Crypto License in Malaysia
Assistance in applying for the Malaysian crypto license (Digital Assets Exchange Operator license). LegalBison guides entrepreneurs through obtaining a DAX license that provides benefits such as operating in a regulated FinTech environment and enhanced credibility.
Quick facts: Malaysia Crypto License
| License Type | Virtual Asset Service Provider (VASP) |
|---|---|
| Regulator | The Securities Commission of Malaysia |
| Timeframe | from 18 months |
| Government fees | from 5,000 USD |
| Minimal capital | 5,000,000 Malaysian Ringgit (about 1,050,000 USD) |
| Corporate tax | 24% |
| Key advantages | Prestigious and high-level license in Asia, clear and transparent process |
Legal experts in designing solutions for crypto licensing worldwide.
Provides essential support to clients navigating the complexities of FinTech licensing and compliance.
Regulatory Overview of the crypto license in Malaysia
This page contains all the necessary information about the VASP license in Malaysia, from pricing to process.
Crypto Regulation in Malaysia
Since 2019, the Securities Commission of Malaysia, acting as the Malaysian regulator, has regulated crypto businesses through the Digital Asset Exchange Operator license framework. This framework is a subdivision of the Regulated Market Operator framework.
In Malaysia, cryptocurrencies are considered securities since the voting of the Capital Markets and Services Order of 2019 on Prescription of Securities & Digital Currency and Digital Token. Hence, the delegation to the Securities Commission for their supervision. This qualification also means that only crypto assets that have been duly approved by the regulator are allowed in Malaysia. Only approved cryptocurrencies recognized by the Securities Commission can be traded on licensed exchanges.
The basis for the two-levelled framework lies in the Capital Markets & Services Act 2007 and is completed by two Guidelines issued by the Securities Commission:
- Guidelines for Regulated Market Operators;
- Guidelines for Digital Asset Exchange Operators.
These documents specify the compliance requirements to be met by license applicants and holders. They define the measures to take on the levels of cybersecurity, AML/KYC, solvability, etc. An important requirement to note is the minimum paid-up share capital, which is 5.000.000 Malaysian Ringgit (about 1.050.000 USD). The digital asset exchange framework established by the Securities Commission Malaysia sets out the regulatory requirements for digital asset exchanges (DAXs) and aims to enhance investor protection within the Malaysian crypto market.
In 2025, the Capital Markets & Services Act was amended to clarify the definition of a digital token. According to the amendment, “digital token” means a digital representation which is recorded on a distributed digital ledger, whether cryptographically-secured or otherwise, but does not include — (a) debentures, stocks or bonds issued or proposed to be issued by any government; (b) shares in or debentures of, a body corporate or an unincorporated body; or (c) units in a unit trust scheme or prescribed investments, and includes any right, option or interest in respect thereof. The Securities Commission may also take actions, such as delisting digital assets, if it determines such measures are necessary to protect investors or the public interest.
Types of Crypto Licenses in Malaysia
Malaysia offers a range of crypto licenses to accommodate the diverse business models operating within the digital asset space. The primary license is the Digital Asset Exchange Operator license, which falls under the Regulated Market Operator framework. This license is essential for companies wishing to operate digital asset exchanges, allowing them to facilitate the trading of approved digital assets in a regulated environment.
In addition to the Digital Asset Exchange license, Malaysia also provides a Digital Asset Custodian license. This license is designed for businesses that focus on safeguarding digital assets on behalf of clients, and it comes with a lower minimum paid up capital requirement of RM500,000. For companies that provide broader services, such as facilitating the buying, selling, or transferring of digital assets, the Virtual Asset Service Provider (VASP) license is mandatory. The VASP license ensures that any asset service provider (VASP) operating in Malaysia adheres to strict compliance and operational standards.
The Securities Commission Malaysia (SCM) acts as the regulatory authority overseeing the issuance and ongoing compliance of these licenses. The SCM ensures that all digital asset exchanges, custodians, and VASPs maintain the required paid up capital, implement robust compliance frameworks, and operate transparently within the Malaysian digital asset space. This multi-tiered licensing approach allows Malaysia to support a variety of crypto businesses while maintaining high standards of investor protection and market integrity.
