-
What are the key financial crime offences applicable to companies and their directors and officers? (E.g. Fraud, money laundering, false accounting, tax evasion, market abuse, corruption, sanctions.) Please explain the governing laws or regulations.
In Malaysia, financial crime is governed by several statutes. Depending on the offence and applicable statutory provisions, criminal liability may arise against the company itself and/or its directors and officers. Key offences include:
(a) Fraud, criminal breach of trust, cheating, forgery and falsification of accounts
Fraud-related offences are principally governed by the Penal Code [Act 574], including criminal breach of trust (sections 405 to 409), cheating (sections 415 to 420), forgery (sections 463 to 477) and falsification of accounts (section 477A). These offences commonly involve misappropriation of funds or property, deception, false documents or falsified accounts.
(b) Money laundering
Section 4 of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (“AMLA”) [Act 613] criminalises dealings with proceeds of unlawful activity or instrumentalities of an offence where the requisite knowledge, belief or suspicion is established.
Section 87 provides for corporate and individual liability where offences involve a body corporate. The AMLA Amendment Act 2025 [Act A1761] also expanded the definition of a “serious offence” to include any offence under federal law punishable with imprisonment for a term of one year or more.
(c) Corruption
The Malaysian Anti-Corruption Commission Act 2009 (“MACC Act”) [Act 694] criminalises the giving and receiving of gratification (sections 16 and 17), the use of false or erroneous documents with intent to deceive a principal (section 18) and the use of office or position for gratification (section 23).
Section 17A separately imposes corporate liability on a commercial organisation for corrupt conduct by an associated person intended to obtain or retain business or a business advantage for the organisation, subject to the statutory defence of adequate procedures. It also provides for potential liability of directors and other persons concerned in the management of the organisation.
(d) Corporate accounting and reporting offences
The Companies Act 2016 [Act 777] creates offences relating to corporate accounting, records and disclosures, including failure to maintain proper accounting records (section 245), false or misleading statements (section 591), false reports (section 592), false statements to the Registrar (section 593) and fraud by company officers (section 595).
(e) Tax evasion and related offences
The Income Tax Act 1967 [Act 53], Sales Tax Act 2018 [Act 806], Service Tax Act 2018 [Act 807], Excise Act 1976 [Act 176] contain offences relating to tax evasion, false or incorrect returns or statements, and failures to comply with statutory tax and customs obligations. Qualifying offences may also constitute underlying offences for money laundering under AMLA.
(f) Market misconduct and securities offences
The Capital Markets and Services Act 2007 (“CMSA”) [Act 671] prohibits, among other things, false trading and market rigging, stock market manipulation, false or misleading statements and insider trading. Section 367 further provides for liability of directors, officers or representatives where an offence is committed by a body corporate, subject to the statutory requirements and defences.
(g) Sanctions, terrorism and proliferation financing
Malaysia implements relevant United Nations Security Council sanctions through domestic legislation. AMLA contains measures relating to terrorism financing, proliferation financing and targeted financial sanctions. The Strategic Trade Act 2010 [Act 708] separately regulates dealings involving strategic items and technology, including their export, transhipment, transit and brokering.
-
Can corporates be held criminally liable? If yes, how is this determined/attributed?
Yes. Corporations can be held criminally liable under Malaysian law. The basis of liability depends on the particular offence and governing statute.
A significant example is section 17A of the Malaysian Anti-Corruption Commission Act 2009 (“MACC Act”), which imposes criminal liability on a commercial organisation where a person associated with it corruptly gives, agrees to give, promises or offers gratification with the intent to obtain or retain business or a business advantage for the organisation. An associated person includes a director, partner, employee or person performing services for or on behalf of the organisation.
The commercial organisation may be prosecuted independently of the associated person, who may separately be prosecuted for the underlying corruption offence. The organisation has a statutory defence if it proves that it had adequate procedures in place to prevent such conduct.
Where a commercial organisation commits an offence under section 17A, its directors, controllers, officers, partners and persons concerned in its management are also deemed to have committed the offence unless they prove that it was committed without their consent or connivance and that they exercised due diligence to prevent it. The defences are therefore distinct: the organisation must establish adequate procedures, whereas the relevant individual must establish absence of consent or connivance and due diligence.
Section 17A is directed at the giving side of a corrupt transaction and does not create an equivalent corporate offence for the receipt of gratification.
Separately, section 87 of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (“AMLA”) provides that where a director, controller, officer, partner or person concerned in the management of a body corporate commits an offence under AMLA in that capacity, the body corporate may also be charged severally or jointly with that person.
Accordingly, corporate criminal liability in Malaysia depends on the applicable statutory framework, with section 17A of the MACC Act and section 87 of AMLA being important examples of express corporate liability and attribution provisions.
-
What are the commonly prosecuted offences personally applicable to company directors and officers?
