a judgment about your business's integrity — it is a systemic regulatory obligation the bank must fulfil to satisfy BNM supervisory requirements and avoid regulatory sanctions.

2.2 Beneficial Ownership Verification

BNM's Guidance on Beneficial Ownership requires every reporting institution (i.e., every licensed bank) to identify and verify the ultimate beneficial owners (UBOs) of every corporate customer. For a foreign-owned Sdn Bhd, this means the bank must trace the ownership chain back to the natural persons who ultimately own or control the company — not just the immediate shareholders.

The standard threshold used by Malaysian banks is 25% or more of shares or voting rights, or any person who exercises ultimate effective control regardless of shareholding level. For a common structure where a Chinese parent company (中国母公司) owns 100% of a Malaysian Sdn Bhd, the bank needs to document the individual shareholders of the Chinese parent who meet the threshold — and potentially the shareholders above them in the chain if the parent is itself owned by another holding company.

BNM's guidance also covers state-owned corporations and government-linked companies, recognising their special characteristics — a relevant consideration for Chinese SOE-affiliated investors entering Malaysia.

3. Bank Negara Malaysia's Foreign Exchange Policy (FEP): What It Means for Your Company

Malaysia's Foreign Exchange Policy (FEP) is administered by BNM under the FSA 2013 and IFSA 2013. The official BNM position is clear: "Malaysia's foreign exchange policies (FEP) remain liberal, designed to promote financial stability while supporting a competitive economy." The Bank is committed to ensuring that these policies provide a supportive environment for cross-border economic activities.

For a foreign company setting up in Malaysia, understanding the FEP framework — particularly the eight Foreign Exchange Policy Notices (FEP Notices) — is critical to avoiding inadvertent compliance breaches that can trigger bank account restrictions or BNM investigations.

3.1 Resident vs. Non-Resident Status

The most important concept in Malaysian FEP is the distinction between resident and non-resident entities. A company incorporated in Malaysia under the Companies Act 2016 — including a 100% foreign-owned Sdn Bhd — is a resident entity for FEP purposes. This is counterintuitive to many foreign investors who assume that because their shareholders are foreign, the company itself is "foreign" or "non-resident."

The practical significance: resident entities are subject to different (and in some respects more stringent) FEP obligations than non-residents. Depending on residency status and whether the company has domestic Ringgit borrowing or financing, there may be limits imposed on investments in foreign currency assets onshore and offshore. The key rule for residents without domestic Ringgit borrowing is an annual limit of up to RM 1 million equivalent per calendar year for investments in foreign currency assets using converted Ringgit.

However, operational foreign currency payments — paying foreign suppliers for goods or services, receiving export proceeds in foreign currency, or maintaining a foreign currency account funded by inward remittances — are generally treated differently from speculative FX investment and are broadly permitted.

3.2 Repatriation of Profits and Dividends

One of the most frequent questions from Chinese and Hong Kong investors is whether they can freely repatriate profits from their Malaysian subsidiary back to the parent company or to shareholder accounts overseas. The answer, under Malaysia's liberal FEP, is generally yes — but with documentation requirements that Malaysian banks will enforce at the point of transfer.

For a dividend repatriation from a Malaysian Sdn Bhd to an overseas parent or shareholder, the bank will typically require: a Board of Directors' resolution approving the dividend declaration; audited financial statements for the relevant financial year; evidence of tax compliance (no outstanding corporate tax); and for large amounts, an explanation of source of funds. Banks process these transactions under BNM's FEP Notice framework, and companies are required to declare their residency status and purpose of transaction accurately.

3.3 Export Proceeds and Reporting

For companies involved in the export of goods, BNM's FEP Notices impose specific obligations. Notably, the reporting requirement for export of goods exceeding RM 250 million equivalent in the preceding year has been amended — the timeline is now "as and when required by the Bank" rather than a fixed quarterly submission. Additionally, resident exporters must notify BNM within 21 days of the end of each calendar year if they did not receive any proceeds from the export of goods within 24 months of the date of shipment. For most SME-scale foreign investors, these thresholds will not apply, but larger manufacturing or trading operations should ensure their treasury and finance teams are aware.

