Malaysia Digital (MD) Status 2026: The Complete Guide for Foreign Tech Companies — MDLR Framework, Tax Incentives, Talent Rules and How to Apply

Malaysia's Malaysia Digital (MD) Status — the rebranded successor to the iconic Multimedia Super Corridor (MSC) — has undergone its most substantial upgrade since its 2022 relaunch. Between May 2024 and January 2026, the government rolled out an outcome-based tax incentive framework offering rates as low as 0% on IP income, launched the brand-new MD Location Recognition (MDLR) framework, and updated Employment Pass salary thresholds specifically for MDEC-registered companies. For foreign technology companies from China, Taiwan, Hong Kong, and Singapore, this creates a rare, time-sensitive opportunity to enter Southeast Asia's fastest-growing digital economy with exceptional fiscal protection — but only if you understand the rules, act before the deadlines, and structure your Malaysian company correctly from day one.

1. Background: From MSC Malaysia to Malaysia Digital — Why It Matters Now

Malaysia's digital investment programme began in 1996 as the Multimedia Super Corridor (MSC), a geographically defined zone centred on Cyberjaya and KLCC designed to attract global tech multinationals. Over 26 years, it succeeded dramatically — attracting RM 485 billion in cumulative investments and creating over 223,000 high-value jobs by December 2022.

But the world changed. Cloud computing, remote work, and distributed tech teams made the idea of a fixed "corridor" increasingly obsolete. In July 2022, the government formally replaced MSC with Malaysia Digital (MD) Status, switching from a location-based to an activity-based model. This single change was transformative: instead of needing a registered office inside a designated Cybercity building, companies now simply need to carry out approved digital activities — from anywhere in Malaysia.

Since then, the pace of development has accelerated dramatically. Total approved digital investments in 2024 reached RM 163.6 billion, surpassing the 2023 figure by 250%. The digital investment inflow was also creating more than 48,000 jobs, surpassing the 2023 total by 109%. Malaysia attracted over RM 86 billion in data centre investments in 2024 alone, establishing the country as Southeast Asia's leading data centre hub with 77 data centres throughout the country. Against this backdrop, MDEC launched a new outcome-based tax incentive in May 2024 and a new location recognition framework in January 2026 — creating the most compelling entry package in the country's digital history.

2. What Is MD Status? Core Eligibility Requirements Explained

MD Status is an official recognition awarded by MDEC to companies that propose to carry out or are currently carrying out approved Malaysia Digital activities. It unlocks a package of fiscal and non-fiscal benefits known as the Bill of Guarantees (BoG). Here is exactly what you need to qualify:

Incorporation and Residency

Your company must be incorporated under Malaysia's Companies Act 2016 and be a resident of Malaysia for tax purposes. This is the single most important prerequisite — MD Status cannot be held by a branch office or a foreign-incorporated entity. You must establish a proper Malaysian subsidiary (a Sdn. Bhd.) first. This is where our Sdn. Bhd. Incorporation service is the critical first step for foreign companies entering Malaysia's digital economy.

Minimum Financial Thresholds

• Paid-up capital: Minimum RM 1,000 (very low barrier — deliberately so).
• Annual operating expenditure: At least RM 50,000 per year in activities related to the approved MD activities.

Minimum Employment Requirement

At least two full-time employees must be engaged in the approved MD activities, each earning an average monthly base salary of at least RM 5,000. These conditions must be complied with within 12 months from the date the MD Status award is granted.

Qualifying Digital Activities

Your core business must involve the research, development, commercialisation, or provision of services in one or more of the following promoted technology areas:

• Artificial Intelligence (AI) and/or Big Data Analytics (BDA)
• Internet of Things (IoT)
• Cybersecurity
• Cloud Services
• Blockchain
• Drone Technology
• Creative Media Technology (including Extended Reality / Mixed Reality)
• Integrated Circuit Design with Embedded Software
• Robotics and Automation
• Advanced Network Connectivity and Telecommunication Technology

MDEC's approval committee also has discretion to accept activities outside these categories if deemed significant for Malaysia's digital ecosystem — so even if your tech niche is not on this list, it is worth applying and explaining your case.