In Malaysia, company directors and officers are commonly prosecuted for corruption, false claims, criminal breach of trust, cheating, forgery, falsification of accounts and money laundering. The applicable offence depends on the individual’s conduct and role within the company.
(a) Corruption and false claims
Directors and officers may be prosecuted under sections 16 and 17 of the MACC Act for giving or receiving gratification in connection with the company’s business.
Section 18 commonly arises from the submission of false or erroneous invoices, quotations, certificates, claims or other documents with intent to deceive a principal. In practice, this may involve documents falsely representing that goods or services were supplied or rendered when they were not.
(b) Criminal breach of trust and cheating
Directors and officers entrusted with company funds or property may be prosecuted for criminal breach of trust, including under section 409 of the Penal Code, where they dishonestly misappropriate or use entrusted funds contrary to the terms of the entrustment.
Section 420 may apply where directors or officers dishonestly induce victims to part with property through fraudulent representations, including in investment, financing or other commercial transactions.
(c) Forgery and falsification of accounts
Forgery-related offences may arise where directors or officers make or use false corporate or commercial documents as genuine to obtain property, payment or other benefits.
Section 477A of the Penal Code may also apply to the wilful falsification of books, accounts or other records with intent to defraud.
(d) Money laundering
Directors and officers may also be prosecuted under section 4 of AMLA where they deal with proceeds derived from unlawful activity.
In practice, money laundering charges may be brought together with charges for the underlying offence, such as corruption, criminal breach of trust or cheating.
-
Who are the lead prosecuting authorities which investigate and prosecute financial crime and what are their responsibilities?
In Malaysia, the principal prosecuting authority for financial crime is the Public Prosecutor/Attorney General’s Chambers (“AGC”). Under Article 145(3) of the Federal Constitution, the Public Prosecutor has the power to institute, conduct or discontinue criminal proceedings. Prosecutions are generally conducted by Deputy Public Prosecutors from the AGC, although other persons may be authorised to conduct prosecutions in accordance with the applicable law.
Financial crime investigations, on the other hand, are undertaken by different enforcement and regulatory agencies depending on the nature of the suspected offence. Commonly, commercial crime and money laundering offences are investigated by the Royal Malaysia Police (“PDRM”), corruption and financial crime offences by the Malaysian Anti-Corruption Commission (“MACC”), and capital market offences by the Securities Commission Malaysia (“SC”). Other agencies, including Bank Negara Malaysia, the Inland Revenue Board, Royal Malaysian Customs Department and Companies Commission of Malaysia, investigate offences falling within their respective statutory jurisdictions.
These agencies are principally responsible for the investigation of suspected offences. The ultimate decision whether to institute or discontinue criminal proceedings rests with the Public Prosecutor, subject to the applicable constitutional and statutory framework.
-
Which courts hear cases of financial crime? Are they determined by tribunals, judges or juries?
Most financial crime prosecutions in Malaysia are heard in the Sessions Court and determined by a Sessions Court Judge. This includes commonly prosecuted offences under the Penal Code, MACC Act and AMLA, subject to the jurisdiction conferred by the relevant legislation. For example, section 59 of the MACC Act provides for offences under that Act to be tried in the Sessions Court, notwithstanding anything contrary in any written law.
In appropriate cases, proceedings may be transferred to the High Court under section 417 of the Criminal Procedure Code, where the statutory grounds for transfer are satisfied.
Financial crime prosecutions are determined by judges, not juries. Malaysia does not have jury trials for criminal cases.
-
How do the authorities initiate an investigation? (E.g. Are raids common, are there compulsory document production or evidence taking powers?)
Investigations may be initiated following a police report or complaint, information from a whistleblower, suspicious transaction reports, intelligence gathered by enforcement agencies, or referrals from domestic or foreign authorities. Financial intelligence may also be disseminated by Bank Negara Malaysia (“BNM”) to the relevant enforcement agency for investigation.
Financial crime authorities have broad statutory investigative powers, and raids, searches and seizures are common in serious financial crime investigations. For example, section 31 of the MACC Act and section 31 of AMLA provide powers to search premises and seize documents, records, electronic devices and other property where the applicable statutory requirements are satisfied.
Authorities also have compulsory document-production and evidence-gathering powers. Section 30 of the MACC Act, for example, permits investigators to require persons to attend for examination, produce documents or other material, and furnish information relevant to an investigation. Comparable powers are available under AMLA and the Criminal Procedure Code (“CPC”) [Act 593].
Investigators may also require suspects, directors, officers, employees and other relevant persons to attend for the recording of statements. Depending on the applicable legislation, bank accounts and other property may also be frozen or seized during the investigation, before any criminal charge is brought.
-
What powers do the authorities have to conduct interviews?