4. Malaysia's Banking Landscape in 2026: Your Options as a Foreign Company

Malaysia's banking sector gives foreign-owned companies a range of choices, from major local banks to international banks with deep cross-border experience, to the newly operational digital banks, and to BNM-licensed Money Services Businesses (MSBs) for specific FX and remittance needs.

4.1 Major Local Banks

Maybank, CIMB, Public Bank, and RHB are Malaysia's largest banks by assets and branch network. They are reliable and well-suited for companies that plan significant domestic operations. However, their foreign company onboarding processes can be lengthy due to centralised compliance review, and branch staff may have less experience with complex foreign ownership structures. Processing times for foreign-owned companies at major local banks can range from 3 to 6 weeks.

4.2 International Banks — The Preferred Route for Foreign Companies

International banks including HSBC Malaysia, Standard Chartered, UOB Malaysia, and OCBC Bank are often preferred by foreign-owned companies because their global operational experience makes them more familiar with non-resident ownership structures, multi-currency accounts, and the documentation norms of foreign corporate groups. OCBC Bank, for instance, offers the eBiz Account with 100% online application processes and a minimum initial deposit of RM 500 — a low barrier to entry. These banks tend to support multi-currency accounts and have more experience handling international applications.

ONEKEY BIZ has established working relationships with OCBC Bank and Alliance Bank for corporate account opening. Our Bank Account Opening (OCBC & Alliance Bank) service is specifically designed for foreign-owned Sdn Bhdcompanies and covers document preparation, compliance alignment, bank submission, and follow-up — minimising the risk of rejection or unnecessary delays.

4.3 Malaysia's Five Licensed Digital Banks (2025–2026)

Malaysia currently has five licensed digital banks, all officially awarded their licences by Bank Negara Malaysia on 29 April 2022 and subsequently operational after completing BNM's rigorous operational readiness review. The five are: Boost Bank, GXBank, KAF Digital Bank (Islamic), RYT Bank, and AEON Bank (Islamic).

These digital banks are an important development in Malaysia's financial landscape and offer innovative SME-focused products. However, their onboarding systems are largely built around Malaysian identity card (MyKad) holders for primary KYC verification. Foreign-owned companies with all-foreign directors will find that traditional international banks remain more accessible for initial corporate account opening in 2026. Digital banks are best viewed as a supplementary tool — for payroll disbursements, expense management, or domestic collections — once a primary traditional bank account is established.

4.4 MSB Fintech Providers

BNM-licensed Money Services Business (MSB) operators under the Money Services Business Act 2011 (MSBA) provide a complementary layer of financial infrastructure. Only a company incorporated under the Companies Act 2016 is eligible to apply for an MSB licence. MSB Class B licensees (such as Airwallex, which holds BNM licence number 00318) offer cross-border payment services with bank-level security. These providers are well-suited for companies that need efficient multi-currency collections and supplier payments, but they cannot replace a full MYR corporate account at a licensed bank for tax obligations, payroll, and SST compliance.

5. Step-by-Step: How to Open a Corporate Bank Account as a Foreign Company in 2026

The following process reflects what foreign-owned Sdn Bhd companies should expect when applying for a corporate account at an international or major local bank in Malaysia in 2026.

Step 1: Incorporate Your Sdn Bhd with SSM First

You cannot open a Malaysian corporate bank account without an active SSM-registered company. Your company must have a valid SSM registration number, a registered office address in Malaysia, and appointed directors and shareholders. Banks will verify your SSM status before processing any application.