3. The MD Bill of Guarantees (BoG): Non-Fiscal Benefits That Foreign Companies Often Overlook

Beyond the headline tax numbers, MD Status confers a set of powerful non-fiscal protections under the Bill of Guarantees (BoG) that are equally important for foreign investors:

• 100% foreign ownership: MD Status companies are explicitly exempt from Bumiputera equity requirements, allowing full 100% foreign shareholding in sectors that would otherwise require local partnership.
• Freedom to source capital globally (BoG 5): MD companies can raise and borrow funds globally without standard foreign exchange restrictions. You can freely repatriate capital, profits, and dividends in foreign currency — a critical advantage for CFOs managing cross-border treasury.
• Expedited talent mobility: Through MDEC's eXpats Service Centre, MD companies enjoy pre-approved quotas for hiring international talent, including fast-tracked Employment Pass processing. This effectively bypasses the standard ESD quota system for foreign knowledge workers.
• Malaysia Digital Acceleration Grant (MDAG): Eligible companies can access direct co-funding of up to RM 5 million on a 70:30 matching model for commercialisation and expansion — a direct cash benefit, not just a tax break.
• Competitive infrastructure: Access to facilities and services at MDLR-recognised locations across Malaysia.
• No censorship of the internet: A long-standing guarantee maintained from the MSC era, critical for global digital operations.

4. The MD Tax Incentive: A Deep Dive Into Rates, Tiers, and What Each Means for Your Business

On 31 May 2024, MDEC officially launched the Malaysia Digital Tax Incentive scheme — an outcome-based framework designed to replace the older, less targeted incentive structures. The scheme is divided into two categories based on whether you are making a new investment or an expansion of existing activities.

Category A: New Investment Incentive

This applies to companies proposing entirely new qualifying digital activities in Malaysia that have not yet issued any sales invoices for those activities at the time of application. You choose between:

• Reduced Tax Rate (RTR): 0% on qualifying intellectual property (IP) income (subject to the OECD-aligned modified nexus approach), and 5% or 10% on qualifying non-IP income, for up to 10 consecutive years of assessment.
• Investment Tax Allowance (ITA): 60% or 100% of qualifying capital expenditure, offset against up to 100% of statutory income, for up to 5 consecutive years. This is particularly powerful for capital-intensive operations like data centres, cloud infrastructure, or advanced manufacturing tech.

Category B: Expansion Incentive

This applies to companies that already have existing digital activities in Malaysia and are expanding into new activities or investing in new tech enablers. You choose between:

• Reduced Tax Rate (RTR): A flat 15% reduced tax rate on qualifying income for up to 5 years.
• Investment Tax Allowance (ITA): 30% or 60% of qualifying capital expenditure, offset against up to 100% of statutory income, for up to 5 years.

5. The New MDLR Framework (Effective 1 January 2026): What Changed and What It Means for Office Strategy

One of the most practically significant changes in 2026 is the introduction of the MD Location Recognition (MDLR) framework, which took effect on 1 January 2026. Announced by MDEC on 15 December 2025, the MDLR replaces the legacy MD Cybercity/Cybercentre model with a more modern, commercially relevant three-tier system.

The Three MDLR Tiers

• MD Hub: Recognises dynamic, vibrant co-working and shared-office spaces that serve as community centres for digital startups, accelerators, incubators, and early-stage tech companies. Ideal for companies just entering the Malaysian market that want community access and flexibility before committing to a full office lease.
• MD Nexus: Recognises premium business premises equipped with advanced infrastructure for established digital investors and large tech companies. These locations are assessed across four performance pillars: digital infrastructure, electrical supply, vibrancy of business environment, and enhanced value proposition. On 4 February 2026, Malaysia's Minister of Digital officially named Menara Merdeka 118 as Malaysia's first MD Nexus location — the country's tallest and most iconic skyscraper. MDEC has stated its intention to build on Merdeka 118 as a benchmark as more future-ready locations are developed nationwide.
• MD Tech Zone: Recognises dedicated areas focused on niche, high-impact digital technology development — essentially purpose-planned tech parks and business zones such as Cyberjaya that support specialised innovation and industry-specific advancement.

Why MDLR Matters Even If You're Not Required to Be There

Here is the nuance that many foreign companies miss: you do not need to be in an MDLR-certified location to hold MD Status or claim MD tax incentives. MD Status remains activity-based — you can operate from any office in Malaysia. However, choosing an MDLR-recognised building delivers strategic advantages that go beyond compliance:

• MDEC actively promotes MDLR-recognised buildings to global digital investors during roadshows and investment missions — your company benefits from that visibility.
• MD Nexus buildings are required to meet defined digital infrastructure and power resilience standards, ensuring your operations run in a genuinely tech-ready environment.
• Being located in a certified building strengthens your profile with enterprise clients, global partners, and talent you are recruiting — particularly for companies positioning themselves as regional headquarters.
• Only 13% of MD Status companies currently operate from MD-certified premises — moving into a MDLR location places you in an elite, differentiated cohort.