Key Advantages of Malaysia Crypto License
Despite the fair difficulty of the process, forming and licensing a crypto Malaysian company has several undeniable benefits:
- High-level license for ambitious blockchain technology projects in Asia
- Jurisdiction recognized as a growing authority in the FinTech environment
- Clear and transparent process, conducted straightforwardly
- Secure environment with strong asset protection laws
- Light compliance framework compared to other jurisdictions
To establish a crypto company in Malaysia means drafting policies compliant with the local framework. Entrepreneurs must raise capital needed for incorporation, demonstrate relevant experience in the blockchain sector, and prepare a set of other documents, as necessitated by the regulator. Only those companies that set up their technical infrastructure properly, show their extensive experience in providing crypto and other services in adjacent sectors, and ensure compliance with the local laws can expect to secure the crypto license in Malaysia with minimal complications.
They called us, we made it, they said this
Cost of Crypto License in Malaysia
Pricing for registration of Malaysia Crypto License
Legal experts in designing solutions for crypto licensing worldwide.
+44 20 4577 0974
Provides essential support to clients navigating the complexities of FinTech licensing and compliance.
+44 20 4577 0974
Inquire about the Malaysian crypto license with one of our experts
-
Initial consultation with an expert
-
Turnkey Company Formation
-
Registration as VASP with the Regulator
-
Registered legal company address for 1 year
-
Basic (mandatory) AML/KYC Policy
-
Full communication with VASP Issuing authority for obtainment of authorization
-
Translated and apostilled set of corporate documents
-
Assistance in opening Business account for crypto operating activity
-
Assistance in formulating requirements, finding, interviewing and written agreement with AML/MLRO for your crypto company
Full turnkey crypto company formation and support in all necessary aspects
-
Initial consultation with an expert
-
Turnkey Company Formation
-
Registration as VASP with the Regulator
-
Registered legal company address for 1 year
-
Basic (mandatory) AML/KYC Policy
-
Full communication with VASP Issuing authority for obtainment of authorization
-
Translated and apostilled set of corporate documents
-
Assistance in opening Business account for crypto operating activity
-
Assistance in formulating requirements, finding, interviewing and written agreement with AML/MLRO for your crypto company
Ready-made crypto company in Malaysia
Ready-made company with a crypto license in Malaysia for sale. Send us an inquiry to check on availability and receive details.
Step-by-Step: How to obtain a crypto license in Malaysia
Obtaining a crypto license in Malaysia is notoriously long and difficult. The application process for obtaining a Malaysia crypto license involves a formal series of steps required by regulatory authorities. These steps are necessary for launching a regulated cryptocurrency business in Malaysia.
STAGE 1: INCORPORATION OF A RESIDENT COMPANY IN MALAYSIA
The crypto license can only be granted to a resident company in Malaysia. The applicant should then establish a corporate presence in Malaysia, compliant with the expectations of the regulator. LegalBison assists company owners with preparing all the necessary documents for incorporation.
STAGE 2: PREPARATION OF THE APPLICATION FOR THE CRYPTO LICENSE IN MALAYSIA
Before application, the crypto project must prepare itself properly. It should appoint a responsible person and develop all sorts of policies and systems for compliance. This includes technical solutions to protect customers’ assets and data, but also the cybersecurity of the platform. Financial solvability and transparency are important. Risk management matrices and an internal audit function must be prepared.
STAGE 3: APPLICATION TO THE SECURITIES COMMISSION
This stage is part of the registration process required by the Securities Commission Malaysia for cryptocurrency businesses. Once every requirement is fulfilled, the applicant can carry their application to the Securities Commission of Malaysia. The board will be asked to demonstrate fitness and property, as well as its expertise and professionalism. The scrutiny will go as deep as the offered crypto assets on the platform. The applicant should expect numerous interviews and many possible extra requests from the regulator.
Reach out now for a free consultation
- Contact our team to receive a free invitation to a video call, in order to assess your project and design the most efficient solution around it.
