Key takeaways
- CIDB registration is mandatory by law for all contractors — local and foreign — before signing or executing any construction work in Malaysia (Section 25, Act 520).
- Two legal paths exist for foreign companies: (1) incorporate a Malaysian Sdn Bhd and obtain a G-grade for ongoing multi-project work, or (2) use project-based foreign-contractor registration for a single named project.
- G1–G7 grades cap both tender values and paid-up capital — from G1 (RM 200k tender limit, RM 10k capital) to G7 (no tender limit, RM 750k capital). Choose the right grade before you sign any contract.
- The 70% local-equity rule applies to PPK (local-contractor) registration — but a 100%-foreign-owned Sdn Bhd can still obtain a CIDB grade by meeting the financial and personnel requirements.
- SPKKA (government-tender access) is only available to contractors from CPTPP-ratifying countries. Companies from China, Hong Kong and Taiwan cannot independently bid for Malaysian government construction contracts under current rules.
- Digital-first applications through the CIMS portal and Malaysia Contractors' Portal (MCP) are now the standard; paper processes are the exception.
Why CIDB Registration Matters More Than Ever in 2026
Malaysia's construction industry has seen sustained growth linked to the Twelfth Malaysia Plan (RMK-12) infrastructure investments, a Data Centre corridor stretching from Johor to Selangor, and the Visit Malaysia 2026 hospitality construction wave. Foreign contractors — especially those from China, Taiwan and Singapore — have entered this market in growing numbers, attracted by awarded engineering contracts, manufacturing-plant construction and commercial real estate development.
Against this backdrop, CIDB has intensified its enforcement posture. The board runs an online verification system (CIMS) and the Malaysia Contractors' Portal (MCP) that allow project owners, government agencies and the public to check any contractor's grade, category, registration status and expiry date in real time. Virtual PPK, SPKK and STB certificates now carry QR codes that link directly to CIDB's records — meaning fraudulent or expired certificates are caught almost instantly. For a foreign company, the message is clear: there is no hiding in the shadows of an informal relationship with a local subcontractor while you do the real work. CIDB enforcement extends to the actual entity executing construction activities on site.
Under Section 25 of the CIDB Act 520 (Amendment 2011), the obligation is unambiguous: every contractor, local or foreign, must register with CIDB before undertaking and completing any construction work in Malaysia. Failure to register before commencing work is an offence under Section 29 punishable by a fine of not less than RM 10,000 and not more than RM 100,000. Beyond the fine, Section 30 gives CIDB the authority to issue a written stop-work notice — a power that can freeze a multi-million-ringgit project overnight.
Understanding the Two Paths: G-Grade Entity Registration vs. Project-Based Foreign Registration
The single most strategic decision a foreign construction company makes when entering Malaysia is choosing which registration structure to use. CIDB provides two distinct pathways, each suited to different business models and risk appetites.
Path 1 — Incorporate a Sdn Bhd and Register for a G-Grade (PPK)
A foreign company that incorporates a Malaysian Sdn Bhd (private limited company) under the Companies Act 2016 can register that entity for a CIDB grade (G1 through G7) just like any local contractor. The registration is tied to the company, not to any single project — meaning the entity can bid for and execute multiple contracts simultaneously, within the ceiling of its registered grade.
This path is right for foreign companies that:
- Intend to operate in Malaysia across multiple projects or on an ongoing basis;
- Want to build a trackable project history in CIDB's system (critical for grade upgrades);
- Plan to pursue government infrastructure contracts (with the SPKKA caveat for CPTPP countries discussed below);
- Are willing to maintain the paid-up capital and technical-personnel standards required by their target grade.
A critical nuance: the standard PPK (local-contractor) registration requires at least 70% Malaysian-citizen equity. A company with more than 30% foreign equity will not qualify for PPK under the standard rules. However, a fully foreign-owned Sdn Bhd is not thereby locked out. CIDB's grade registration does not categorically prohibit foreign ownership; what it requires is that the entity meets the paid-up capital, personnel and financial criteria for the grade it applies for. Foreign-owned entities have successfully obtained G-grade registrations in Malaysia — the key is structuring the company with the correct capital level and appointing personnel who meet CIDB's technical requirements. Our CIDB Grade G7 registration service covers the full entity-and-registration pathway for foreign-owned companies targeting larger projects.