6. Employment Pass Rules for MDEC Companies: The 1 June 2026 Salary Update

One of the most practically urgent changes for foreign companies in 2026 concerns expatriate talent. MDEC announced that the minimum salary requirements for Employment Pass (EP) Categories I, II, and III for MDEC-registered companies would be increased, effective 1 June 2026. All new and renewal EP applications submitted from 1 June 2026 onwards must comply with the revised minimum salary requirements.

Critically, this is a separate set of thresholds from the general EP requirements processed through the Expatriate Services Division (ESD) — at the time of writing, no similar increase has been announced for non-MDEC EP applications. This means MDEC-channel EP holders face a higher salary floor, but also benefit from significantly faster processing and pre-approved quotas that the ESD channel does not offer.

What this means for your hiring plan:

• Review all current and upcoming hiring plans involving foreign knowledge workers immediately.
• Assess the impact on pending EP renewals, especially those approaching expiry in mid- to late 2026.
• Budget for revised salary levels to ensure continued eligibility for EP applications through the MDEC channel.
• Consider the trade-off: higher salary floor but faster processing and pre-approved quotas vs. the standard ESD channel with lower thresholds but slower approvals and stricter quota management.

For most foreign companies entering Malaysia's digital economy, the MDEC EP channel remains the superior option — the quota flexibility and processing speed more than justify the higher salary commitment.

7. Step-by-Step: How a Foreign Company Applies for MD Status in 2026

The following is the practical sequence a foreign company needs to follow. Each step has real-world timing and cost implications:

1. Step 1 — Incorporate your Malaysian Sdn. Bhd. (Week 1–2)
   MD Status can only be held by a company incorporated in Malaysia under the Companies Act 2016. You cannot apply as a foreign branch office. If you are a Chinese, Taiwanese, Hong Kong, or Singaporean company, you need a separately incorporated Malaysian subsidiary first. Our Sdn. Bhd. Incorporation service handles the full SSM registration process, including company name search, Memorandum & Articles, and statutory filings — typically completed in 7–10 working days.
2. Step 2 — Prepare your Business Plan and Supporting Documents (Week 2–3)
   MDEC requires a detailed business plan that demonstrates your qualifying digital activities, projected revenue, employment plan, and investment commitment. This is not a cursory document — allocate at least one week to prepare it properly. Include: company profile, description of digital activities, technology used, 3-year financial projections, headcount plan, and evidence of the qualifying tech enablers you will deploy.
3. Step 3 — Register on the MD Portal and Submit Application (Week 3–4)
   Create an account on the official Malaysia Digital portal at malaysiadigital.mdec.my. The application requires uploading all supporting documents. The non-refundable processing fee is RM 1,080 per application. Ensure all details are accurate — errors or omissions delay the process.
4. Step 4 — MDEC Evaluation and Approval (Week 4–12)
   MDEC's approval committee reviews your application against the qualifying activity criteria and nine MD Drivers. Processing times vary — straightforward applications in core tech sectors like AI, cloud, or cybersecurity are typically assessed faster. If your activity is outside the standard list, expect the committee to request additional clarification, which can extend the timeline.
5. Step 5 — Receive MD Status Award Letter and Begin Operations (Upon Approval)
   Once approved, your 12-month compliance clock starts. You must begin operations, hire your minimum two knowledge workers at RM 5,000+/month, and hit the RM 50,000 annual opex threshold within this window.
6. Step 6 — Apply for MD Tax Incentive (Separately, Before 31 December 2027)
   MD Status and the MD Tax Incentive are two separate applications. After receiving MD Status, you apply separately for the tax incentive via the same MD Portal. Choose between RTR and ITA based on your business model. For the New Investment RTR, you must then submit a request for the commencement Year of Assessment to MDEC within 24 months of the principal approval date.

8. Worked Example: A Chinese SaaS Company Entering Malaysia

To make this concrete, consider a Chinese enterprise software company ("TechCo Shanghai") that wants to establish a Southeast Asian hub in Malaysia to sell AI-driven ERP solutions to regional clients.

Scenario setup: TechCo Shanghai will incorporate a new Malaysian subsidiary, TechCo Malaysia Sdn. Bhd., with RM 500,000 paid-up capital (above the RM 50,000 MD tax incentive minimum). It plans to hire 8 knowledge workers (4 local Malaysians, 4 from China/Taiwan on EP) and will operate from a serviced office in KL Sentral initially.

MD Status eligibility: TechCo Malaysia's core business is AI and BDA — squarely in the approved category. It will employ more than 2 full-time employees above RM 5,000/month and will incur well over RM 50,000 in annual operating expenses. It qualifies on all criteria. MDEC application fee: RM 1,080.