Requirements for a Malaysia Crypto License
Obtaining a crypto license in Malaysia is notoriously difficult and long. The applying project must meet stringent requirements before being able to carry out a request for a license. The licensing process itself takes several months, but can last even more. The detailed list of prerequisites includes:
- Corporate Entity (Local Incorporation). The applying company must be a Malaysia-incorporated entity (e.g., a private limited company). Proper company formation as a Malaysian-incorporated business is a prerequisite for regulatory approval, ensuring the regulator, the Securities Commission (SC), has direct oversight and jurisdiction;
- Share Capital (High Minimum). A significant minimum paid-up capital of MYR 5,000,000 (Malaysian Ringgit five million) is required for a Digital Asset Exchange (DAX) operator. This capital must be deposited and maintained to demonstrate financial stability;
- Local Presence & Substance. The company must maintain an operational office in Malaysia and show genuine business activities take place there. Maintaining an operational office space in Malaysia is a regulatory requirement, and the SC highly favors companies that are substantively resident in the country.
- Directors & Management (Fit-and-Proper). All directors, the CEO, senior management, and key personnel must pass the SC’s “Fit-and-Proper” assessment. The Securities Commission conducts a proper check (fit and proper check) on all key individuals to ensure they meet integrity and competency standards. This includes demonstrating a clean record, relevant qualifications, financial integrity, and sufficient experience;
- Compliance Officer (AML/KYC). A responsible person must be appointed, typically an AML/Compliance Officer, to manage all duties related to Anti-Money Laundering (AML) and Know Your Customer (KYC). They ensure adherence to the AMLA 2001 and SC guidelines;
- Robust Policy & Systems. The applicant must submit comprehensive documentation, including a detailed Business Plan, and policies for AML/KYC, Risk Management, and IT/Cybersecurity. These systems must be robust enough to protect customer funds and data.
The prolonged process associated with obtaining the Malaysia crypto license is often the reason why so many entrepreneurs opt out before even finalising the initial draft of their project. LegalBison can become the indispensable assistant you’re looking for. The idea is to guide your project through the entire process of registering as a crypto business in Malaysia, from the initial company incorporation to obtaining the crypto license and sticking to post-licensing compliance requirements.
- Crypto Law and Regulation
- Licensing process
- Requirements
- Company registration
- Taxation
- Obligations
- Sanctions
The legality of cryptocurrency business in Malaysia
Cryptocurrency business is legal in Malaysia, however, it is strongly regulated. It is important to get familiar with all the regulations and restrictions applicable to crypto companies in Malaysia in order to understand the licensing framework.
Crypto businesses are supervised by the Securities Commission of Malaysia (Suruhanjaya Sekuriti). They fall under the scope of the Regulated Market Operators framework, which is licensed and regulated by the SC.
In order to stay within the law, a cryptocurrency business in Malaysia should not only get a crypto license but also comply with an important set of regulations. It is therefore very important to acknowledge the numerous requirements and obligations of a licensed crypto company in Malaysia.
Cryptocurrency regulation in Malaysia
Companies willing to provide cryptocurrency services in Malaysia are governed by the Capital Markets and Services Act of 2007 (amended numerous times since then). This text defines how financial markets and institutions are functioning and regulated in Malaysia.
This act also positions the Securities Commission (SC) as the supervisory authority for Regulated Market Operators (RMO), entities which are provided a license to operate in the financial field. This is the case of cryptocurrency, with the Digital Asset Exchange framework (DAX), which is a subdivision of the RMO framework.
To expand on this framework, the Security Commission has issued Guidelines for Regulated Market Operators and additional Guidelines for Digital Asset Exchanges. These two texts are, in addition to the Capital Markets and Services Act, the legal framework that constitutes the cryptocurrency regulation in Malaysia.
Cryptocurrencies are defined as securities in Malaysia since an order passed in 2019, the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order. This classification has several implications, the most important being that cryptocurrencies are strongly regulated in Malaysia. Only about a dozen digital assets are legal in Malaysia, as a cryptocurrency or a token must be validated by the SC before being legally sold and exchanged in Malaysia.