Step 2: Prepare Your Full Document Package

This is the most critical step — and where most foreign companies fail. The document package for a foreign-owned Sdn Bhd is substantially more extensive than for a locally-owned company. You need to prepare:

• Malaysian Sdn Bhd Documents: SSM Certificate of Incorporation (Form 9 / Section 17 certificate), Memorandum & Articles (or Constitution), Form 49 (Register of Directors), Form 24 (Register of Shareholders), Board Resolution authorising account opening and naming authorised signatories
• Foreign Parent Company Documents: Home-country Certificate of Incorporation or Business Registration, Articles of Association / Constitution, Register of Shareholders (certified or notarised), Corporate Profile or equivalent official extract
• Beneficial Ownership Documents: Full group ownership chart from top to bottom identifying all natural person UBOs; certified copies of passport for each UBO who holds 25%+ directly or indirectly; for SOE-affiliated structures, additional documentation per BNM's CDD circular on government-linked companies
• Business Plan / Activity Proof: Business plan or description of Malaysian operations; contracts, purchase orders, or letters of intent from Malaysian or regional customers/suppliers; confirmation of the source of initial capital injection
• Director Identification: Certified passports of all directors; for directors who are also key signatories, some banks require a recent utility bill or official proof of overseas residential address
• Tax Documentation: Corporate Tax Identification Number (TIN) from LHDN Malaysia (required since 2024–2025 e-invoicing rollout); home-country tax registration number of the parent company (for CRS/FATCA compliance)

Step 3: Select the Right Bank and Branch

Bank selection is not merely a matter of convenience — it is a strategic decision. Foreign-owned companies should prioritise banks with dedicated international business desks or business banking centres. Avoid applying at a retail branch with staff who may have limited experience processing foreign corporate structures. Confirm in advance whether the bank can accommodate all-foreign director companies without a local resident director requirement.

Step 4: Submit the Application and Attend the Director Interview

Foreign-owned businesses and those with complex ownership structures often face additional checks, including a director interview to confirm the nature of the business. In most cases, at least one director or authorised signatory must visit the bank in person — remote account opening is generally reserved for Malaysian residents with a MyKad. For foreign directors based overseas who cannot travel to Malaysia immediately, some international banks (OCBC, HSBC, UOB) will accept a structured video interview combined with notarised documents, but this is case-by-case and should be confirmed before submission.

Step 5: Compliance Review and Account Activation

After submission, the bank's compliance team will conduct AML and KYC checks. For foreign-owned companies, this can take 2–4 weeks for international banks and up to 6 weeks for major local banks. During this period, the bank may request additional documents — respond promptly and completely, as incomplete responses are the single biggest cause of delays. Once approved, you will receive your account number, internet banking access, security tokens, and a business debit card. Fund the account with the required initial deposit to activate.

6. CRS, FATCA and Cross-Border Reporting: What Foreign Owners Must Know

One dimension of Malaysian corporate banking that many foreign investors overlook is the automatic tax information exchange regime. Malaysian banks report non-resident account details — including the Taxpayer Identification Number (TIN) and account balances — to Malaysian tax authorities, who share the data with foreign jurisdictions under the Common Reporting Standard (CRS) and FATCA frameworks.

For a Chinese investor, this means that the balances and transactions in your Malaysian Sdn Bhd's bank account will be reported to the China State Taxation Administration under the CRS (China joined CRS in 2018 and commenced exchanges in 2018/2019). For Hong Kong investors, the same applies under HK's CRS framework. For Singapore and Taiwan investors, equivalent reporting applies under their respective CRS/FATCA obligations. This is not a reason to avoid opening an account — it is simply information that foreign beneficial owners need to disclose correctly in their home-country tax filings.

When opening the account, banks will require you to declare your residency status and provide your home-country TIN for CRS purposes. Failure to provide accurate information constitutes a compliance breach with potential consequences in both Malaysia and your home jurisdiction.

7. A Worked Example: Chinese Manufacturing Company Setting Up in Selangor

Consider the following scenario — a representative case of the type of situation ONEKEY BIZ frequently handles.

Background: A Shenzhen-based electronics manufacturer (Shenzhen Co. Ltd, listed on the Shenzhen Stock Exchange) decides to establish a Malaysian wholly-owned subsidiary (Malaysian Electronics Sdn Bhd) in a Selangor industrial park to serve regional customers and take advantage of Malaysia's preferential trade arrangements. The parent company is 60% owned by an individual founder and 40% owned by a Cayman Islands holding company, which is in turn wholly owned by the same founder.

