Skip to main content

​
Overview

​
Identifiers

Collect two identifiers from each business customer in Malaysia and submit them as strings on the application body. Tax ID: Format: C prefix + 10 digits for companies (e.g., C 50000000XX0). Separate SST Registration Number (15-char alphanumeric) issued by RMCD for businesses with turnover ≥ RM 500,000. Registration number: Current 12-digit format: YYYY-TT-NNNNNN (year + 2-digit entity type + 6-digit sequence). Legacy 6–8-digit format remains valid for pre-2019 companies; both refer to the same entity.

​
Sector regulators

BNM · SC · Royal Malaysian Customs Dept · Labuan FSA

​
How documents combine

For each evidence area, this table shows whether the listed documents are alternatives (any one of) or a bundle (all required). The artifact-by-artifact lookup follows below.

​
Documents to collect

The physical documents you’ll collect from your customer, with the evidence area each one proves. One document can prove multiple areas — for example, Brazil’s Cartão CNPJ covers both tax and business-registration proof, so it appears once with both areas listed.

​
Collection notes

  • Legal Registration: Confirms CRN (12-digit new or legacy), incorporation date, status, registered address. Purchasable via ssm-einfo.my.
  • Constitutive Documents: Single constitutive document under Companies Act 2016; optional for Sdn Bhd and Bhd limited by shares (statutory defaults apply if none adopted); mandatory for companies limited by guarantee. Pre-2016 companies may hold legacy Memorandum & Articles of Association pair — both formats valid.
  • Tax Registration: TIN certificate issued by IRBM; prefix C for companies. If SST-registered, additionally collect RMCD SST Registration Certificate.
  • Operating Permit: Issued by the local municipal council (Majlis Perbandaran) for the business operating address; requirement varies by local authority.
  • Sector-Specific License: Collect the relevant licence certificate for any regulated financial activity.
  • Ownership Records: Shareholder list is embedded in the SSM Company Profile (e-Info / MyData extract).
  • Governance Records: Lists all current directors; extract from e-Info or MyData-SSM.
  • Signing Authority: Document execution under Companies Act 2016 s.66: signed by two authorised officers (at least one director), or sole director before a witness. POA governed by Power of Attorney Act 1949; must be registered at the Land Office or High Court if used for land transactions.
  • Address: Conduit universal policy: lease (no time bound) OR utility bill OR bank statement, with utility/bank dated within 90 days. Same evidence satisfies both registered-address and operating-address checks.
  • Good Standing: Issued by SSM via the e-Info portal (ssm-einfo.my); certifies the company has met the required compliance criteria as of the attestation date. Distinct from the SSM Company Profile extract. Per research finding r1.

​
Person roles

When you submit a person on the application body, set their role to one of Conduit’s canonical BusinessPersonRole values. Use this table to map a local corporate-governance title onto the right canonical role.

​
Notes

  • Dual CRN formats: companies registered before 2019-10-11 are issued both the legacy 6–8-digit CRN and the new 12-digit format. Either number identifies the same entity; SSM extracts list both.
  • No apostille available: Malaysia is not a contracting party to the Hague Apostille Convention (verified against HCCH Status Table, 2026-05-06). Cross-border documents require conventional legalisation: notarisation + Malaysian authority attestation + receiving-country embassy authentication.
  • Company Constitution is optional for most Sdn Bhd: If no constitution is adopted, CA 2016 statutory defaults govern; an SSM profile alone may be sufficient for constitution evidence — confirm with the company whether a constitution exists.