If your company streams software, sells cloud storage, runs an app store, licenses SaaS, delivers online courses or takes advertising revenue from Malaysian users — and you have no office, no company and no staff in Malaysia — you can still be legally required to register for, charge and remit Malaysian tax. That obligation is Service Tax on Digital Services (SToDS), a distinct regime run by the Royal Malaysian Customs Department (RMCD) that has quietly caught out hundreds of foreign digital businesses since 2020. This 2026 guide explains who must register, the 8% rate, the RM500,000 threshold, the MySToDS "Foreign Registered Person" process, why Malaysia taxes both B2C and B2B digital supplies, and how SToDS differs from the ordinary SST that a locally-incorporated company pays.
What SToDS is — and why it exists
Malaysia reintroduced the Sales and Service Tax (SST) in September 2018 to replace GST. Service tax is a single-stage consumption tax charged on prescribed taxable services. The problem policymakers faced was obvious: a Malaysian company selling software downloads had to charge service tax, but a foreign company selling the identical download to the same Malaysian consumer did not — an unfair advantage and a growing hole in the tax base as consumption shifted online.
The answer, effective 1 January 2020, was to extend service tax to digital services supplied by foreign providers to consumers in Malaysia. The legal machinery sits in the Service Tax Act 2018 and the Service Tax (Digital Services) regulations. A foreign supplier that crosses the threshold must register as a Foreign Registered Person (FRP), charge service tax on its Malaysian digital sales, and remit it to RMCD — even though it has no physical presence in the country. It is the same policy logic behind the EU's VAT-on-e-services rules and Singapore's Overseas Vendor Registration regime.
What counts as a "digital service"
The definition is deliberately broad. A digital service is any service delivered through the internet or an electronic network where the supply is essentially automated, involves minimal human intervention, and is impossible without information technology. If the thing being sold is delivered over the wire and largely runs itself, it is almost certainly in scope. Common examples that trigger SToDS include:
| Category | Typical taxable examples |
|---|---|
| Software & SaaS | Subscription software, licences, cloud applications, downloadable programs, updates and add-ons. |
| Digital content | Streaming music and video, e-books, online newspapers/journals, images, games, in-app purchases. |
| Cloud & hosting | Cloud storage, web hosting, computing capacity, databases and platform services. |
| Online marketplaces | Platform/intermediary services, listing and commission fees charged to users in Malaysia. |
| Advertising & data | Online advertising space, search/ad services, subscription data and analytics. |
| Online services | E-learning courses, webinars, online memberships, matchmaking, gaming and other automated services. |
Note that physical goods sold online are not digital services — an e-commerce store shipping a phone to Malaysia deals with sales tax and import duty, not SToDS. SToDS is about the intangible, automated supply itself.
Who must register — the RM500,000 threshold
A foreign service provider is liable to register for SToDS once the total value of digital services provided to consumers in Malaysia exceeds RM500,000 within a 12-month period (historical or forward-looking). "Consumer" here means any person who fulfils the criteria of consuming the service in Malaysia — RMCD uses proxies such as the customer's billing address, the payment card's country, the IP address, the SIM country code and the residential address to decide whether a customer is "in Malaysia".
There is no lower small-supplier grace band beyond the RM500,000 line, and no requirement to have a Malaysian entity, bank account or address. Registration is done entirely online.
The 8% rate — and the road from 6%
SToDS launched at 6%. In line with the general service tax increase, the rate rose to 8% with effect from 1 March 2024. Foreign Registered Persons must charge the current 8% on taxable digital services consumed in Malaysia. A few specific service categories sit at 6% under the wider SST rules, but for the mainstream digital supplies above — software, streaming, cloud, SaaS, advertising — the operative figure is 8%.
B2C and B2B — Malaysia taxes both
This is where SToDS surprises foreign finance teams. Many overseas-vendor regimes exempt business-to-business sales, on the logic that a registered business buyer would simply reclaim the tax. Malaysia does not carve out B2B. An FRP charges service tax on digital services to any consumer in Malaysia — individuals and businesses alike — unless a specific exemption or relief applies.
The counterpart to this is the imported-taxable-services mechanism on the buyer side. A Malaysian business that acquires digital or other taxable services from abroad may itself have to account for service tax on those imported services. To prevent the same supply being taxed twice — once by the foreign FRP and once by the Malaysian recipient — the rules coordinate the two: broadly, where the foreign supplier is a registered FRP charging SToDS, the Malaysian business is relieved from also self-accounting on that same supply. The practical takeaways:
| Situation | Who accounts for the tax |
|---|---|
| Foreign provider is a registered FRP | The FRP charges 8% SToDS on the invoice; the Malaysian buyer pays it and generally does not self-account again on that supply. |
| Foreign provider is not registered (below threshold / non-compliant) | The Malaysian business buyer may have to account for service tax on the imported taxable service itself. |
| Intra-group / B2B relief conditions met | Specific group-relief and B2B-exemption rules can remove the charge — but only where the prescribed conditions are strictly satisfied. |
How to register: the MySToDS Foreign Registered Person process
Registration is handled through RMCD's dedicated MySToDS portal — separate from the MySST system that local companies use. The core steps:
| Step | What happens |
|---|---|
| 1. Assess liability | Confirm your rolling 12-month Malaysian digital-services turnover has crossed (or will cross) RM500,000. |
| 2. Apply on MySToDS | Submit application Form DST-01 online with company particulars, business activity and turnover data. |
| 3. Receive FRP number | RMCD issues a unique SToDS registration number; you become a Foreign Registered Person from the effective date. |
| 4. Charge & invoice | Add 8% to taxable Malaysian digital sales and issue compliant invoices/receipts showing the tax. |
| 5. File & pay quarterly | Submit the SToDS return (Form DST-02) and remit tax every three months, in ringgit, by the due date. |
Returns are filed on a quarterly taxable-period basis. Payment is due within the month following the end of each quarter. Because collections are in ringgit, FRPs should build a currency and settlement process that does not leave the tax exposed to FX swings.