What the bank needs to see:

• SSM documents for Malaysian Electronics Sdn Bhd
• Shenzhen Co. Ltd's business registration from SAMR (State Administration for Market Regulation), Articles of Association, and official shareholder register — all notarised and apostilled (or for use in Malaysia, a notarised copy with a certified Chinese-to-English translation)
• The Cayman Islands holding company's incorporation documents and register of members — obtained from the Cayman Islands Registrar
• The founder's certified passport as the ultimate natural person UBO (owning 100% via direct and indirect chain)
• Evidence that the company is listed on the Shenzhen Stock Exchange (listed companies often receive simplified UBO treatment for the public float portion, but the controlling shareholder still needs full documentation)
• A business plan describing the Malaysian manufacturing/trading operations, initial capital amount (e.g., USD 500,000 inward remittance), and projected annual turnover
• Source of funds letter or board resolution from the parent company authorising the capital injection

Likely timeline: With a complete document package submitted at first application, an international bank (OCBC or Alliance) would typically complete compliance review and open the account in 2–3 weeks. A major local bank may take 4–6 weeks and may require the founder to attend in person in Malaysia.

FEP implications: The initial USD 500,000 capital injection is an inward remittance — no FEP restrictions apply. Subsequent operational payments to suppliers in China and procurement of imported components are permitted against commercial invoices. Dividend repatriation to Shenzhen Co. Ltd is permitted subject to the documentation described above. The company should maintain a clear separation between its MYR operational account and any foreign currency account to ensure clean audit trails for LHDN and BNM purposes.

8. Common Mistakes and How to Avoid Them

• Submitting incomplete documents at the first appointment. Banks cannot process applications with missing links in the ownership chain. Build the full group structure map before you approach any bank, and confirm with the bank's relationship manager exactly what they need for your specific structure.
• Choosing the wrong bank for a foreign-owned structure. Not all Malaysian banks have equal experience with multi-jurisdictional corporate structures. Starting with a bank that has no dedicated international business desk increases rejection risk significantly.
• Assuming remote/digital-only opening is possible. Most banks require physical presence for at least initial identity verification for foreign-owned companies. Plan your director's travel to Malaysia around the bank appointment, not the other way around.
• Ignoring the TIN requirement. Since the 2024–2025 expansion of Malaysia's e-invoicing (MyInvois) system, banks now request your corporate TIN from LHDN during onboarding. Register for your TIN with LHDN as early as possible after SSM incorporation.
• Conflating the Malaysian subsidiary's FEP obligations with the parent's FX controls. Chinese companies in particular sometimes confuse BNM's FEP rules (which govern the Malaysian entity) with SAFE (State Administration of Foreign Exchange) rules in China (which govern outbound investment from China). Both sets of rules apply — but separately, to different entities in the group.
• Not declaring changes in ownership or residency status to the bank. BNM requires banks to conduct ongoing CDD. If the Malaysian company's ownership structure changes after account opening (e.g., new shareholders, change of UBO), the bank must be notified promptly. Failure to declare changes is a compliance breach.

9. Next Steps: How ONEKEY BIZ Can Help

Opening a corporate bank account as a foreign-owned company in Malaysia is manageable — but only if you approach it with the right document preparation, bank selection strategy, and compliance awareness. The penalties for getting it wrong range from rejection and wasted time to account freezes, BNM investigation referrals, and reputational damage with prospective Malaysian business partners.

ONEKEY BIZ's dedicated Bank Account Opening (OCBC & Alliance Bank) service is built specifically for foreign-owned companies entering the Malaysian market. We prepare your full document package (translated where necessary), map your beneficial ownership structure in BNM-compliant format, select the right bank based on your company's risk profile, and liaise directly with the bank's relationship manager and compliance team to ensure your application moves forward without unnecessary delays.

We also work closely with our incorporation, company secretary, and accounting teams — meaning your SSM registration, LHDN TIN application, and bank account opening can all proceed in a coordinated sequence rather than in ad hoc silos. If you have any questions about your specific structure or situation, contact our team for a no-obligation consultation before you book your first bank appointment.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.