Enforcement authorities have broad statutory powers to compel persons to attend for interviews or examinations during an investigation, whether as suspects or witnesses.
Under sections 111 and 112 of the Criminal Procedure Code (“CPC”), the police may require the attendance of a person acquainted with the circumstances of a case and orally examine that person. The person is generally required to answer questions relating to the case but may refuse to answer a question which would tend to expose him or her to a criminal charge, penalty or forfeiture.
The position under the MACC Act and AMLA is different. Section 30 of the MACC Act and section 32 of AMLA confer compulsory examination and information-gathering powers. A person examined is generally required to answer questions truthfully and cannot refuse to answer merely on the ground that the answer may be self-incriminating.
Failure or refusal to comply with these statutory requirements may itself constitute an offence.
Accordingly, the scope of the authorities’ interview powers, particularly in relation to self-incrimination, depends on the statutory regime under which the investigation is conducted.
-
What rights do interviewees have regarding the interview process? (E.g. Is there a right to be represented by a lawyer at an interview? Is there an absolute or qualified right to silence? Is there a right to pre-interview disclosure? Are interviews recorded or transcribed?)
The rights of an interviewee depend on the statutory regime under which the person is questioned and whether the person is interviewed as a witness or suspect.
Legal representation
An arrested person has a constitutional right under Article 5(3) of the Federal Constitution to consult and be defended by a legal practitioner of his or her choice. Section 28A of the CPC further provides a right to communicate and consult with counsel, subject to statutory exceptions. However, there is no general absolute right for counsel to be physically present throughout every investigative interview.
Right to silence and self-incrimination
There is no uniform absolute right to silence. Under section 112 of the CPC, a person is generally required to answer questions relating to the case but may refuse to answer a question which would tend to expose that person to a criminal charge, penalty or forfeiture.
The position is different under the MACC Act and AMLA. Under section 30 of the MACC Act and section 32 of AMLA, persons examined are subject to compulsory disclosure and examination requirements and generally cannot refuse to answer merely because the answer may be self-incriminating. Failure to comply with the applicable statutory requirements may itself constitute an offence.
Pre-interview disclosure and recording
There is generally no right to pre-interview disclosure of the evidence or investigation materials held by the authorities.
Investigative statements are ordinarily reduced into writing, and there is no universal requirement for interviews to be audio or video recorded. Statements are generally reviewed by the interviewee before being signed.
Accordingly, the rights available during an investigative interview, particularly concerning legal representation and self-incrimination, depend significantly on the statutory regime under which the interview is conducted.
-
Do some or all the laws or regulations governing financial crime have extraterritorial effect so as to catch conduct of nationals or companies operating overseas?
Yes. Certain Malaysian financial crime laws have extraterritorial effect, although the extent depends on the particular legislation and jurisdictional nexus.
Money laundering
AMLA recognises “foreign serious offences”, such that proceeds derived from qualifying criminal conduct outside Malaysia may form the basis of a money laundering offence in Malaysia.
Section 82 of AMLA also provides for extraterritorial jurisdiction over offences committed outside Malaysia where the statutory requirements are satisfied, allowing the offender to be dealt with as if the offence had been committed in Malaysia. The institution of proceedings is subject to the procedural requirements prescribed under section 82.
Corruption
Under section 66 of the MACC Act, where a Malaysian citizen or permanent resident commits an offence under the Act outside Malaysia, that person may be dealt with as if the offence had been committed in Malaysia. This is particularly relevant to Malaysian directors and officers conducting business overseas.
Penal Code offences
The Penal Code also provides for extraterritorial application in specified circumstances. Sections 3 and 4 extend Malaysian criminal jurisdiction to certain offences committed outside Malaysia where the statutory requirements are satisfied.
Accordingly, there is no uniform rule of extraterritorial application. Jurisdiction depends on the particular offence, statutory provision and the relevant connection with Malaysia.
-
Do the authorities commonly cooperate with foreign authorities? If so, under what arrangements?
Yes. Malaysian authorities regularly cooperate with foreign authorities in financial crime investigations through both formal and agency-to-agency arrangements.
Formal cooperation is principally governed by the Mutual Assistance in Criminal Matters Act 2002 [Act 621], which provides for mutual legal assistance including obtaining evidence, executing searches and seizures, serving documents, tracing proceeds of crime and restraining or forfeiting property. Cooperation may also take place pursuant to applicable bilateral or multilateral arrangements.
The surrender of persons to or from foreign jurisdictions is governed by the Extradition Act 1992 [Act 497], subject to the applicable statutory requirements and treaty or other arrangements.
Malaysia’s Financial Intelligence Unit (“FIU”) may also exchange financial intelligence with foreign counterpart FIUs, while enforcement agencies such as the MACC, Royal Malaysia Police and Securities Commission cooperate with foreign counterparts through agency-to-agency arrangements and international enforcement networks.
