Audit exemption thresholds in Malaysia phase in over three years under Practice Directive 10/2024. A private company must meet at least two of three tests — revenue, total assets and employees — for the current and immediate past two financial years. The limits are RM1 million, RM1 million and 10 employees for periods commencing in 2025, RM2 million, RM2 million and 20 in 2026, and RM3 million, RM3 million and 30 from 2027.
- At least TWO of three criteria, never all three — the single most repeated error in Malaysian audit content
- Phase 1 (periods commencing in 2025): RM1,000,000 revenue, RM1,000,000 assets, 10 employees
- Phase 2 (periods commencing in 2026): RM2,000,000 revenue, RM2,000,000 assets, 20 employees
- Phase 3 (periods commencing on or after 1 January 2027): RM3,000,000 revenue, RM3,000,000 assets, 30 employees
- The two preceding years are tested against the CURRENT phase thresholds, not the lower numbers that applied back then
- The phase is fixed by when the financial period COMMENCES, not by the financial year end
- An employee counts only if full-time — at least 6 hours a day for 20 days a month, or 120 hours a month
On this page
If you take one number away from this page, take this one: the RM3 million threshold everyone quotes does not apply until financial periods commencing on or after 1 January 2027.
Practice Directive 10/2024, issued by SSM on 16 December 2024 under subsection 267(2) of the Companies Act 2016, phases the audit exemption thresholds in over three years. A large share of the Malaysian pages ranking for this query state RM3 million and 30 employees as though current, and several also state that all three criteria must be met. Both are wrong, and they fail in opposite directions — one lets a company skip an audit it legally owes, the other scares a qualifying company into paying for one.
The threshold table
| Phase 1 | Phase 2 | Phase 3 | |
|---|---|---|---|
| Financial period commencing | on or after 1 Jan 2025 until 31 Dec 2025 | on or after 1 Jan 2026 until 31 Dec 2026 | on or after 1 Jan 2027 |
| Submission year | from 1 Jan 2026 | from 1 Jan 2027 | from 1 Jan 2028 |
| Turnover | RM1,000,000 | RM2,000,000 | RM3,000,000 |
| Total assets | RM1,000,000 | RM2,000,000 | RM3,000,000 |
| Number of employees | 10 | 20 | 30 |
Phase 3 figures remain unchanged unless reviewed by the Registrar.
The test
A private company qualifies if it meets at least two of the three criteria, for the current financial year and the immediate past two financial years:
- annual revenue does not exceed the threshold
- total assets do not exceed the threshold
- number of employees does not exceed the threshold
Nine data points, six of which must land inside the limits — two criteria across three years. A company can blow through one criterion by any margin in all three years and still be exempt.
Which phase applies to you
The phase is set by the date the financial period commences, not the year it ends and not the year you lodge. A company with a 30 June year end starting a period on 1 July 2026 sits in Phase 2, even though that year ends in 2027.
The lookback trap
The directive is explicit that the figures for the immediate past two financial years must not exceed the threshold for the corresponding phase — the phase of the current period. You do not test FY2025 against RM1 million when assessing a Phase 3 year; you test it against RM3 million.
SSM’s own worked scenario makes this concrete. A company with a 30 June year end reporting total assets of RM3,000,000 every year and revenue of RM1,000,000, RM1,000,000 and RM1,500,000 for FYE 2025, 2026 and 2027 qualifies for FYE 30 June 2027 under Phase 2: it fails the asset test in all three years but passes revenue and employees in all three. Two of three, three years running.
Definitions that change the answer
Annual revenue — revenue received and receivable during the year. It excludes credit entries reversing earlier accounting entries, entries relating to taxation, reversals of provisions made earlier, and gains on derecognition of property, plant, equipment and investment property in the statement of comprehensive income.
Total assets — assets as defined in the applicable approved accounting standards, current and non-current, taken from the statement of financial position.
Employees — full-time employees employed at the end of each relevant financial year. SSM defines full-time as paid workers working not less than six hours a day for at least 20 days a month, or at least 120 hours a month. Below that, a worker is not counted at all.
Included: local, foreign, contract workers, and workers on probation.
Excluded: a director who is also a full-time employee; a shareholder who is also a full-time employee; family members or friends who are unpaid or on irregular wages.
In an owner-managed Sdn Bhd with two working director-shareholders, a spouse on irregular pay and six part-timers on 15 hours a week, the count for the directive is zero — not nine.
Common mistakes
- Quoting RM3 million and 30 employees as the current figure. They are the Phase 3 numbers. Nothing above RM1 million of revenue passes the revenue test for a period that commenced in 2025.
- Requiring all three criteria. The directive says at least two.
- Testing only the current year. Three years must clear the bar, and a company newly under the limit this year will usually wait.
- Using the financial year end to pick the phase. It is the commencement date.
- Re-testing prior years against the older, lower thresholds. The directive and SSM’s scenarios both apply the current phase figures across all three years.
- Counting part-timers and working director-shareholders in the headcount.
- Assuming the transition was seamless. Financial periods commencing on or before 31 December 2024 remain under the revoked PD 3/2017, so some companies had a year in which neither regime helped them.
What’s next
Clearing the thresholds is necessary but not sufficient. Four categories of company are shut out of the exemption regardless of size, and members holding 5% of the shares can still compel an audit — check the exclusion list before you tell the auditor you will not need them this year.
What are the audit exemption thresholds in Malaysia?
They depend on when your financial period commences. Periods commencing in 2025 use RM1 million revenue, RM1 million total assets and 10 employees. Periods commencing in 2026 use RM2 million, RM2 million and 20. Periods commencing on or after 1 January 2027 use RM3 million, RM3 million and 30. You need at least two of the three.
Is the audit exemption threshold RM3 million?
Only for financial periods commencing on or after 1 January 2027. Practice Directive 10/2024 phases the figure in — RM1 million for 2025 and RM2 million for 2026. Most competing guides quote RM3 million flat and omit the phase-in entirely, which would tell a company with RM2.5 million of revenue in FY2026 that it passes the revenue test when it does not.
Do the past two years get tested against the old, lower thresholds?
No. Practice Directive 10/2024 states that revenue, assets and employees for the immediate past two financial years must not exceed the maximum threshold specified for the corresponding phase — that is, the phase the current period falls in. SSM's own worked scenarios apply the current phase figures to all three years.
How is the number of employees counted?
Full-time employees on the payroll at the end of each relevant financial year. SSM defines full-time as paid workers working not less than 6 hours a day for at least 20 days a month, or at least 120 hours a month. Local, foreign, contract and probationary workers count. Director-employees, shareholder-employees and unpaid or irregular-wage family and friends do not.
The following are deliberately unstated or described only qualitatively until confirmed by a subject-matter expert:
- Confirm whether SSM has issued any amendment to PD 10/2024 revising the Phase 3 thresholds — the directive marks them as unchanged unless reviewed by the Registrar
Sources
- Practice Directive No. 10/2024 — Qualifying Criteria for Audit Exemption for Certain Private Companies in Malaysia — SSM
- FAQs on Companies Act 2016 and Transitional Issues — Part Q, Audit Exemption — SSM
- Companies Act 2016 (Act 777), reprint as at 1 August 2022 — SSM
Change history
| Version | Date | Change | By |
|---|---|---|---|
| 01.00 | 20 Jul 2026 | Approved and published. | — |