Penalties and enforcement
SToDS is not a soft-touch regime. Failure to register when liable, failure to charge, or failure to remit can expose the provider and its officers to fines of up to RM50,000, imprisonment of up to three years, or both, alongside penalties on the unpaid tax. RMCD actively identifies non-registered foreign providers through payment-processor data, app-store records and marketplace reporting. For a global platform, the reputational and back-tax exposure of being found non-compliant across several years dwarfs the cost of registering on time.
SToDS vs local SST: two doors to the same tax
The distinction that trips people up is who you are, not what you sell. The same digital service can be taxed under two different registrations depending on the provider:
| Foreign provider (no MY presence) | Malaysian-incorporated provider | |
|---|---|---|
| Regime | Service Tax on Digital Services (SToDS) | Ordinary service tax under SST |
| Registers via | MySToDS — Form DST-01 (FRP) | MySST — Form SST-01 |
| Threshold | RM500,000 (digital services to MY consumers) | Prescribed threshold for the service group (commonly RM500,000) |
| Rate | 8% | 8% (6% for a few categories) |
| Filing | Quarterly, DST-02, in ringgit | Bi-monthly, SST-02 |
This matters for structuring. A foreign group that incorporates a Malaysian Sdn Bhd to serve local customers shifts from the FRP/SToDS track to ordinary SST — with a local entity, local invoicing, and access to intra-group and B2B relief mechanisms. A group that stays offshore and sells directly stays on the FRP track. Neither is automatically cheaper; the right answer depends on customer mix, other Malaysian activities, banking, and whether you also need Employment Passes or an MDEC Malaysia Digital status for incentives and talent. For the broader indirect-tax picture, see our guides to the 2025–2026 SST expansion and corporate tax & SST compliance, and — for the parallel e-invoicing obligation — our MyInvois e-invoice guide.
A practical compliance checklist
If you sell digital services into Malaysia, work through this before an RMCD query forces the issue:
- Measure your Malaysian digital turnover on a rolling 12-month basis — use billing address, card country, IP and SIM to identify Malaysian consumers.
- Register on MySToDS (DST-01) promptly once you cross RM500,000; backdated liability is far costlier than early registration.
- Configure your billing system to add 8% for Malaysian customers and show the tax on invoices/receipts.
- Decide the B2B position and state in contracts whether you charge SToDS, so Malaysian business buyers know their imported-services position.
- File DST-02 quarterly and pay in ringgit by the deadline; keep records for audit.
- Reassess if you incorporate — a Malaysian Sdn Bhd moves you to ordinary SST and changes the whole compliance profile.
SToDS is one of the clearest examples of Malaysia taxing the digital economy on a destination basis: the tax follows the Malaysian customer, not the location of the server or the company. For foreign SaaS, streaming, cloud, gaming and platform businesses, getting the registration and the B2B treatment right early is far cheaper than unwinding years of missed tax.
ONEKEY BIZ helps foreign digital businesses assess SToDS liability, register as a Foreign Registered Person, configure invoicing, and decide whether to stay on the FRP track or incorporate a Malaysian entity — and we handle the SST, e-invoicing and corporate-tax compliance that follows. Talk to our team or explore our tax & compliance service.
Frequently asked questions
Does a foreign company with no presence in Malaysia have to charge Malaysian service tax on digital services?
Yes. Under the Service Tax (Digital Services) rules effective 1 January 2020, a foreign service provider must register as a Foreign Registered Person (FRP) once the value of digital services it provides to consumers in Malaysia exceeds RM500,000 in a 12-month period — even with no office, company, bank account or staff in the country. Once registered, the FRP charges 8% service tax on those Malaysian digital sales and remits it to the Royal Malaysian Customs Department. Registration is done online via the MySToDS portal using Form DST-01.
What is the SToDS rate and registration threshold in 2026?
The rate is 8%, raised from the original 6% with effect from 1 March 2024, in line with the general service tax increase. The registration threshold is RM500,000 of digital services provided to consumers in Malaysia over a rolling 12-month period. The threshold is a running total, not a calendar-year reset — once turnover crosses it you generally must apply by the end of the following month and start charging from the month after. There is no lower small-supplier band beyond that line.
Does Malaysia's digital service tax apply to B2B sales, or only to consumers?
Malaysia does not carve out B2B — an FRP charges service tax on digital services supplied to any consumer in Malaysia, businesses and individuals alike, unless a specific exemption or relief applies. To avoid the same supply being taxed twice, the imported-taxable-services rule coordinates the two sides: where the foreign supplier is a registered FRP charging SToDS, the Malaysian business buyer is generally relieved from self-accounting on that supply; where the supplier is not registered, the Malaysian buyer may have to account for service tax on the imported service itself. Intra-group and B2B relief can remove the charge only where strict conditions are met.
How is SToDS different from the ordinary SST a Malaysian company pays?
The difference is who the provider is, not what is sold. A foreign provider with no Malaysian presence registers under SToDS via the MySToDS portal (Form DST-01) as a Foreign Registered Person and files quarterly (DST-02) in ringgit. A Malaysian-incorporated provider of the same digital service registers under ordinary SST via MySST (Form SST-01) and files bi-monthly (SST-02), with access to intra-group and B2B relief mechanisms. Incorporating a Malaysian Sdn Bhd therefore moves a foreign group from the FRP/SToDS track to ordinary SST — which is neither automatically cheaper nor more expensive; the right choice depends on customer mix, other Malaysian activities and banking.
Sources & references
This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.