In practice, intelligence sharing and investigative coordination may occur through agency channels, whereas coercive measures such as obtaining admissible evidence, searches, asset restraint or extradition generally require formal statutory processes.
-
What are the rules regarding legal professional privilege? What, if any, material is protected from production or seizure by financial crime authorities?
Legal professional privilege in Malaysia is principally governed by sections 126 to 129 of the Evidence Act 1950 [Act 56].
Under section 126, an advocate is generally prohibited, without the client’s express consent, from disclosing communications made in the course and for the purpose of professional employment, documents with which the advocate became acquainted in the course of such employment, and legal advice given to the client. The protection continues after the professional relationship has ended.
Privilege does not extend to communications made in furtherance of an illegal purpose or to facts observed by an advocate showing that a crime or fraud has been committed since the commencement of the professional engagement.
Legal professional privilege is also recognised under financial crime legislation. For example, section 46(2) of the MACC Act and section 47(2) of AMLA preserve legal professional privilege within their respective statutory disclosure regimes.
Accordingly, privileged lawyer-client communications and legal advice are generally protected from compulsory disclosure, subject to applicable statutory exceptions. However, underlying corporate, banking, accounting or transactional records do not become privileged merely because they are provided to or held by a lawyer.
-
What rights do companies and individuals have in relation to privacy or data protection in the context of a financial crime investigation?
Privacy and data protection rights in Malaysia are not absolute in the context of a lawful financial crime investigation.
The Personal Data Protection Act 2010 (“PDPA”) [Act 709] regulates the processing of personal data in commercial transactions, but is subject to statutory exemptions, including for the prevention or detection of crime, investigations, and the apprehension or prosecution of offenders.
Financial crime legislation, including the MACC Act and AMLA, also confers broad powers on enforcement authorities to compel the production of documents and information and, where the statutory requirements are satisfied, to search premises and seize records, electronic devices and other property connected with an offence.
Accordingly, companies and individuals generally cannot rely on data protection, banking secrecy or contractual confidentiality to resist a lawful investigative requirement. However, investigative powers must be exercised within the scope of the applicable legislation, and legal professional privilege remains separately protected.
-
Is there a doctrine of successor criminal liability? For instance in mergers and acquisitions?
Malaysia does not generally recognise a standalone doctrine of successor criminal liability whereby criminal liability automatically transfers to an acquiring company merely by reason of a merger or acquisition. As a general principle, each company is a separate legal entity and remains responsible for its own criminal conduct.
In a share acquisition, the target company remains the same legal entity despite the change in ownership. Accordingly, any existing criminal liability or exposure ordinarily remains with the target company.
In an asset or business acquisition, the purchaser does not ordinarily assume the seller’s criminal liability merely by acquiring its business or assets. Individuals responsible for the relevant criminal conduct also remain personally liable notwithstanding a subsequent merger or acquisition.
The position may, however, depend on the transaction structure and applicable legislation. An acquiring entity may independently incur criminal liability through its own conduct following the acquisition, including where it participates in continuing unlawful conduct or knowingly deals with proceeds of unlawful activity.
Accordingly, appropriate anti-bribery, anti-money laundering and financial crime due diligence is important in M&A transactions to identify historical misconduct and any continuing legal or regulatory exposure.
-
What factors must prosecuting authorities consider when deciding whether to charge?
In deciding whether to prosecute, the Prosecution will generally consider whether there is sufficient admissible evidence to establish the elements of the offence and whether prosecution is in the public interest.
Relevant considerations may include the seriousness and circumstances of the offence, the role and culpability of the suspect, the strength and reliability of the evidence, the extent of any financial loss or benefit, the impact on victims or the public, and any aggravating or mitigating circumstances.
In financial crime cases, consideration may also be given to the scale and complexity of the offending, whether the conduct was deliberate or systemic, the suspect’s level of involvement or benefit, and his or her cooperation with the investigation.
Ultimately, the decision whether to charge is an exercise of prosecutorial discretion based on the available evidence, applicable law and public interest.
-
What is the evidential standard required to secure conviction?
In Malaysia criminal proceedings, the Prosecution bears the burden of proving the accused’s guilt beyond reasonable doubt.
At the close of the Prosecution’s case, the Court must determine whether a prima facie case has been established. If not, the accused must be acquitted without being called to enter a defence. If a prima facie case is established, the accused will be called to enter his or her defence.
At the conclusion of the trial, the Court may convict only if, having considered the evidence as a whole, the Prosecution has proved the charge beyond reasonable doubt.
The same standard applies to financial crime prosecutions, although certain legislation may contain statutory presumptions or evidential provisions relevant to proving particular elements of an offence.
-
Is there a statute of limitations for criminal matters? If so, are there any exceptions?
