No Malaysian bank is obliged to open an account for you. Under Bank Negara's AML/CFT/CPF and TFS for Financial Institutions policy document, a bank that cannot satisfactorily complete customer due diligence is required not to open the account — and separately may be barred from telling you why. Foreign-owned companies are declined most often because the beneficial ownership chain cannot be verified to Bank Negara's standard, not because of any rule against foreign ownership.
- The controlling instrument is BNM/RH/PD 030-14, issued 5 February 2024 and effective 6 February 2024 — it replaced the 31 December 2019 AML/CFT policy document that most guides still describe
- Banks must identify beneficial owners through a cascade: first natural persons holding more than 25% equity, then control by other means, then senior management
- Paragraph 14A.16.1 requires a bank that cannot complete due diligence to refuse the account and consider filing a suspicious transaction report
- The tipping-off rule in paragraph 14A.17 is why a declining bank often gives no reason — it is not evasion, it is compliance
- A nominee director, which the policy document calls a resident director, is never the beneficial owner — appointing one does not solve an ownership-verification problem
- Enhanced due diligence adds source of wealth or source of funds enquiries and senior management approval before the relationship starts
- Bursa-listed companies are exempt from parts of the verification burden; ordinary Sdn Bhds are not
Who this applies to: Newly incorporated Malaysian companies opening their first account, and foreign-owned or foreign-controlled companies that have been declined or delayed.
On this page
Every competitor page on this topic is a five-step checklist ending in “and your account will be ready in a few working days”. That version is useless to the people who actually need help: foreign founders whose applications have been sitting for six weeks, or who have been declined twice by different banks with no reason given.
The honest version starts with an uncomfortable fact. No bank is obliged to open an account for you. And in a defined set of circumstances, a Malaysian bank is positively required to refuse you and prohibited from explaining why.
What the bank is actually working from
The instrument is Bank Negara’s policy document on Anti-Money Laundering, Countering Financing of Terrorism, Countering Proliferation Financing and Targeted Financial Sanctions for Financial Institutions, reference BNM/RH/PD 030-14, issued 5 February 2024 and effective 6 February 2024.
It replaced the AML/CFT and TFS for FIs policy document issued on 31 December 2019. Most published guidance still describes the 2019 document, and the 2024 revision is not cosmetic — it folds counter-proliferation financing into the framework and reworks the customer due diligence chapter. If a checklist you are reading does not mention CPF, it predates the current rules.
The document binds licensed banks, licensed Islamic banks, licensed investment banks, prescribed development financial institutions, insurers and takaful operators, licensed money services businesses and approved issuers of designated payment instruments. Your account application is being assessed against it, paragraph by paragraph.
What they must collect, and from whom
For a company, paragraph 14A.9.3 requires the bank to understand the nature of the customer’s business, its ownership and control structure. Paragraph 14A.9.4 then requires it to identify and verify:
- name, legal form and proof of existence — certificate of incorporation, constitution or partnership agreement, where certified true copies or duly notarised copies may be accepted — plus a unique identifier such as a tax identification number;
- the powers that regulate and bind the company, such as a directors resolution, and the names of persons holding senior management positions; and
- the address of the registered office and, if different, the principal place of business.
Paragraph 14A.9.5 adds that the person authorised to represent the company must be identified and verified, by letter of authority or directors resolution.
Paragraph 14A.9.7 is the one that catches badly-papered companies: where there is doubt about any of these identities, the bank must run a background enquiry to confirm the person is not dissolved, being liquidated or bankrupt, and verify the information with the Companies Commission of Malaysia, Labuan Financial Services Authority or another relevant authority. Your SSM record needs to match what you handed over.
Paragraph 14A.9.8 exempts companies listed on Bursa Malaysia from producing the certificate of incorporation or constitution and from director and shareholder verification. An ordinary Sdn Bhd gets no such relief.
The beneficial ownership cascade — where foreign-owned files fail
Paragraph 14A.9.6 sets out a three-step cascade the bank must work through:
- the natural persons who ultimately have a controlling ownership interest, which at a minimum means identifying directors and shareholders with an equity interest of more than 25%;
- where there is doubt whether those persons are truly the beneficial owners, or where no natural person controls through ownership, the natural person exercising control through other means; and
- where neither step yields a natural person, the relevant natural person holding a senior management position.
The steps are sequential — the bank need not pursue steps 2 and 3 once a beneficial owner is identified at step 1.
This cascade is where foreign-owned applications stall. A Sdn Bhd owned by a BVI company owned by a trust does not fail at step 1 because foreign ownership is disallowed; it fails because the bank must trace to a natural person and satisfy itself, using reliable and independently sourced information, that it knows who that person is. If the chain cannot be evidenced, the bank has not met paragraph 14A.9.6.
