Before You Can Hire a Foreigner in Malaysia 2026: The Three Local-Hiring Gates Nobody Budgets For — Section 45F Vacancy Notification and Its New Tiered Fines From 30 June 2026, the Seven-Day MYFutureJobs Advertisement Below RM15,000, and the Section 60K JTKSM Approval ESD Checks Before It Will Even Open Your Employment Pass File

Almost every foreign-owned company that comes to us with a rejected or stalled Employment Pass has made the same mistake: it started at the wrong end. It picked the candidate, signed the offer letter, booked the flight — and only then went looking for the immigration process. But Malaysia does not begin the expatriate hiring process at the Expatriate Services Division. It begins with three separate local-hiring gates, administered by three different agencies, that must be cleared before ESD will accept an application at all. Miss them and you do not merely lose time; from 30 June 2026, when the Dewan Rakyat approved the revised penalty structure under section 45F of the Employment Insurance System Act 2017, one of them carries a compoundable fine that escalates with every repeat offence. This guide sets out the three gates in the order the system enforces them, the seven-day advertisement and the exemptions that genuinely work, the Section 60K approval that ESD silently checks first, and the realistic sequencing that turns a four-month scramble into a predictable eight weeks.

The three gates, in the order the system actually enforces them

Malaysia's policy position is not that foreign talent is unwelcome. It is that a Malaysian jobseeker must have had a genuine, documented opportunity at the role first. Three separate statutes give that policy teeth, and they operate in sequence rather than in parallel:

Gate 1 — Section 45F: telling PERKESO before you recruit anyone

This is the gate most foreign-owned companies have never heard of, and it is the one that changed in 2026.

Section 45F of the Employment Insurance System Act 2017 requires every employer to notify PERKESO, in writing, of any vacancy or newly created position before recruiting for it. In practice that notification is made by posting the vacancy on MYFutureJobs, PERKESO's national employment portal. The obligation is not limited to expatriate hiring — it covers a receptionist, a warehouse supervisor, a finance manager, anyone. It applies to a company with three employees just as it applies to a company with three hundred.

For years the provision existed without a meaningful penalty, and compliance was patchy. That changed through a legislative sequence worth understanding, because the number most companies have heard is now wrong:

Two practical points follow. First, the fine is now materially smaller than the figure circulating in HR briefings from late 2025 — if a vendor is still quoting RM10,000 exposure, their material is out of date. Second, and more importantly, the deterrent is no longer the amount but the escalation. A company that treats vacancy notification as optional does not face one RM1,000 problem; it faces a rising schedule applied hire after hire, on a register that PERKESO maintains centrally and that sits alongside your contribution records.

The Ministry of Human Resources has signalled that enforcement will open with compliance notices and briefings rather than immediate compounds. That is a grace period, not an exemption, and it is the cheapest window a company will ever get to put the process in place.

Gate 2 — the MYFutureJobs advertisement: seven days, and the exemptions that work

For expatriate hiring, the same portal carries a second and heavier obligation. Before ESD will entertain an Employment Pass application, the employer must have advertised the position on MYFutureJobs under the PAPD programme, reported the outcome, and obtained a verification letter (Surat Perakuan Pengiklanan) from PERKESO.

The single most common error here is quoting the wrong duration, because it has been reduced twice and several public pages — including material still sitting on government-adjacent sites — have never been updated:

The advertisement is not a formality that can be padded out with a vague notice. PERKESO expects the posting to carry the position title, academic qualification required, basic salary and any allowances, job scope, and the specific skills and competencies sought. A deliberately unattainable specification written to guarantee no local applicants is the classic failure mode: it produces a clean advertisement record and an ESD officer who asks why a role at this salary demands a decade of experience in a technology nobody in the market uses.

After the period closes, the employer submits a Hiring Outcome Report recording what happened to each Malaysian applicant — interviewed, rejected and why, or not contacted. PERKESO issues the verification letter by email from papd@perkeso.gov.my, generally within three working days of a complete submission. That letter is what unlocks the next stage.

Who is exempt from advertising

Exemption is category-based, not discretionary. The recognised categories are:

The RM15,000 line is the one that does real work. It is worth noting how it sits against the Employment Pass salary framework that took effect on 1 June 2026: an EP Category I role, at RM20,000 and above, is comfortably clear of the advertising requirement. An EP Category II role spans RM10,000 to RM19,999 — so it straddles the line, and whether you advertise depends on where in that band the package sits. Every EP Category III role, at RM5,000 to RM9,999, must be advertised. For a fuller treatment of those tiers, duration caps and the succession-plan condition, see our guide to the June 2026 Employment Pass salary thresholds.