Path 2 — Project-Based Foreign Contractor Registration
Under CIDB Circular No. 2/2023, which came into force on 1 February 2023 and restructured the foreign-contractor registration framework, a foreign company that has already been awarded a specific construction project in Malaysia can apply for a Foreign Contractor Registration Certificate tied to that project. This replaced the previous dual-stage system (Provisional + Final registration) with a single, streamlined process.
Key operating rules for project-based registration:
- The certificate authorises execution of only the named project — not open-ended contracting work.
- The certificate's validity period mirrors the project duration; it must be renewed within 14 days before expiry if the project is still ongoing.
- Missing the 14-day renewal window does not automatically void the project, but work must legally cease until the renewal is approved — a serious operational risk on time-sensitive projects.
- This path suits foreign companies with a single awarded project that do not intend to build a permanent presence in Malaysia.
The eligibility requirements for foreign-contractor registration are broadly similar to those for a G7 local contractor — reflecting the expectation that only established, capable foreign entities will operate in Malaysia. A technical competent person meeting CIDB's qualification thresholds must be named in the application.
The G1–G7 Grade System: Capital, Tender Limits and Category Rules
Whether a foreign company enters through a Malaysian Sdn Bhd or via project-based registration, the grade framework defines the boundaries of what you can legally tender for and execute. Each grade sets three parameters: a maximum contract value, a minimum paid-up capital, and a CIDB SCORE (Contractor Competency and Capability Rating) requirement from G2 upward.
| Grade | Maximum Tender / Contract Value | Minimum Paid-Up Capital | CIDB SCORE Minimum | Typical Use Case |
|---|---|---|---|---|
| G1 | Up to RM 200,000 | RM 10,000 | Not required | Small renovation, minor fit-out |
| G2 | Up to RM 500,000 | RM 25,000 | 2 stars | Small commercial projects |
| G3 | Up to RM 1,000,000 | RM 50,000 | 2 stars | Small civil or building works |
| G4 | Up to RM 3,000,000 | RM 150,000 | 2 stars | Medium commercial or industrial build |
| G5 | Up to RM 5,000,000 | RM 250,000 | 3 stars | Mid-size infrastructure or factory |
| G6 | Up to RM 10,000,000 | RM 500,000 | 3 stars | Large commercial or civil project |
| G7 | No limit | RM 750,000 | 3 stars | Major infrastructure, data centre, industrial complex |
Beyond the grade, CIDB also assigns Categories (B = Building Construction, CE = Civil Engineering, ME = Mechanical & Electrical) and Specialisations (such as piling, waterproofing, curtain walling). New applicants are generally assigned Categories B and CE by default; ME requires technical personnel with relevant qualifications. Specialisations require either a letter of work offer or a Management Competency Certificate from CIDB.
Why grade selection matters critically for foreign companies: Under-grading means you cannot legally execute a contract whose value exceeds your grade's ceiling — signing such a contract without the right grade breaches Section 25 before a single worker sets foot on site. Over-grading, while not illegal, means maintaining higher paid-up capital and personnel requirements than the project demands. Most foreign companies entering Malaysia for the first time should target the grade that matches their first contract's value, then upgrade as their track record grows.
The Equity and Ownership Rules: What a Foreign Company Can and Cannot Do
Foreign equity rules in CIDB registration are frequently misunderstood, leading to either missed opportunities or costly structural mistakes. The picture is nuanced:
| Registration Type | Foreign Equity Permitted | Notes |
|---|---|---|
| PPK (Local Contractor, any grade) | Max 30% (general); Max 51% for ASEAN shareholders | At least 70% Malaysian-citizen equity required for standard PPK |
| CIDB Grade via foreign-owned Sdn Bhd | Up to 100% | Must meet grade's capital and personnel requirements; not eligible for PPK designation |
| Foreign Contractor (Project-Based) | N/A (foreign entity registers directly) | Entity does not need to be incorporated in Malaysia; tied to one project |
| Consortium / Joint Venture | Flexible — JV is not itself incorporated with SSM | Two or more companies combine for a project; each partner retains its own registration |
The practical implication for Chinese, Taiwanese and Hong Kong companies — which typically seek 100% ownership — is that they should consider incorporating a wholly foreign-owned Sdn Bhd and obtaining a CIDB grade directly. This is achievable, and it is a cleaner long-term structure than a JV arrangement, which can create governance and liability complications. The critical prerequisite is ensuring the Sdn Bhd has sufficient paid-up capital from day one, as CIDB verifies bank statements and audited accounts during the application process.