Malaysia Virtual Cryptocurrency Registry
In Malaysia, the virtual registry of cryptocurrency companies is publicly available on the internet. It can be found freely on the website of the Securities Commission of Malaysia, on this page.
The registry shows the existing licensed companies, but also the previously licensed companies. It is apparent upon consulting the register that most of the companies that got their crypto license in Malaysia before 2019, and the introduction of the current framework, have ceased to work in the country.
The registry is not regularly updated and does not include detailed information on the license holding companies: only the company name and address in Malaysia are disclosed.
Crypto-authorization process in the Malaysia Virtual Currency Registry
The process of receiving a crypto authorization in Malaysia and registering in the virtual currency registry is notorious for being one of the most complex in Asia.
There are many elements to prepare carefully, including on the financial and human levels, before beginning the process to get a VASP license in Malaysia.
The registration of Malaysia Company in Register of cryptocurrency companies
In order to register a Malaysian company in the national register of cryptocurrency companies, a project must establish a company in Malaysia. It is important to note that a company registered in Labuan, a free economic zone of Malaysia, cannot apply for the Malaysia crypto license, as there is a different license in force in this region (see: Labuan crypto license).
The company must appoint a board of directors and a responsible officer and fulfill a certain number of requirements, such as holding a minimum share capital of 5.000.000 MYR (about 1.050.000 USD) and preparing certain internal procedures (audit, risk management, AML-CFT, etc).
Everything must be ready before carrying out an application to the Securities Commission. The Malaysian regulator will then assess the compliance of the project with the laws and rules in order to decide whether it will grant a crypto license or not.
Governmental Statements on Crypto in Malaysia
The Government of Malaysia has adopted a strict position on crypto, while keeping it legal. When an order was passed in 2019, qualifying cryptocurrencies as securities, it also created the necessity for every existing crypto asset to receive approval from the Securities Commission in order to be legally sold and exchanged in Malaysia.
A notable case that shows the severity of the Malaysian regulator may be the recent ban of the famous crypto exchange Huobi in Malaysia. As it was available to Malaysian citizens and offered crypto assets that are not authorized, it was forced to close its operations in Malaysia.
Requirements for companies engaged in crypto activities in Malaysia
The Securities Commission has laid out a certain number of requirements to be met by companies willing to engage in crypto activities in Malaysia.
Among the principal requirements for the DAX license, the following criteria must be met:
- Establish a company in Malaysia (not in Labuan);
- Have a minimum paid-up capital of at least 5.000.000 Malaysian Ringgit, plus an additional 5.000.000 in the case of a Digital Broker;
- Ensure that all the members of its board are fit and proper and have professional qualifications for their position;
- Appointment of a responsible person for compliance and contact with the Securities Commission. This role can only be fulfilled by the CEO, CFO or COO of the company;
- Draft policies and procedures pertaining to the good conduct of financial services: measures against proprietary trading, conflicts of interest, insider trading, making use of non-publicly available information, etc.
A DAX operator in Malaysia must have strong risk management processes and systems in order to prevent all sorts of risks. This includes financial risks, customer identification, legal risks, operational risks, technical risks and physical risks. All of these should be audited periodically.
A licensed crypto company in Malaysia should also establish an internal audit function.
Only crypto assets which have been validated by the SC can be provided by the DAX operator: BTC, ETH, AVAX, MATIC, BCH, XRP, LTC, SOL, LINK, UNI & ADA.
The crypto company should also establish systems and controls to maintain accurate records of all transactions. It should also take every possible measure to protect clients’ assets and data. For example, the clients’ assets shall be into segregated accounts, separate from the DAX operator accounts.
Finally, a DAX operator in Malaysia should ensure at all times sufficient liquidity for solvability. This requirement is further emphasized for companies operating a Digital Broker model.
The process of setting up a company for a cryptocurrency business in Malaysia
In the process of forming a cryptocurrency business in Malaysia, a company should be set up with the licensing requirements in mind.