The policy document is also explicit that only a natural person can be an ultimate beneficial owner, and that ownership or control exercised through a chain of ownership, or by means other than direct control, still counts.
Why a nominee director does not help
There is a widely sold fix for the resident-director requirement that founders assume also solves the banking problem. It does not.
The policy document defines a Nominee Director — expressly noting it is also known as a resident director — as an individual or legal entity that routinely exercises the functions of a director on behalf of, and subject to the direct or indirect instructions of, a nominator. It then states: a Nominee Director is never the beneficial owner of a legal person. The same is said of a nominee shareholder, who is never the beneficial owner based on the shares held as nominee.
So the nominee does not close the cascade. The bank still has to reach the nominator. A nominee arrangement adds a relationship the bank must understand and document, and in practice moves the file toward higher risk rather than away from it.
Enhanced due diligence: what changes
Where the bank assesses the money laundering, terrorism financing or proliferation financing risk as higher, paragraph 14A.12.1 requires enhanced due diligence containing at least:
- all the standard customer due diligence information under paragraph 14A.9;
- additional information on the customer and beneficial owner, such as volume of assets and information from public databases;
- an enquiry into source of wealth or source of funds — and for politically exposed persons, both must be obtained; and
- approval from senior management before the business relationship is established.
Paragraph 14A.12.2 adds optional measures the bank may layer on: additional information on the intended level and nature of the relationship, enquiry into the reasons for intended transactions, and requiring the first payment to be carried out through an account in the customer’s name at a bank subject to similar due diligence.
That last measure is worth planning for. A foreign founder with no existing Malaysian banking footprint may be asked to fund the account from a personal or corporate account elsewhere that itself passes muster — which is difficult if the whole point of the exercise was to establish a first banking relationship.
Note also the ongoing obligation. Paragraph 14A.13.1 requires the bank to scrutinise transactions throughout the relationship and keep the documents up to date, with the frequency scaled to risk. Passing onboarding is not the end of it; a company whose actual transactions do not match the activity it described at account opening will be reviewed again.
Why a refusal comes without a reason
Two paragraphs explain the silence founders find so maddening.
Paragraph 14A.16.1. Where a reporting institution is unable to comply with the due diligence requirements, it shall not open the account, commence business relations or perform any transaction — and it must consider lodging a suspicious transaction report. The refusal is not discretionary once due diligence has failed.
Paragraph 14A.17.1. Where the institution forms a suspicion and reasonably believes that performing the due diligence process would tip off the customer, it is permitted not to pursue due diligence at all, to document why, and to file a suspicious transaction report immediately.
Put those together and you get the observed behaviour: requests for documents stop, the relationship manager becomes unresponsive, and the decline arrives with no explanation. Banks generalise the tipping-off caution well beyond actual suspicion cases, because the downside of over-explaining is a regulatory breach and the downside of under-explaining is an annoyed applicant.
The practical consequence is that appealing a decline rarely works, and asking the same bank again with the same structure almost never does. What works is fixing the underlying verifiability problem before you approach the next bank.
The exchange-control question that is not a problem
Founders often assume the account itself needs Bank Negara clearance. It does not.
Under Bank Negara’s Foreign Exchange Policy Notices, a Malaysian-incorporated company is a Resident regardless of who owns it, and paragraph 16 of Notice 4 allows a Resident Entity to open and maintain a Foreign Currency Account with a licensed onshore bank or a non-resident financial institution, subject to Part B of Notice 3. A non-resident opens an External Account instead, under paragraph 9.
So the ringgit operating account and a foreign currency account are both available to a foreign-owned Sdn Bhd as of right. The obstacle is anti-money-laundering verification, not exchange control.
Common mistakes
Treating a decline as a policy against foreign ownership. It is a verification failure. The fix is evidence, not lobbying.
Sending a director who is not a director. Paragraph 14A.9.5 requires the bank to verify the person authorised to represent the company, by letter of authority or directors resolution. A consultant or agent turning up without that document restarts the process.
Letting SSM records drift. Paragraph 14A.9.7 sends the bank to SSM to verify. If your register of members, registered office or director particulars are stale — the 14-day notification clocks in ss.46, 51 and 58 of the Companies Act 2016 — the bank finds a mismatch it must resolve before proceeding.
Describing the business vaguely. The bank must understand the nature of the business. “Trading and consultancy” against a general MSIC code invites enhanced due diligence because it explains nothing about expected transaction patterns.