For ASEAN investors (including Singapore), the 51% foreign-equity tolerance in PPK registration may also offer a middle path: a joint vehicle with a local Malaysian partner who holds at least 49%, qualifying for standard PPK registration.
SPKKA: Government Tender Access and the CPTPP Restriction
If your target market includes Malaysian government construction contracts — infrastructure, public buildings, government-linked developer projects — you need to understand the SPKKA (Sijil Perakuan Kerja Kontraktor Asing), the Government Employment Certificate for Foreign Contractors, introduced under CIDB Circular No. 1/2023.
SPKKA is the foreign-contractor equivalent of the SPKK (Sijil Peraku Kerja Kontraktor) that local contractors hold to participate in government tenders. Before 1 February 2023, foreign contractors could not obtain a SPKK (because one eligibility condition was a valid local contractor registration) and therefore could not bid for government works independently — they had to enter a joint venture with a SPKK-holding local firm. The introduction of SPKKA changed this, but with a critical restriction: SPKKA is only issued to contractors from countries that have signed and ratified the CPTPP (Comprehensive and Progressive Agreement for Trans-Pacific Partnership).
As of 2026, CPTPP ratifying members include: Australia, Canada, Chile, Japan, Mexico, New Zealand, Peru, Singapore and Vietnam.
China, Hong Kong and Taiwan are not CPTPP members. This means contractors headquartered in these jurisdictions — which constitute the majority of ONEKEY BIZ's construction-sector clients — cannot apply for SPKKA and cannot independently tender for Malaysian government construction projects. Their realistic options are:
- Focus on private-sector projects — the bulk of data-centre, industrial and commercial construction in Malaysia is private, and SPKKA is not required;
- Joint venture with a SPKK-holding local Malaysian contractor — allowing access to government projects while the local partner holds the required licence;
- Monitor CPTPP accession developments — China has applied for CPTPP membership, and any accession would open the SPKKA pathway.
The CIMS Application Process: Step-by-Step
All CIDB registration applications — whether new registration, renewal, grade upgrade, category expansion or information change — are processed through the CIMS (Construction Industry Management System) portal. The Malaysia Contractors' Portal (MCP) at mcp.cidb.gov.my provides a complementary layer for performance data, the Contractor Report Card (CRC) and project history verification. Here is the complete new-registration process for a foreign-owned Sdn Bhd targeting a G-grade:
-
Incorporate the Sdn Bhd with SSM
The company must be registered with the Companies Commission of Malaysia (SSM) before any CIDB application can be made. CIDB purchases SSM data directly; any SSM changes (director appointments, paid-up capital increases, address changes) take at least 14 days to propagate before CIDB can verify them. Plan accordingly. -
Ensure minimum paid-up capital is paid in
The capital must be deposited in the company's bank account and reflected in an up-to-date bank statement. For G7, this means RM 750,000 must be genuinely paid-up, not merely authorised. Audited financial statements will be reviewed for grades G3 and above. -
Appoint qualified technical personnel
For grades G4 and above, CIDB requires named technical personnel with relevant academic qualifications or industry certifications. Their names and qualifications are registered in CIMS and cannot simultaneously appear in more than one active CIDB registration entity. -
Submit the application through CIMS online
Upload all supporting documents: SSM certificate of incorporation, Memorandum & Articles of Association, paid-up capital evidence (bank statement or latest audited accounts), identification documents of directors, technical personnel certificates, and the processing fee of RM 50 (non-refundable). -
CIDB verification and processing
CIDB verifies capital, company status and SSM records. Typical processing time after submission of complete documents is 7–14 working days. Incomplete applications take significantly longer. If capital is insufficient or documents are inconsistent, CIDB will issue a rejection notice; you may reapply once corrected. -
Pay the registration fee (Schedule D)
Upon approval, CIDB issues a payment notice for the registration fee as per Schedule D of the CIDB Regulations. Payment must be made online through CIMS within the stipulated period. Company cheques and personal cheques are not accepted. All fees paid are non-refundable. Failure to pay within the given period results in automatic cancellation of the approval. -
Receive the PPK/SPKK certificate
The initial registration period is two years. During this period, the contractor must attend and pass the Contractor Integrity and Code of Ethics Course; G1–G3 companies without a technical certificate must also attend the Business Management (SKP) course. -
Obtain a CIDB Green Card for all site personnel
Every worker on a Malaysian construction site — including foreign workers and expatriates — must hold a valid CIDB Green Card (Construction Personnel Card). Green Cards are obtained through CIMS separately from the company registration. -
Notify CIDB of any changes within 30 days
Under Section 39 of Act 520, contractors must inform CIDB of any changes in company details (directors, shareholders, capital, address) within 30 days of the change. Failure to notify carries a fine of up to RM 5,000.