Though it is not difficult to create a company in Malaysia, this company is required to hold a paid-up share capital of 5.000.000 MYR, which is more than 1.000.000 USD. It should also appoint the board of directors and the responsible person before the application.
The usual incorporation process takes 1 to 2 business weeks, but the necessity to adapt the company to the needs of the DAX framework can extend the process a little bit.
Taxation for cryptocurrency companies in Malaysia
For cryptocurrency companies in Malaysia, profit will be taxed on the gross income generated during the year. DAX operators can only register as Resident Companies in Malaysia, with an income tax rate of 24%.
There is no withholding tax in Malaysia, though royalties are subject to taxes (5 to 10% depending on the country).
Despite being classified as securities in Malaysia, proceeds from cryptocurrency trading (capital gains) are not subject to taxation.
Obligations of crypto companies in Malaysia
Once a crypto company successfully receives the DAX license in Malaysia, it is liable to respect some obligations, according to the law.
At all times, a crypto company must ensure the fair and transparent operation of its platform. It should consistently enforce policies and procedures relative to the trading, clearing and settlement of digital assets on the platform and monitor transactions on a permanent basis.
A crypto company must always be careful with the cryptocurrency it provides in its services. Not only should they be approved by the Securities Commission, but they should also be sourced from a Virtual Asset Service Provider that is either licensed in Malaysia or compliant with the FATF guidelines on AML-CFT (this is the case for the majority of crypto licenses in the world as of 2023).
DAX operators are not allowed to provide financial assistance to investors.
Sanctions for violating Malaysia crypto-business obligations
Performing crypto activities in Malaysia without a license or violating the law as a licensed crypto company will lead to severe sanctions.
As it is considered a financial crime and a legal offence, a wrongdoing company will most certainly be banned, its license revoked, and the participants sanctioned with fines and possibly imprisonment for the most extreme cases.
This is another demonstration of Malaysia's severity toward cryptocurrency and its position of stringent regulation.
Alternatives to a crypto license in Malaysia
Our team has curated the following jurisdictions as being worthy alternatives to a crypto licensed company in Malaysia
About Crypto License in Malaysia
Yes, definitely. We are able to design a business plan for any kind of business venture. We have experience dealing with the granting authority, and we know their expectations of applicants.
No, only individuals from blacklisted countries (e.g. North Korea) will not be able to proceed with that license.
Yes, this is possible, but in any case, you will have to present a certificate of no criminal record (also of a legal entity). We recommend sticking to individuals.
Yes. Though it is never a certainty in such a fast-moving industry, opening a bank account for a Malaysian crypto exchange is possible.
The granting authority has defined its own requirements in regard to AML-CFT and KYC, which differ from the traditional ones (enacted by the FATF).
Yes, cryptocurrency activity is legal in Malaysia. It is, however, strongly regulated and restricted. Digital Asset Exchange is the only licensed activity in Malaysia that is available. It allows for providing cryptocurrency services with a very limited number of cryptocurrencies.
There is no need for a license to trade your own money and crypto in Malaysia.
Exchanges are a regulated business that requires a DAX Operator license.
Only registered companies with a strong establishment in Malaysia and a license as a Regulated Market Operator as a Digital Asset Exchange can perform crypto activities in Malaysia.
Note: the free economic zone of Labuan is an exception, where different rules apply. For more information, look up our page on the crypto license in Labuan.
No, there are no capital gain taxes in Malaysia, either for individuals or companies.
Start your crypto company in Malaysia today
Trying to tackle the intricate, multi-stage application, meeting the MYR 5 million capital demand, and setting up the required local compliance can feel impossible on your own. That’s where LegalBison steps in: we turn these daunting regulatory hurdles into a clear, manageable plan.
We guarantee your application meets the SC’s tough “Fit-and-Proper” standards, and that all your paperwork, from crucial AML/KYC policies to IT security audits, is perfectly sound and compliant from the start. Contact us today to set your project in motion with a free primary consultation.
Legal experts in designing solutions for crypto licensing worldwide.
Provides essential support to clients navigating the complexities of FinTech licensing and compliance.