As a general rule, Malaysia does not impose a statutory limitation period for the prosecution of criminal offences. Financial crime offences may therefore generally be prosecuted notwithstanding the passage of time, provided that sufficient admissible evidence remains available to establish the charge.
-
Are there any mechanisms commonly used to resolve financial crime issues falling short of a prosecution? (E.g. Deferred prosecution agreements, non-prosecution agreements, civil recovery orders, etc.) If yes, what factors are relevant and what approvals are required by the court?
Malaysia does not presently have a general statutory deferred prosecution agreement (“DPA”) or non-prosecution agreement (“NPA”) regime, although the introduction of a DPA framework for corruption offences has been proposed.
Under the existing framework, the Public Prosecutor may exercise the discretion under Article 145(3) of the Federal Constitution not to institute or to discontinue criminal proceedings. In practice, representations may be made to the Prosecution seeking a review of a proposed or existing charge, including a request that no further action be taken.
Certain offences may also be compounded where expressly permitted by statute. For example, section 92 of AMLA permits offences under AMLA or its regulations to be compounded by the competent authority or relevant enforcement agency, with the consent of the Public Prosecutor. Where an offence is compounded in accordance with the statutory requirements, no prosecution may thereafter be instituted in respect of that offence. Where charges have already been instituted, the criminal proceedings may be discontinued following the compound.
Regulatory authorities such as the Securities Commission and Bank Negara Malaysia may also pursue civil, administrative or regulatory enforcement measures where permitted under their respective governing legislation.
Financial crime legislation also provides for non-conviction based forfeiture. For example, section 56 of AMLA and section 41 of the MACC Act permit forfeiture proceedings in prescribed circumstances even where no prosecution is instituted.
The approval required depends on the mechanism. A decision not to prosecute rests solely with the Public Prosecutor and does not require Court approval. Compounding under section 92 of AMLA requires the consent of the Public Prosecutor, while non-conviction-based forfeiture requires an application by the Public Prosecutor and an order of the competent court.
-
Is there a mechanism for plea bargaining?
Yes. Plea bargaining is recognised under sections 172C and 172D of the Criminal Procedure Code (“CPC”).
Under section 172C, an accused who has been charged and claims to be tried may apply to the Court for plea bargaining in respect of the charge or sentence. The Court must be satisfied that the application is made voluntarily before the accused and the Public Prosecutor proceed to agree on a satisfactory disposition of the case.
Where an agreement is reached, section 172D governs the disposal of the case. In a charge bargain, the accused may plead guilty to an agreed charge. In a sentence bargain, the Court may generally impose imprisonment of not more than half of the maximum term prescribed for the offence, subject to any statutory minimum sentence and the exclusions prescribed under section 172D(3).
-
Is there any obligation to disclose discovered misconduct to prosecuting authorities, or any benefit to making a voluntary disclosure? Is there an established route or official guidance for making such disclosures?
There is no general obligation on companies to self-report every instance of suspected financial misconduct. However, specific reporting obligations may arise depending on the nature of the misconduct and the person or entity concerned.
Under section 14 of AMLA, reporting institutions are required to report transactions, activities or property falling within the statutory reporting requirements, including suspicious transactions or activities. The 2025 amendments expanded these requirements, including in relation to restricted activity financing.
In corruption matters, section 25 of the MACC Act imposes specific reporting obligations where gratification is offered, promised, given, solicited or obtained in the circumstances prescribed by that section. Failure to report may itself constitute an offence.
Outside these mandatory reporting regimes, companies may voluntarily disclose suspected misconduct to the relevant enforcement authority. There is presently no general statutory framework guaranteeing immunity, non-prosecution or a reduction in penalty solely because of voluntary self-reporting. Nevertheless, voluntary disclosure, cooperation, remediation and improvements to compliance procedures may be relevant to prosecutorial or regulatory discretion.
The appropriate reporting route depends on the misconduct. AMLA reports are made through the prescribed reporting framework to Bank Negara Malaysia’s Financial Intelligence Unit, corruption may be reported to the MACC, and other criminal conduct may be reported to the Royal Malaysia Police or relevant enforcement agency.
-
What rules or guidelines determine sentencing? Are there any leniency or discount policies? If so, how are these applied?
Sentencing is principally governed by the penalty prescribed by the legislation creating the particular offence. Upon conviction, the Court imposes sentence within the applicable statutory parameters, having regard to established sentencing principles and prevailing sentencing trends for similar offences.
Within those parameters, sentencing is an exercise of judicial discretion. Relevant considerations include retribution, deterrence, prevention and rehabilitation, as well as the public interest. In serious financial crime cases, particularly those involving breach of trust or significant economic harm, greater emphasis may be placed on deterrence and retribution.
