Ask ten brokers who regulates retail forex in Malaysia and you will get three answers: the Securities Commission, Bank Negara, and Labuan. All three appear in the story, and the reason firms get it wrong is that each one controls a different piece of the same activity.
The split between the two onshore regulators
The Securities Commission Malaysia supervises the capital market under the Capital Markets and Services Act. Dealing in securities and dealing in derivatives are regulated activities that require a Capital Markets Services Licence, with representatives individually licensed to carry on the activity. The SC also approves the derivatives exchange and the products listed on it, supervises fund managers and advisers, and runs the anti money laundering guidelines that licensed intermediaries operate under.
Bank Negara Malaysia, the central bank, holds the other half. It administers foreign exchange policy and supervises banks and other financial institutions. Malaysia's foreign exchange administration rules govern how residents may deal in foreign currency and with whom. In practice, foreign currency dealing for residents runs through institutions the central bank has authorised, which is why Bank Negara publishes a list of entities that are not authorised to carry on the business and why the enforcement action against unlicensed operators frequently comes from the central bank rather than the SC.
The consequence for an operator is simple to state and hard to work around. A retail leveraged foreign exchange offering aimed at Malaysian residents sits across an SC regulated activity and a central bank administered currency regime at the same time. There is no single foreign facing licence that hands you both. Anyone who tells you otherwise is selling something, and Malaysian counsel will tell you the same thing in more careful language.
Labuan is a different jurisdiction wearing the same flag
Labuan IBFC is a federal territory with its own regulator, Labuan Financial Services Authority, and its own statutes. A Labuan money broking licence is the one most often marketed to brokers, alongside securities licensee and fund manager permissions. It is a real licence with real conditions: a Labuan company, a local operational office requirement, minimum paid up capital set against the permission, an approved auditor, local directors or a resident secretary, and ongoing reporting.
What it is not is an onshore Malaysian licence. Labuan entities operate under restrictions on dealing with Malaysian residents that are set by the Labuan framework and by the central bank's foreign exchange policy, and those restrictions are the whole reason the regime exists. We set out the general shape of that trade in our Labuan guide. If your business plan is to use Labuan as the licence and Malaysian retail as the client base, stop and get advice, because that plan usually does not survive contact with the rules.
Nothing here is legal advice. Whether a specific product, counterparty and marketing plan needs an SC licence, a Bank Negara authorisation, a Labuan licence or some combination is a question for Malaysian counsel on your actual facts.
Who accepts which licence
Counterparties do not read your licence certificate for the crest. They read it for the scope line and the jurisdiction, then they compare both to where your customers live. That comparison is what drives the decisions founders find so mysterious.
Malaysian bank accounts and domestic payment rails are the tightest gate. Local banks and payment providers apply know your business standards set by the central bank and are answerable for the merchants they take on, so an entity whose licence explicitly excludes Malaysian residents is a poor fit for a merchant account collecting from Malaysian residents. Card acquiring is judged on a different axis: high risk merchant category, chargeback ratios against scheme thresholds, and jurisdiction risk rating of the entity. Both filters can decline the same firm for different reasons, which is why approval rates often collapse before any volume arrives.
Liquidity providers and prime of prime desks ask where the flow originates and under what authorisation, because their own banks and their own regulators ask them. Platform vendors and technology suppliers ask the same in onboarding, and app stores and ad platforms run financial services verification that turns on authorisation in the target country. Being named on a regulator's public alert list is the single fastest way to fail every one of these checks at once, and those lists are indexed by search engines permanently. Checking a public register is also exactly what your own clients are doing to you.
The realistic routes for a foreign firm
There are three honest options. Apply for a Capital Markets Services Licence with a Malaysian entity, which is a long and demanding process aimed at firms treating Malaysia as a core market. Use Labuan for a genuinely offshore, non resident client business, accepting the restrictions that come with it. Or serve the region from a hub that is built for cross border wholesale and do not market to Malaysian retail at all. Firms comparing that third option usually look at Singapore and at the Gulf, and they should read the MAS licensing guide before assuming a regional hub solves the country level question. It does not. Cross border retail solicitation is regulated in the client's country, wherever your servers sit.
SINGUARD's Executive Directors, Alex Onta & Roman Onta, spend a large share of every launch call on exactly this point, because the technology decision is easy and the perimeter decision is not.
What to build before the licence arrives
Whichever route you pick, the supervisory expectations are operational. Client categorisation, suitability and risk warning records, transaction reporting, complaint handling with defined timelines, segregated client money, sanctions and politically exposed person screening, and an audit trail an examiner can follow without your help. Firms that treat these as documents rather than as systems fail their first inspection. Leveraged trading is high risk for the client, and the rules exist because of that.
"People buy a Labuan licence and print Malaysia on the website. Those are two different regulatory worlds, and the bank onboarding your merchant account knows the difference even when your marketing team does not."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- The Securities Commission licenses dealing in securities and derivatives, while Bank Negara administers the foreign exchange regime, and retail leveraged FX touches both.
- A Labuan licence is issued by a separate regulator under separate statutes and comes with restrictions on dealing with Malaysian residents.
- Banks, payment providers, liquidity desks, app stores and ad platforms all compare your licence scope against where your clients live, not against the crest on the certificate.
- Being named on a regulator's public alert list fails every counterparty check at once and stays indexed indefinitely.
Frequently Asked Questions
Can a foreign broker get a Malaysian forex licence?
Not as a foreign entity. Dealing in derivatives is a regulated activity requiring a Capital Markets Services Licence held by a Malaysian company with licensed representatives, and the foreign exchange side is administered separately by the central bank. Malaysian counsel should map your specific product before you commit to an application.
Is a Labuan licence the same as being regulated in Malaysia?
No. Labuan IBFC has its own regulator and its own statutes, and the regime is built for non resident business with restrictions on dealing with Malaysian residents. Describing a Labuan licence as Malaysian regulation to retail clients is the kind of claim that draws regulatory attention.
Why do Malaysian payment providers decline broker merchant accounts?
Domestic providers answer to their own supervisor for the merchants they onboard, so they check whether the activity is authorised for Malaysian residents. Separately, leveraged trading falls into high risk merchant categories where acquirers price chargeback exposure and jurisdiction risk, so a firm can be declined on either ground.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.