Gate 3 — Section 60K: the JTKSM approval ESD checks before it looks at your EP

Since 1 January 2023, section 60K of the Employment Act 1955 has required an employer to obtain the prior written approval of the Director General of Labour before employing any non-citizen. This is not a foreign-worker-only rule. It covers expatriates, and it is administered by the Peninsular Malaysia Labour Department (JTKSM) through the ePPAx system.

Three features of this gate matter operationally:

• It is a precondition, not a parallel step. The JTKSM approval letter must exist before the ESD submission. For EP Category I applications in particular, ESD expects the Section 60K approval up front.
• Validity is 12 months. Since 1 October 2024, approvals for all categories of non-citizen employees managed by JTKSM carry a twelve-month validity. An approval obtained for a role you did not fill in time expires; it is not a permanent entitlement.
• There is a post-hire notification too. Section 60K(3) requires the employer to notify JTKSM of the employment of the foreign employee within 14 days of the date of employment. Companies routinely clear the approval and then miss this second, smaller obligation.

The ePPAx platform itself has moved. Manual, case-by-case submissions ceased to be accepted from 6 July 2026, and quota applications are now centrally managed by KESUMA through the FWCMS eQuota module. If your last hire was handled by emailing a labour office contact, that route has closed.

How the gates line up against the June 2026 Employment Pass tiers

Putting the pieces together, here is what a foreign-owned Sdn Bhd actually faces per hire:

Realistic timeline and cost

For a Category III hire — the most heavily gated case, and the most common for a new market entry — a properly sequenced run looks like this:

Assume eight to fourteen weeks end-to-end for a first expatriate where the ESD account does not yet exist, and six to ten weeks once the company is already registered. The advertising period is the least of it — seven days is now a rounding error next to the Section 60K and ESD stages. Which is precisely why skipping it makes no sense.

Six ways foreign-owned companies fail these gates

1. Hiring the Malaysian team without notifying at all. Section 45F applies to local hires too. A company that has staffed a twenty-person office over two years without a single MYFutureJobs posting has a compliance history, not a single incident — and it is exactly the pattern the tiered penalty structure was designed to reach.

2. Advertising after the decision. Posting a vacancy for a candidate who has already signed produces a record that reads as a formality, and it is visible: the outcome report shows no interviews and no rejections. Officers read these.

3. Relying on the abolished niche-skills exemption. This exemption was withdrawn on 15 June 2023. Advisers still citing it are working from pre-2023 material.

4. Quoting 30 days and building a schedule around it. The requirement has been 7 days since 1 January 2025. Companies that plan for 30 lose three weeks they did not need to lose.

5. Treating Section 60K as a foreign-worker rule. It covers every non-citizen employee. The China-based technical director being moved to KL needs it as much as a production operator does.

6. Missing the 14-day post-hire notification. Section 60K(3) is a separate obligation from the approval, and it is the one most often left undone once the pass is in hand. It sits alongside the other post-hire duties — EPF, SOCSO, EIS and PCB registration — covered in our employer payroll guide.

What to actually do

If you are setting up a Malaysian entity and expect to hire in the next twelve months, do three things now, before you have a candidate:

1. Register as an employer on MYFutureJobs as soon as your PERKESO employer code exists. It is free, it takes a few days, and it converts Gate 1 from a project into a checkbox.
2. Register with ESD in parallel with, not after, your first recruitment. The ESD company registration is a one-off that consistently sits on the critical path for first-time employers.
3. Write the job specification honestly at the outset. The same text goes into the advertisement, the Section 60K application and the EP justification. Three inconsistent versions of one role is the most avoidable rejection there is.

The underlying logic is worth stating plainly, because it makes the rest of the process predictable: Malaysia is not asking you to prove that no Malaysian could do the job. It is asking you to prove that you looked, that you responded to those who applied, and that the expatriate you chose is being paid what the tier requires. Companies that build that evidence as they go clear these gates in days. Companies that assemble it afterwards spend months.

If the wider employment framework is new to you — contracts, working hours, statutory leave, termination — start with our Employment Act 1955 compliance guide for foreign employers. And if you would rather have the three gates, the ESD registration and the pass application run as one sequence rather than three, ONEKEY BIZ handles this end-to-end for foreign-owned companies: see Employment Pass — Category I or talk to us about your specific role and timeline.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.