The Court considers aggravating and mitigating factors, including the seriousness of the offence, amount of loss or benefit involved, degree of culpability, abuse of trust or position, prevalence of the offence, previous convictions, age and health, cooperation with the authorities, restitution, remorse and any guilty plea.
There is no general fixed sentencing discount or formal leniency policy for financial crime offences. A guilty plea, cooperation and restitution may be treated as mitigating factors, but the weight given to them remains within the Court’s discretion. Where formal plea bargaining under sections 172C and 172D of the CPC is used, the sentencing consequences prescribed by section 172D apply.
-
How are compliance procedures evaluated by the prosecuting authorities and how can businesses best protect themselves?
There is no universal compliance standard applicable to every financial crime offence. Authorities will generally consider whether a compliance programme is proportionate to the risks faced by the business and effectively implemented in practice, rather than merely existing on paper.
The clearest statutory example is section 17A of the MACC Act. A commercial organisation has a defence if it proves that it had adequate procedures designed to prevent associated persons from engaging in the prohibited conduct. The Guidelines on Adequate Procedures identify five “T.R.U.S.T.” principles: Top Level Commitment; Risk Assessment; Undertake Control Measures; Systematic Review, Monitoring and Enforcement; and Training and Communication.
Importantly, there is no one-size-fits-all standard for adequate procedures. Whether the procedures are adequate will depend on the circumstances of the organisation, including its size, nature and complexity of operations, and the corruption risks to which it is exposed. The procedures should therefore be proportionate to those risks and effectively implemented in practice.
Businesses should maintain appropriate and documented compliance measures, including senior-management oversight, risk assessments, internal controls, third-party due diligence, conflict-of-interest and gifts policies, whistleblowing mechanisms, employee training, investigation of red flags and periodic review.
For businesses subject to AMLA, compliance should also address applicable requirements concerning customer due diligence, ongoing monitoring, suspicious transaction reporting, record keeping and internal controls.
Ultimately, businesses are best protected by ensuring that their compliance framework is risk-based, properly documented, regularly reviewed and demonstrably implemented in practice.
-
What penalties do the courts typically impose on individuals and corporates in relation to the key offences listed at Q1?
Penalties vary according to the offence and may include imprisonment, substantial fines, forfeiture and other ancillary consequences. Corporations are principally exposed to financial and other non-custodial sanctions, while directors and officers who are personally liable may also face imprisonment.
Under the MACC Act, offences including corruption under sections 16, 17 and 23 are generally punishable by imprisonment for up to 20 years and a fine of not less than five times the value of the gratification or RM10,000, whichever is higher. Similar penalties apply to false claims under section 18, subject to the applicable statutory calculation.
For corporate corruption under section 17A, a commercial organisation is liable to a fine of not less than ten times the value of the gratification or RM1 million, whichever is higher. Individuals deemed liable under section 17A(3) may also face imprisonment for up to 20 years, a fine, or both, subject to the statutory defence.
Money laundering under section 4 of AMLA is punishable by imprisonment for up to 15 years and a fine of not less than five times the value of the proceeds or instrumentalities involved, or RM5 million, whichever is higher. Property connected with unlawful activity may also be subject to seizure and forfeiture.
Penalties under the Penal Code vary according to the offence and its seriousness. For example, criminal breach of trust and cheating carry imprisonment and fines, with whipping also prescribed for certain offences.
For offences under the Companies Act 2016, CMSA and tax legislation, penalties similarly depend on the particular provision and may include substantial fines and, for individuals, imprisonment. Regulatory and civil consequences may also arise in appropriate cases.
The sentence ultimately imposed depends on the statutory penalty and the aggravating and mitigating circumstances of the particular case.
-
What rights of appeal are there?
A person convicted of a financial crime generally has a statutory right of appeal against the conviction, sentence or both.
As most financial crime prosecutions are commenced in the Sessions Court, an appeal generally lies first to the High Court and thereafter to the Court of Appeal, subject to the jurisdictional requirements and restrictions under the Courts of Judicature Act 1964. The Court of Appeal is generally the final appellate court for criminal cases originating in the subordinate courts.
Where a criminal case is tried by the High Court at first instance, an appeal lies to the Court of Appeal and thereafter to the Federal Court, subject to the applicable statutory requirements.
The Public Prosecutor also has rights of appeal, including against an acquittal or sentence were permitted by law.
An appellate court may, depending on the circumstances, affirm, reverse or vary the decision, order a retrial, or alter the sentence. An appeal does not automatically stay the execution of sentence, and a separate application for a stay or bail pending appeal may therefore be required.
The Public Prosecutor also has rights of appeal, including against an acquittal or sentence where permitted by law.
An appellate court may, depending on the appeal, confirm, reverse or vary the decision, order a retrial, or alter the sentence within its statutory powers. Appeals are subject to prescribed time limits and procedural requirements, and an appeal does not automatically stay execution of the sentence; a separate application for a stay or bail pending appeal may therefore be required.
