Under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA), designated non-financial businesses and professions — including company secretaries, lawyers, accountants, registered estate agents and dealers in precious metals or stones — are reporting institutions supervised by Bank Negara Malaysia. They must conduct customer due diligence, keep records for at least six years, and file a Suspicious Transaction Report to BNM's Financial Intelligence and Enforcement Department (FIED) by the next working day after suspicion is established. The governing rules are BNM's policy document for DNFBPs and NBFIs, issued 5 February 2024.
- DNFBPs covered include trust companies, licensed casinos, lawyers, notaries public, accountants, company secretaries, dealers in precious metals or stones, and registered estate agents
- The current rulebook is BNM's AML/CFT/CPF and TFS for DNFBPs and NBFIs policy document, issued 5 February 2024 and effective 6 February 2024
- A Suspicious Transaction Report (STR) must be submitted to FIED by the next working day after the compliance officer establishes suspicion
- Records must be kept at least six years after the transaction is completed or the business relationship ends
- The RM25,000 Cash Threshold Report applies only to banking institutions, selected development financial institutions, Lembaga Tabung Haji and the licensed casino — not to DNFBPs generally
Who this applies to: Company secretaries, registered estate agents, dealers in precious metals or stones, lawyers, notaries public and accountants who carry out the specified gatekeeper activities in Malaysia.
On this page
Anti-money-laundering law is not only a concern for banks. Under Malaysia’s AMLA, a range of non-financial businesses and professions are also reporting institutions. A company secretary incorporating a company, an estate agent closing a property sale, or a dealer taking a large cash payment can each fall within the regime — with customer due diligence, record-keeping and reporting duties owed directly to Bank Negara Malaysia.
Which non-financial businesses are covered?
The Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) reaches beyond banks. BNM’s policy document sets out the designated non-financial businesses and professions (DNFBPs) and non-bank financial institutions that are reporting institutions. The table below lists the main DNFBP categories; the policy document’s applicability section (paragraph 3.3) also covers notaries public, licensed gaming outlets, moneylenders and pawnbrokers.
| Sector | Typical trigger activity |
|---|---|
| Company secretaries | Forming companies, acting as nominee or director |
| Lawyers and notaries public | Handling client money, property or company transactions |
| Accountants | Managing client assets or arranging transactions |
| Registered estate agents | Buying and selling real property for clients |
| Dealers in precious metals or stones | High-value dealing in gold, gems and jewellery |
| Trust companies | Administering trusts and client assets |
| Licensed casinos and licensed gaming outlets | Gaming, betting and wagering transactions |
What rulebook applies?
The obligations are set out in BNM’s policy document, Anti-Money Laundering, Countering Financing of Terrorism, Countering Proliferation Financing and Targeted Financial Sanctions for DNFBPs and NBFIs (AML/CFT/CPF and TFS), issued on 5 February 2024 and effective from 6 February 2024. It applies a risk-based approach: the depth of your controls should match the money-laundering and terrorism-financing risk of each client and transaction.
What are the core duties?
Three obligations sit at the centre of compliance:
- Customer due diligence (CDD). Identify and verify who the customer is, understand the purpose of the relationship, and identify the beneficial owner behind a corporate client. Higher-risk clients require enhanced due diligence.
- Record keeping. Keep CDD documents, transaction records and your risk analyses for at least six years after the transaction is completed or the business relationship ends. Records must be kept in a form admissible in court under the Evidence Act 1950.
- Suspicious Transaction Reporting. File a Suspicious Transaction Report (STR) whenever a transaction appears unusual, has no clear economic purpose, appears illegal, or points to money laundering or terrorism financing.
How and when do you report?
An STR must reach FIED by the next working day after your compliance officer establishes the suspicion. You can submit by email or physical mail to FIED, and through the Financial Intelligence System (FINS) where applicable.
Two protections make reporting safer: AMLA overrides secrecy and confidentiality obligations so a report is not a breach of duty, and a person who reports in good faith is shielded from civil, criminal or disciplinary action. Deliberately splitting a transaction to dodge a reporting threshold is itself an offence under section 4A.
Note one common misconception: the Cash Threshold Report for cash of RM25,000 and above is not a DNFBP-wide duty. It falls only on banking institutions, selected development financial institutions, Lembaga Tabung Haji and the licensed casino.
What’s next
Appoint a compliance officer, adopt a written AML/CFT policy, and read BNM’s 5 February 2024 DNFBP policy document in full before your next high-value engagement. If you are a company secretary or estate agent unsure whether a specific activity makes you a reporting institution, confirm with your professional body, or with BNM’s FIED through the submission channels on BNM’s “Reporting to Bank Negara Malaysia” page, rather than assuming you are outside the net.
Who supervises DNFBPs for AML/CFT in Malaysia?
Bank Negara Malaysia is the competent authority under AMLA. Its Financial Intelligence and Enforcement Department (FIED) receives and analyses reports, and BNM issues the policy document that DNFBPs and non-bank financial institutions must comply with.
How quickly must a Suspicious Transaction Report be filed?
By the next working day, counted from the date the compliance officer establishes the suspicion. STRs can be sent to FIED by email or physical mail, and through the Financial Intelligence System (FINS) where applicable.
Do DNFBPs have to file Cash Threshold Reports?
No. The Cash Threshold Report for cash transactions of RM25,000 and above applies only to banking institutions, selected development financial institutions, Lembaga Tabung Haji and the licensed casino. DNFBPs still owe the STR obligation.
The following are deliberately unstated or described only qualitatively until confirmed by a subject-matter expert:
- The exact FIED submission email address and postal channel — confirm against BNM's current 'Reporting to BNM' page before publishing (the specific address was not reproduced here).
- The mapping of specific AMLA section numbers to each duty (STR, CDD, record keeping) — deliberately omitted; confirm against the primary Act text before adding.
- The RM25,000 CTR exclusion for DNFBPs and the exact institution list — confirm against the latest BNM guidance.
- Six-year record retention period — confirm against Part B (Record Keeping) of the current policy document.
Sources
- AML/CFT/CPF and TFS for DNFBPs and NBFIs (policy document, issued 5 February 2024) — Bank Negara Malaysia
- Designated Non-Financial Businesses and Professions (DNFBPs) & Non-Bank Financial Institutions (NBFIs) — Bank Negara Malaysia
- Reporting to Bank Negara Malaysia (STR and CTR) — Bank Negara Malaysia
- AML/CFT Policies — Bank Negara Malaysia
- Record Keeping — Bank Negara Malaysia
Change history
| Version | Date | Change | By |
|---|---|---|---|
| 01.00 | 7 Aug 2026 | Approved and published. | — |