Malaysia Guidelines on Digital Assets

The guidelines are issued by the SC under section 377 of the Capital Markets and Services Act 2007. They state that their purpose is to set requirements for fundraising through digital token offerings, operation of IEO platforms and digital asset custody. The SC’s broader digital assets page describes trading, issuance and safekeeping of digital assets in Malaysia as regulated by the SC.

The framework applies to three main groups:

• issuers seeking to raise funds through a digital token offering;
• persons intending to operate an IEO platform; and
• persons intending to provide safekeeping, storing, holding or custody services for another person’s digital assets.

The guidelines clarify the boundary with payments regulation: digital currencies and digital tokens are not recognised in the guidelines as legal tender or as a form of payment instrument regulated by Bank Negara Malaysia. The document also says it should be read with other relevant laws and SC guidelines, including payment services and foreign exchange administration laws administered by BNM.

For digital token offerings, the guidelines require an issuer to be a Malaysian-incorporated company, excluding an exempt private company and public-listed company, or a limited liability partnership. The issuer must have its main business operations in Malaysia and may raise funds only through an IEO. The guidelines also prescribe minimum financial requirements, Malaysian resident director requirements, fit-and-proper expectations and equity-holding restrictions until the IEO project is completed.

An issuer seeking to raise funds through an IEO must apply to an IEO operator and include fit-and-proper declarations and a white paper. The white paper is intended to support an investor’s assessment of the issuer, the IEO project, the token’s characteristics, use of proceeds, valuation treatment, risks and other material information. The guidelines further state that an issuer must not offer digital tokens before the IEO operator’s approval has been obtained.

IEO platform operators are subject to a registration framework. A person seeking to operate an IEO platform must be registered under the guidelines, and a platform that also seeks to facilitate trading of digital assets must also be registered as a digital asset exchange operator under the Guidelines on Recognized Market. The IEO operator provisions cover registration criteria, financial requirements, board and senior management obligations, responsible persons, business continuity, records, conflicts of interest, market monitoring and SC oversight powers.

The custody section treats safekeeping, storing, holding or maintaining custody of digital assets for another person as a capital market service for purposes of section 76A of the CMSA. Digital asset custodians are subject to registration, minimum financial resources, fit-and-proper criteria, technology risk expectations and operational duties.

Custodians must act in clients’ best interests, safeguard client rights and access to digital assets, prevent unauthorised access, maintain transparent fees, identify and manage business risks, maintain written policies and notify the SC of breaches or material changes. Conduct rules require secure storage, key-generation and key-management controls, security mechanisms such as multi-factor authentication, segregation of client assets from the custodian’s own assets and up-to-date transactional records. Transaction records must be retained for at least seven years.

As of 8 June 2026, the profile status is mapped as In force because the guidelines are published as the current SC digital assets guidelines and the R3-2024 revision became effective on 19 August 2024. The 2024 amendment summary states that the revision aligned affected IEO operator and digital asset custodian provisions with the SC’s Guidelines on Technology Risk Management and made housekeeping or editorial changes for clarity and consistency. This profile does not describe the guidelines as legal, tax, investment or compliance advice.