Believing a nominee director shortens the process. The policy document says a nominee director is never the beneficial owner. It lengthens the process.
Working from a pre-2024 checklist. The current policy document is the February 2024 AML/CFT/CPF version. Guidance describing the 2019 document is describing superseded requirements.
What’s next
Before you approach any bank, assemble the chain: a clean ownership diagram from the Sdn Bhd up to named natural persons, with supporting registry extracts for every entity in between, and passports for anyone holding more than 25%. Have the certificate of incorporation, constitution, directors resolution authorising the account and the authorised signatory letter ready as certified copies.
Then make sure your SSM filings match that diagram exactly, including the register of beneficial owners maintained under ss.60B and 60C of the Companies Act 2016, because that is what the bank will pull.
Be ready for the source of funds and source of wealth question with documents rather than narrative, and expect that a foreign-controlled structure will need senior management sign off inside the bank before anything opens. If you have already been declined, do not resubmit the same file elsewhere — find which link in the ownership chain could not be evidenced, and fix that first.
Is there a law preventing a foreign-owned company from having a Malaysian bank account?
No. There is no prohibition on foreign ownership of a bank account, and a Malaysian-incorporated company is a Resident under Bank Negara's Foreign Exchange Policy Notices regardless of who owns it. What blocks accounts is the bank's obligation to identify and verify the beneficial owners. Where the ownership chain runs through jurisdictions the bank cannot verify, or through nominee structures, the bank may be unable to complete due diligence and is then required to refuse.
Why will the bank not tell me why I was rejected?
Paragraph 14A.17.1 of the policy document permits a reporting institution that suspects money laundering or terrorism or proliferation financing, and reasonably believes that continuing due diligence would tip off the customer, to stop the due diligence process and file a suspicious transaction report instead. Banks generalise this caution. A bank that gives you a detailed reason risks breaching the tipping-off restriction, so it gives none.
Will appointing a local nominee director fix the problem?
No, and it may make it worse. The policy document defines a Nominee Director, expressly noting it is also known as a resident director, as someone who routinely exercises the functions of a director on behalf of and subject to the instructions of a nominator — and states flatly that a Nominee Director is never the beneficial owner of a legal person. The bank still has to find the real controller. A nominee arrangement adds a layer to explain, not a layer of comfort.
What does the bank actually have to collect about my company?
Under paragraph 14A.9.4 the bank must obtain the name, legal form and proof of existence such as the certificate of incorporation or constitution (certified true or notarised copies may be accepted), a unique identifier such as a tax identification number, the documents that regulate and bind the company such as a directors resolution, the names of persons in senior management, and the registered office address plus the principal place of business if different. It must also verify the person authorised to represent the company under paragraph 14A.9.5.
How long should it take?
No official processing standard is published by Bank Negara or by the banks, so any timeline quoted online is market reporting rather than a rule. What is verifiable is what drives the variance: a wholly Malaysian-owned company with resident directors present in person, complete SSM documents and a clear activity description triggers standard due diligence, while a foreign-controlled or multi-layered structure triggers enhanced due diligence under paragraph 14A.12.1, which requires senior management approval before the relationship can begin.
Can I open the account before the company has a physical office?
The bank must record the registered office address and, if different, the principal place of business. A registered office at a company secretary's premises is normal and lawful under s.46 of the Companies Act 2016. Where the bank is assessing risk, however, the absence of any operating premises in Malaysia is one of the factors that pushes a file toward enhanced due diligence rather than an automatic refusal.
The following are deliberately unstated or described only qualitatively until confirmed by a subject-matter expert:
- No bank or Bank Negara publishes an account-opening turnaround standard — treat all quoted timelines as practitioner reporting, not policy
- Individual banks impose their own documentary checklists and minimum deposits above the regulatory floor; confirm with the specific bank rather than assuming a national standard
- Confirm whether the bank requires sight of the register of beneficial owners maintained under ss.60B and 60C of the Companies Act 2016 — this is common practice but is not a requirement stated in the policy document
Sources
- Anti-Money Laundering, Countering Financing of Terrorism, Countering Proliferation Financing and Targeted Financial Sanctions for Financial Institutions (BNM/RH/PD 030-14) — Bank Negara Malaysia
- Policy Document on AML/CFT/CPF and TFS for Financial Institutions — issuance notice — Bank Negara Malaysia
- Foreign Exchange Policy Notices (Consolidated), in operation 1 October 2025 — Bank Negara Malaysia
- Companies Act 2016 (Act 777), as at 1 August 2022 — SSM
Change history
| Version | Date | Change | By |
|---|---|---|---|
| 01.00 | 20 Jul 2026 | Approved and published. | — |