Costs, Timeline and Compliance Calendar
Foreign companies should budget for both hard costs (fees, capital) and soft costs (management time, professional fees) when planning their CIDB registration. The following summary covers the main items:
| Item | Amount / Detail | Notes |
|---|---|---|
| Processing fee (new application) | RM 50 | Non-refundable; paid at application stage via CIMS |
| Registration fee (Schedule D) | Varies by grade; paid upon approval | Non-refundable; must be paid online within stipulated period |
| Paid-up capital (G1–G7) | RM 10k – RM 750k | Must be genuinely paid in and reflected in bank statements |
| Green Card per worker | Separate CIMS fee per card | Mandatory for every site worker including foreign staff |
| SPKK annual renewal | RM 30 | SPKK is valid for one year; renew before expiry |
| Integrity & Ethics Course | Nominal course fee | Mandatory within 2-year new registration period |
| Processing timeline | 7–14 working days (complete docs) | Incomplete applications take significantly longer |
Beyond CIDB's own fees, foreign companies should also plan for the Sdn Bhd incorporation cost, the professional fees associated with preparing a CIDB-compliant application package, and the time cost of populating CIMS. For higher grades (G5–G7), audited financial accounts are typically required — a further investment if the company's accounts are not yet audited in Malaysia.
Worked Example: A Chinese Engineering Firm Entering Malaysia in 2026
Imagine Zhongda Engineering Co. Ltd, a Chinese firm specialising in industrial facility construction that has been awarded a RM 35 million contract to build a new semiconductor packaging plant in Penang. The contract was awarded by a private Malaysian company. Here is how they navigate CIDB registration:
Step 1 — Choose the right path
Because this is a single project but the firm has ambitions for more Malaysia work, they opt for Path 1: incorporate a Malaysian Sdn Bhd (Zhongda Engineering (Malaysia) Sdn Bhd, 100% Chinese-owned) and register for a G7 grade — the only grade with no tender-value ceiling, appropriate for a RM 35 million contract.
Step 2 — Capital and structure
G7 requires RM 750,000 paid-up capital. Zhongda injects this as the issued share capital of the Malaysian Sdn Bhd, verified by bank statements. Because the contract is with a private company and SPKKA (government-tender access) is not required, the Chinese ownership is not a bar to registration.
Step 3 — Technical personnel
A Malaysian civil engineer with the relevant CIDB-recognised qualifications is appointed as the named Technical Personnel for the CIMS application. This individual cannot simultaneously be the named technical person in any other CIDB-registered entity. The firm also ensures that all workers — including expatriate Chinese engineers deployed to the site — obtain their CIDB Green Cards before mobilising.
Step 4 — Application and timeline
The complete application is submitted via CIMS. Within 7–14 working days, CIDB approves the application. The registration fee under Schedule D is paid online. The G7 PPK certificate is issued, and the firm can legally sign and execute the RM 35 million contract.
Step 5 — Ongoing compliance
Within the two-year new registration period, the company director attends and passes the Contractor Integrity and Code of Ethics Course. The SPKK is renewed annually at RM 30. Any changes in directors, capital or address are notified to CIDB within 30 days.
ONEKEY BIZ managed this type of end-to-end engagement — from SSM incorporation to CIDB grade registration — through our dedicated CIDB Grade G7 registration service. We handle document preparation, CIMS submission, fee management and post-registration compliance calendaring so the client can focus on delivering the project.
Common Mistakes and How to Avoid Them
Based on the patterns we see in foreign-company enquiries, these are the most frequent and costly errors:
- Signing the contract before registration. The legal obligation under Section 25 attaches at the point of signing — not at mobilisation. Even a Letter of Award accepted without a valid CIDB registration creates exposure. Always obtain registration before accepting any construction contract.
- Selecting the wrong grade. A G3 contractor cannot execute a RM 4 million project; a G5 contractor cannot execute a RM 6 million project. If your contract value exceeds your grade's ceiling, you are operating outside your registration and in breach of Act 520. Match the grade to the largest single-contract value you expect to sign.