-
How active are the authorities in tackling financial crime? How long do proceedings typically take?
Malaysian enforcement authorities are active in investigating and prosecuting financial crime, particularly corruption, money laundering, fraud, criminal breach of trust, securities and tax-related offences. Investigations are undertaken by specialised agencies including the MACC, PDRM, SC, BNM, LHDN and RMCD, with inter-agency cooperation where conduct involves multiple offences or regulatory regimes.
There is no prescribed or standard timeframe for investigations. A relatively straightforward investigation may be completed within months, while complex financial crime investigations may take several years, particularly where they involve multiple companies or individuals, extensive financial or digital records, asset tracing or evidence from foreign jurisdictions.
Once charges are brought, criminal proceedings may likewise take several years to conclude. The timeframe depends on the number and complexity of charges, volume of evidence, number of witnesses, interlocutory applications and Court scheduling. Multi-accused and document-heavy financial crime trials generally take longer, particularly where the case subsequently proceeds through the appellate courts.
-
In the last 5 years, have you seen any trends or focus on particular types of offences, sectors and/or industries?
Yes. Over the past five years, enforcement has remained particularly active in corruption, procurement and claims fraud, money laundering and asset recovery, financial and investment scams, and capital-market misconduct. There has also been significant scrutiny of cases involving government-linked entities and the misuse of public funds.
Online scams, investment fraud and the use of mule accounts have become an increasing enforcement focus. In 2024, the Penal Code was amended to introduce sections 424A to 424D, specifically addressing offences involving the misuse of payment instruments and accounts. Corresponding amendments introduced section 116D of the CPC, which empowers the police, where the statutory requirements are satisfied, to seize money in an account or prohibit dealings with such money.
The capital markets have similarly remained an active enforcement area, with particular attention given to securities fraud, disclosure breaches, corporate misconduct, unlicensed activities and online investment scams.
Overall, the trend is towards increasingly technology-enabled and financially interconnected offending, with enforcement authorities focusing on tracing the movement of funds across bank accounts and corporate structures, preserving and recovering assets, examining the responsibility of directors and senior management, and coordinating across agencies in complex financial crime investigations.
-
Have there been any landmark or notable cases, investigations or developments in the past year?
Yes. The past year has seen several significant developments in Malaysian financial crime enforcement, particularly involving high-value corruption and money laundering, asset recovery and capital-market enforcement.
Most notably, in December 2025, the High Court convicted former Prime Minister Datuk Seri Najib Razak on all 25 charges in the 1Malaysia Development Berhad (“1MDB”) proceedings, comprising 4 charges of abuse of position under the MACC Act and 21 money laundering charges involving approximately RM2.3 billion. He was sentenced to 15 years’ imprisonment and a fine of approximately RM11.4 billion, with a recoverable sum of approximately RM2.08 billion ordered under AMLA. The case is significant for the scale and complexity of the transactions and the concurrent application of Malaysia’s corruption and anti-money laundering laws.
In July 2026, the Federal Court, by a 2–1 majority, dismissed the Prosecution’s appeal against the acquittal of former Minister Syed Saddiq Syed Abdul Rahman on charges involving abetment of criminal breach of trust, misappropriation of property and money laundering. The decision affirmed his acquittal on all four charges and is notable for its consideration of the underlying property offences and related money laundering charges.
Asset recovery has also remained a significant enforcement focus. In October 2025, the Sessions Court ordered the forfeiture to the Government of more than RM169 million in various currencies linked to former Prime Minister Datuk Seri Ismail Sabri Yaakob, pursuant to section 41(1) of the MACC Act. The case demonstrates the use of non-conviction-based forfeiture as an enforcement tool.
In the capital markets, in July 2026 the Court of Appeal upheld a civil insider-trading judgment obtained by the Securities Commission, involving approximately RM5.83 million in disgorgement, civil penalties and costs. The decision reflects the continued use of civil enforcement alongside criminal and administrative measures under the CMSA.
Overall, recent developments demonstrate a continued enforcement focus on complex financial flows, asset recovery, senior public figures and corporate and capital-market misconduct.
-
Are there any pending or proposed changes to the legal, regulatory and/or enforcement framework?
Yes. A significant proposed development is the introduction of a deferred prosecution agreement (“DPA”) framework under the MACC Act. In 2025, the Government agreed in principle to introduce such a framework, with the MACC and Attorney General’s Chambers working on the proposed legislative provisions. The proposed regime is expected to provide an alternative mechanism for resolving certain serious corruption cases, particularly those involving large business entities or institutions. Its precise scope, eligibility criteria, conditions and judicial oversight will depend on the legislation ultimately enacted.
