# Opening a Corporate Bank Account in Malaysia — Including Why Foreign-Owned Companies Get Declined

> What Malaysian banks are legally required to ask before opening a company account, why foreign-owned companies are refused without explanation, and what actually shortens the process.

- Category: business
- Language: en
- Status: published
- Updated: 2026-07-20
- Canonical: https://negaraku.md/en/business/corporate-bank-account-malaysia

---

Every competitor page on this topic is a five-step checklist ending in "and your account
will be ready in a few working days". That version is useless to the people who actually
need help: foreign founders whose applications have been sitting for six weeks, or who
have been declined twice by different banks with no reason given.

The honest version starts with an uncomfortable fact. **No bank is obliged to open an
account for you.** And in a defined set of circumstances, a Malaysian bank is positively
*required* to refuse you and *prohibited* from explaining why.

## What the bank is actually working from

The instrument is Bank Negara's policy document on **Anti-Money Laundering, Countering
Financing of Terrorism, Countering Proliferation Financing and Targeted Financial
Sanctions for Financial Institutions**, reference BNM/RH/PD 030-14, issued 5 February 2024
and effective 6 February 2024.

**It replaced the AML/CFT and TFS for FIs policy document issued on 31 December 2019.**
Most published guidance still describes the 2019 document, and the 2024 revision is not
cosmetic — it folds counter-proliferation financing into the framework and reworks the
customer due diligence chapter. If a checklist you are reading does not mention CPF, it
predates the current rules.

The document binds licensed banks, licensed Islamic banks, licensed investment banks,
prescribed development financial institutions, insurers and takaful operators, licensed
money services businesses and approved issuers of designated payment instruments. Your
account application is being assessed against it, paragraph by paragraph.

## What they must collect, and from whom

For a company, paragraph 14A.9.3 requires the bank to **understand the nature of the
customer's business, its ownership and control structure**. Paragraph 14A.9.4 then
requires it to identify and verify:

- name, legal form and proof of existence — certificate of incorporation, constitution or
  partnership agreement, where certified true copies or duly notarised copies may be
  accepted — plus a unique identifier such as a tax identification number;
- the powers that regulate and bind the company, such as a directors resolution, and the
  names of persons holding senior management positions; and
- the address of the registered office and, if different, the principal place of business.

Paragraph 14A.9.5 adds that the person authorised to represent the company must be
identified and verified, by letter of authority or directors resolution.

Paragraph 14A.9.7 is the one that catches badly-papered companies: where there is doubt
about any of these identities, the bank must run a background enquiry to confirm the
person is not dissolved, being liquidated or bankrupt, **and verify the information with
the Companies Commission of Malaysia, Labuan Financial Services Authority or another
relevant authority**. Your SSM record needs to match what you handed over.

Paragraph 14A.9.8 exempts companies listed on Bursa Malaysia from producing the
certificate of incorporation or constitution and from director and shareholder
verification. An ordinary Sdn Bhd gets no such relief.

## The beneficial ownership cascade — where foreign-owned files fail

Paragraph 14A.9.6 sets out a three-step cascade the bank must work through:

1. the natural persons who ultimately have a **controlling ownership interest**, which at
   a minimum means identifying directors and **shareholders with an equity interest of
   more than 25%**;
2. where there is doubt whether those persons are truly the beneficial owners, or where no
   natural person controls through ownership, the natural person exercising control
   **through other means**; and
3. where neither step yields a natural person, the relevant natural person holding a
   **senior management** position.

The steps are sequential — the bank need not pursue steps 2 and 3 once a beneficial owner
is identified at step 1.

This cascade is where foreign-owned applications stall. A Sdn Bhd owned by a BVI company
owned by a trust does not fail at step 1 because foreign ownership is disallowed; it fails
because the bank must trace to a **natural person** and satisfy itself, using reliable and
independently sourced information, that it knows who that person is. If the chain cannot
be evidenced, the bank has not met paragraph 14A.9.6.

The policy document is also explicit that **only a natural person can be an ultimate
beneficial owner**, and that ownership or control exercised through a chain of ownership,
or by means other than direct control, still counts.

### Why a nominee director does not help

There is a widely sold fix for the resident-director requirement that founders assume also
solves the banking problem. It does not.

The policy document defines a Nominee Director — expressly noting it is **also known as a
resident director** — as an individual or legal entity that routinely exercises the
functions of a director on behalf of, and subject to the direct or indirect instructions
of, a nominator. It then states: **a Nominee Director is never the beneficial owner of a
legal person.** The same is said of a nominee shareholder, who is never the beneficial
owner based on the shares held as nominee.

So the nominee does not close the cascade. The bank still has to reach the nominator. A
nominee arrangement adds a relationship the bank must understand and document, and in
practice moves the file toward higher risk rather than away from it.

## Enhanced due diligence: what changes

Where the bank assesses the money laundering, terrorism financing or proliferation
financing risk as **higher**, paragraph 14A.12.1 requires enhanced due diligence
containing at least:

- all the standard customer due diligence information under paragraph 14A.9;
- **additional information on the customer and beneficial owner**, such as volume of assets
  and information from public databases;
- an enquiry into **source of wealth or source of funds** — and for politically exposed
  persons, **both** must be obtained; and
- **approval from senior management** before the business relationship is established.