- Assuming the 70% local-equity rule bars foreign companies from grade registration. It does not. It bars foreign companies from the specific PPK classification, but a foreign-owned Sdn Bhd can still obtain a CIDB grade. Get professional advice before dismissing this path.
- Relying on a JV partner's CIDB registration for your own work. A JV partner's SPKK covers the JV arrangement, not your individual entity. If you are executing work as a named contractor on a contract, your entity needs its own registration.
- Letting a project-based certificate lapse. Missing the 14-day renewal window before a project-based certificate expires means legally ceasing work until renewal is approved — a potentially catastrophic delay on a time-sensitive industrial build.
- Failing to issue Green Cards for all site workers. Every person on a Malaysian construction site — including visiting foreign experts and management — must have a valid CIDB Green Card. This is frequently overlooked for short-term expatriate deployments.
- Forgetting the 30-day change-notification rule. Director appointments, capital injections, address changes — all must be reported to CIDB within 30 days. The RM 5,000 fine is secondary; a missed notification can trigger a status review that delays renewal.
What to Do Next: Your Action Plan
If you are a foreign construction company, developer or EPC contractor assessing your Malaysia market entry in 2026, here is your practical action plan:
- Determine your entry model: Is this a single project or a multi-project strategy? Single project → project-based registration. Multiple projects or ongoing presence → Sdn Bhd + G-grade.
- Assess your project values against the G1–G7 table above and select the minimum grade that covers your largest anticipated contract.
- Check your CPTPP status: If your headquarters are in China, Hong Kong or Taiwan, you cannot obtain SPKKA. Focus on private-sector contracts or structure a JV with a licensed local contractor for any government work.
- Inject the required paid-up capital into the Malaysian Sdn Bhd and prepare the documentation trail (bank statements, audited accounts if G3+).
- Appoint qualified technical personnel and confirm they are not already named in another active CIDB registration.
- Submit via CIMS and budget 7–14 working days for processing.
- Maintain your registration: Renew SPKK annually, complete mandatory courses within the two-year period, notify changes within 30 days, renew project-based certificates within 14 days before expiry.
For end-to-end handling of the incorporation, capital structuring, technical-personnel requirements and CIMS submission, speak to our team through our contact page or go directly to our CIDB Grade G7 registration service to get started today.
]]>Frequently asked questions
Do foreign companies need to register with CIDB before starting any construction work in Malaysia?
Yes. Under Section 25 of the CIDB Act 520 (as amended in 2011), every contractor — local or foreign — must register with CIDB before signing or executing any construction contract in Malaysia. Operating without registration is a criminal offence punishable by a fine of RM 10,000 to RM 100,000, and CIDB can also issue an immediate stop-work notice under Section 30.
What is the difference between a local-contractor (G-grade) registration and a foreign-contractor project-based registration?
A local-contractor (G-grade PPK) registration is tied to the company entity and allows ongoing, multi-project work within the grade's tender-value ceiling. A foreign-contractor project-based registration (introduced/revised under CIDB Circular No. 2/2023) is tied to a specific, named project. It authorises work only on that project, and the certificate must be renewed within 14 days before expiry. Foreign companies that want to run multiple projects or build a sustained Malaysia presence should incorporate a Sdn Bhd and obtain a G-grade instead.
Which countries can apply for the SPKKA government-tender certificate?
As of 2026, SPKKA — the Government Employment Certificate for Foreign Contractors — is only issued to contractors from countries that have signed and ratified the CPTPP: Australia, Canada, Chile, Japan, Mexico, New Zealand, Peru, Singapore and Vietnam. Contractors from China, Hong Kong, Taiwan and other non-CPTPP jurisdictions are not eligible for SPKKA and therefore cannot bid for Malaysian government construction tenders independently (they may still participate in private projects or via a JV with a SPKK-holding local contractor).
Can a 100%-foreign-owned Sdn Bhd register for a CIDB grade?
Yes. A Sdn Bhd that is 100% foreign-owned can register for any CIDB grade (G1–G7) provided it meets the paid-up capital, technical-personnel and other eligibility requirements for that grade. The 70% local-equity rule applies only to the local-contractor (PPK) registration pathway; a foreign-owned Sdn Bhd is treated separately and can still obtain a grade registration as long as it meets CIDB's financial and personnel thresholds.
Sources & references
This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.