There are also ongoing reforms to Malaysia’s capital-market and corporate governance framework. In 2026, the Securities Commission proposed measures to strengthen corporate governance, including enhanced oversight and accountability, as part of the broader Capital Market Masterplan 2026–2030.
From an enforcement perspective, authorities are also strengthening inter-agency cooperation against online scams and unlicensed investment activities, including greater use of technology and information-sharing between regulators and enforcement agencies.
Overall, the direction of reform is towards greater corporate accountability, stronger governance and compliance, and more coordinated and technology-driven financial crime enforcement.
-
Are there any gaps or areas for improvement in the financial crime legal framework?
Yes. Although Malaysia has a relatively comprehensive financial crime framework, there remain areas where further development could improve both enforcement effectiveness and procedural safeguards.
One area is the practical effectiveness of whistleblower protection. While the Whistleblower Protection Act 2010 [Act 711] provides confidentiality, immunity and protection against detrimental action, concerns over retaliation, disclosure of identity or loss of protection may still discourage reporting. This is particularly relevant to corruption and corporate fraud, where insider information is often important in detecting misconduct.
A second area is the absence of a structured framework for corporate self-reporting and alternative resolution. Malaysia presently has no statutory DPA regime or general published framework setting out how voluntary disclosure, cooperation, remediation and compliance improvements will affect prosecutorial decisions. The proposed DPA framework under the MACC Act may address part of this gap.
A further area concerns the safeguards surrounding section 116D of the CPC, which permits the police, where the statutory requirements are satisfied, to seize money in an account or prohibit dealings with such money without prior Court approval. Although an affected person may apply to the Sessions Court to vary or revoke the order, further safeguards or earlier independent oversight could provide greater protection to legitimate account holders while preserving the effectiveness of the power in scam and mule-account investigations.
Overall, key areas for further development include effective whistleblower protection, clearer mechanisms for corporate self-reporting and resolution, and appropriate safeguards accompanying investigative and asset-preservation powers.
Malaysia: White Collar Crime
This country-specific Q&A provides an overview of White Collar Crime laws and regulations applicable in Malaysia.
-
What are the key financial crime offences applicable to companies and their directors and officers? (E.g. Fraud, money laundering, false accounting, tax evasion, market abuse, corruption, sanctions.) Please explain the governing laws or regulations.
-
Can corporates be held criminally liable? If yes, how is this determined/attributed?
-
What are the commonly prosecuted offences personally applicable to company directors and officers?
-
Who are the lead prosecuting authorities which investigate and prosecute financial crime and what are their responsibilities?
-
Which courts hear cases of financial crime? Are they determined by tribunals, judges or juries?
-
How do the authorities initiate an investigation? (E.g. Are raids common, are there compulsory document production or evidence taking powers?)
-
What powers do the authorities have to conduct interviews?
-
What rights do interviewees have regarding the interview process? (E.g. Is there a right to be represented by a lawyer at an interview? Is there an absolute or qualified right to silence? Is there a right to pre-interview disclosure? Are interviews recorded or transcribed?)
-
Do some or all the laws or regulations governing financial crime have extraterritorial effect so as to catch conduct of nationals or companies operating overseas?
-
Do the authorities commonly cooperate with foreign authorities? If so, under what arrangements?
-
What are the rules regarding legal professional privilege? What, if any, material is protected from production or seizure by financial crime authorities?
-
What rights do companies and individuals have in relation to privacy or data protection in the context of a financial crime investigation?
-
Is there a doctrine of successor criminal liability? For instance in mergers and acquisitions?
-
What factors must prosecuting authorities consider when deciding whether to charge?
-
What is the evidential standard required to secure conviction?
-
Is there a statute of limitations for criminal matters? If so, are there any exceptions?
-
Are there any mechanisms commonly used to resolve financial crime issues falling short of a prosecution? (E.g. Deferred prosecution agreements, non-prosecution agreements, civil recovery orders, etc.) If yes, what factors are relevant and what approvals are required by the court?
-
Is there a mechanism for plea bargaining?
-
Is there any obligation to disclose discovered misconduct to prosecuting authorities, or any benefit to making a voluntary disclosure? Is there an established route or official guidance for making such disclosures?
-
What rules or guidelines determine sentencing? Are there any leniency or discount policies? If so, how are these applied?
-
How are compliance procedures evaluated by the prosecuting authorities and how can businesses best protect themselves?
-
What penalties do the courts typically impose on individuals and corporates in relation to the key offences listed at Q1?
-
What rights of appeal are there?
-
How active are the authorities in tackling financial crime? How long do proceedings typically take?
-
In the last 5 years, have you seen any trends or focus on particular types of offences, sectors and/or industries?
-
Have there been any landmark or notable cases, investigations or developments in the past year?
-
Are there any pending or proposed changes to the legal, regulatory and/or enforcement framework?
-
Are there any gaps or areas for improvement in the financial crime legal framework?