Paragraph 14A.12.2 adds optional measures the bank may layer on: additional information on
the intended level and nature of the relationship, enquiry into the reasons for intended
transactions, and requiring the **first payment to be carried out through an account in
the customer's name at a bank subject to similar due diligence**.

That last measure is worth planning for. A foreign founder with no existing Malaysian
banking footprint may be asked to fund the account from a personal or corporate account
elsewhere that itself passes muster — which is difficult if the whole point of the
exercise was to establish a first banking relationship.

Note also the ongoing obligation. Paragraph 14A.13.1 requires the bank to scrutinise
transactions throughout the relationship and keep the documents up to date, with the
frequency scaled to risk. Passing onboarding is not the end of it; a company whose actual
transactions do not match the activity it described at account opening will be reviewed
again.

## Why a refusal comes without a reason

Two paragraphs explain the silence founders find so maddening.

**Paragraph 14A.16.1.** Where a reporting institution is unable to comply with the due
diligence requirements, it **shall not** open the account, commence business relations or
perform any transaction — and it **must consider lodging a suspicious transaction report**.
The refusal is not discretionary once due diligence has failed.

**Paragraph 14A.17.1.** Where the institution forms a suspicion and reasonably believes
that performing the due diligence process would **tip off** the customer, it is permitted
not to pursue due diligence at all, to document why, and to file a suspicious transaction
report immediately.

Put those together and you get the observed behaviour: requests for documents stop, the
relationship manager becomes unresponsive, and the decline arrives with no explanation.
Banks generalise the tipping-off caution well beyond actual suspicion cases, because the
downside of over-explaining is a regulatory breach and the downside of under-explaining is
an annoyed applicant.

**The practical consequence is that appealing a decline rarely works, and asking the same
bank again with the same structure almost never does.** What works is fixing the
underlying verifiability problem before you approach the next bank.

## The exchange-control question that is not a problem

Founders often assume the account itself needs Bank Negara clearance. It does not.

Under Bank Negara's Foreign Exchange Policy Notices, a Malaysian-incorporated company is a
**Resident** regardless of who owns it, and paragraph 16 of Notice 4 allows a Resident
Entity to open and maintain a Foreign Currency Account with a licensed onshore bank or a
non-resident financial institution, subject to Part B of Notice 3. A non-resident opens an
**External Account** instead, under paragraph 9.

So the ringgit operating account and a foreign currency account are both available to a
foreign-owned Sdn Bhd as of right. The obstacle is anti-money-laundering verification, not
exchange control.

## Common mistakes

**Treating a decline as a policy against foreign ownership.** It is a verification
failure. The fix is evidence, not lobbying.

**Sending a director who is not a director.** Paragraph 14A.9.5 requires the bank to verify
the person authorised to represent the company, by letter of authority or directors
resolution. A consultant or agent turning up without that document restarts the process.

**Letting SSM records drift.** Paragraph 14A.9.7 sends the bank to SSM to verify. If your
register of members, registered office or director particulars are stale — the 14-day
notification clocks in ss.46, 51 and 58 of the Companies Act 2016 — the bank finds a
mismatch it must resolve before proceeding.

**Describing the business vaguely.** The bank must understand the nature of the business.
"Trading and consultancy" against a general MSIC code invites enhanced due diligence
because it explains nothing about expected transaction patterns.

**Believing a nominee director shortens the process.** The policy document says a nominee
director is never the beneficial owner. It lengthens the process.

**Working from a pre-2024 checklist.** The current policy document is the February 2024
AML/CFT/CPF version. Guidance describing the 2019 document is describing superseded
requirements.

## What's next

Before you approach any bank, assemble the chain: a clean ownership diagram from the Sdn
Bhd up to named natural persons, with supporting registry extracts for every entity in
between, and passports for anyone holding more than 25%. Have the certificate of
incorporation, constitution, directors resolution authorising the account and the
authorised signatory letter ready as certified copies.

Then make sure your SSM filings match that diagram exactly, including the register of
beneficial owners maintained under ss.60B and 60C of the Companies Act 2016, because that
is what the bank will pull.

Be ready for the source of funds and source of wealth question with documents rather than
narrative, and expect that a foreign-controlled structure will need senior management sign
off inside the bank before anything opens. If you have already been declined, do not
resubmit the same file elsewhere — find which link in the ownership chain could not be
evidenced, and fix that first.

## Sources

- Anti-Money Laundering, Countering Financing of Terrorism, Countering Proliferation Financing and Targeted Financial Sanctions for Financial Institutions (BNM/RH/PD 030-14) — https://www.bnm.gov.my/documents/20124/938039/pd-AMLCFTCPF-TFS-FI-Feb2024_+2.pdf (Bank Negara Malaysia)
- Policy Document on AML/CFT/CPF and TFS for Financial Institutions — issuance notice — https://www.bnm.gov.my/-/pd-amlcftcpftfs-fi (Bank Negara Malaysia)
- Foreign Exchange Policy Notices (Consolidated), in operation 1 October 2025 — https://www.bnm.gov.my/documents/20124/60360/Consolidated+Foreign+Exchange+Policy+Notices_2+Oct+2025_Update.pdf (Bank Negara Malaysia)
- Companies Act 2016 (Act 777), as at 1 August 2022 — https://www.ssm.com.my/Pages/Legal_Framework/Document/Companies%20Act%202016_Akta%20777_BI%20(1.8.2022).pdf (SSM)

---
Source of truth: https://github.com/negaraku-md/NegaraKu.md
License: CC BY-SA 4.0