Tax incentive choice: TechCo Malaysia has not yet issued any invoices for its Malaysian activities, so it qualifies for the New Investment Incentive. Its primary income will be software licensing fees (IP income) from regional clients, plus service revenue (non-IP). It selects the RTR option: 0% on IP income, 10% on non-IP income, for 10 years. At Malaysia's standard corporate tax rate of 24%, this represents a very significant annual tax saving — potentially tens of millions of ringgit over the incentive period as the business scales.

Location decision: TechCo Malaysia starts in a serviced office (not MDLR-certified) for Year 1 while establishing operations. By Year 2, as it grows to 25+ staff and signs enterprise contracts with Malaysian GLCs, it relocates to an MD Nexus-certified building, leveraging MDEC's promotional channels to attract additional regional clients.

EP for Chinese staff: Four Chinese nationals join as technical leads and product managers on Employment Pass (MDEC channel, Category I/II). All salary packages are budgeted at or above the 1 June 2026 revised thresholds.

This is a realistic, low-friction path to establishing a fully compliant, tax-optimised digital business in Malaysia — exactly the kind of structure that our team at ONEKEY BIZ helps clients design and execute.

9. Common Mistakes Foreign Companies Make — and How to Avoid Them

• Mistake 1: Incorporating first, planning second. Many foreign companies rush to incorporate their Sdn. Bhd. without a clear business plan aligned to the MD qualifying activity list. If your corporate objects clause or described business activities don't clearly reflect an approved MD activity, MDEC will reject or delay your application. Always define your tech activity before incorporation so it is reflected in your company's constitutional documents.
• Mistake 2: Confusing MD Status with the MD Tax Incentive. These are two separate applications. MD Status is awarded upon meeting the basic eligibility criteria; the MD Tax Incentive requires a second, separate application via the MD Portal with additional commitments. Many companies receive MD Status but never follow through on the tax incentive application — and then miss the 31 December 2027 deadline.
• Mistake 3: Missing the 12-month operational compliance window. MD Status has conditions that must be met within 12 months of the award date: commence operations, hire the minimum employees, and incur the minimum opex. Companies that treat the award as the finish line — rather than the starting line — risk having their status revoked.
• Mistake 4: Assuming MD Status guarantees all EP approvals. MD Status gives you access to MDEC's EP channel with pre-approved quotas, but individual EP applications still require the employee's salary to meet the revised thresholds (effective 1 June 2026). Budget correctly.
• Mistake 5: Ignoring the MDLR location opportunity. Some foreign companies choose offices based purely on rent without considering MDLR certification. As MDEC increasingly directs global digital investors toward MDLR-recognised buildings, non-certified locations will face a creeping credibility disadvantage when pitching for enterprise contracts or regional HQ roles.
• Mistake 6: Choosing RTR vs. ITA without modelling both scenarios. The choice between RTR and ITA is irrevocable once made. A data centre or cloud infrastructure operator with heavy upfront capex should almost certainly choose ITA (up to 100% capex write-off vs. statutory income). A pure SaaS or IP company with recurring licence income should model the 10-year 0%/10% RTR carefully. Do not make this decision without proper tax modelling.

10. What To Do Next: Your Action Plan

If you are a foreign company from China, Taiwan, Hong Kong, or Singapore considering Malaysia as your Southeast Asian hub, the window for maximum incentive value is open — but it has an expiry date. Here is your immediate action plan:

1. Confirm your qualifying activity against the MDEC approved MD activities list. If in doubt, MDEC's CLIC team (clic@mdec.com.my) can provide pre-application guidance.
2. Incorporate your Malaysian Sdn. Bhd. — this is the non-negotiable first step. Our Sdn. Bhd. Incorporation service gets this done in 7–10 working days, with your corporate objects correctly drafted to reflect your MD-qualifying digital activities.
3. Prepare your MD Status application — business plan, employment plan, financial projections — and submit via the MD Portal with the RM 1,080 fee.
4. Immediately begin planning your MD Tax Incentive application — do not wait. Your window closes 31 December 2027, and the RTR commencement clock starts from the date of principal approval.
5. Model your RTR vs. ITA choice with a qualified tax advisor — the right choice depends entirely on your specific business model, capex profile, and IP ownership structure.
6. Plan your EP hires with the 1 June 2026 revised MDEC salary thresholds in mind. Budget correctly before making offers to foreign staff.

ONEKEY BIZ provides end-to-end Malaysia market entry support — from company incorporation and MD Status application preparation through to accounting, corporate secretarial compliance, and Employment Pass facilitation. Contact us today for a free consultation on structuring your Malaysian digital investment.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.