How to Get a Remittance (MSB) Licence in Malaysia Online, Step‑by‑step (BNM Class B)

If you are researching how to get a remittance license in Malaysia online, the starting point is the Money Services Business Act 2011 (Act 731), which governs all money‑changing and remittance activities and is administered by Bank Negara Malaysia (BNM). This guide walks fintech founders, compliance leads and corporate counsel through every stage of the MSB licensing process, from choosing the correct licence class and meeting fit‑and‑proper requirements, to building the AML/CFT and e‑KYC controls BNM expects before it will approve an online remittance operation. By the end, you will have a clear document checklist, realistic timelines and a working knowledge of the post‑approval obligations that keep a remittance licence in good standing.

1. Quick Answer: Can You Apply for a Remittance Licence Online?

Yes. BNM accepts MSB licence applications through its prescribed submission channels, including electronic filing of the completed application form and supporting documents. The process is not a single‑click online portal in the way a company registration might be; applicants must compile a detailed pack, corporate documents, business plan, AML/CFT programme, fit‑and‑proper declarations, and submit it to BNM’s Payment Systems Policy Department. BNM publishes the application form and guidance on its official MSB Operators page.

Industry observers expect the end‑to‑end timeline (preparation through to licence issuance) to fall within roughly three to six months, depending on the completeness of the initial submission and the speed with which the applicant responds to BNM’s queries. The sections below break this process into discrete, manageable steps.

2. Legal Framework and MSB Licence Classes, Quick Comparison Table

The Money Services Business Act 2011 (Act 731) is the primary legislation that creates the licensing regime for money services businesses in Malaysia. It defines “money services business” to include money‑changing, remittance and wholesale currency activities, and makes it an offence to carry on any of these activities without a valid licence issued by BNM. The Act empowers BNM to set licence conditions, impose fit‑and‑proper requirements, prescribe minimum capital, and enforce compliance through inspections, directions and penalties.

Under the MSBA 2011 framework, BNM categorises MSB licences into three classes. The table below summarises the key differences.

Where to Read the Law

The full text of the Money Services Business Act 2011 (Act 731) is available on the Attorney General’s Chambers e‑Federal Gazette portal (lom.agc.gov.my). Secondary regulations, including P.U. instruments that prescribe minimum capital and licence fees, are published in the same gazette. Applicants should always check the latest consolidated version before preparing their submission.

3. Eligibility and Corporate Structure Requirements for a Remittance Licence in Malaysia

Before assembling the application pack, the applicant must ensure its corporate vehicle satisfies BNM remittance licence Malaysia requirements at a structural level. The foundational criteria are as follows:

• Malaysian‑incorporated company. The applicant must be a company incorporated under the Companies Act 2016 and registered with the Suruhanjaya Syarikat Malaysia (SSM). A sole proprietorship or partnership is not eligible.
• Principal place of business in Malaysia. The company must maintain a physical registered office and, where applicable, operational premises within Malaysia.
• Objects clause or constitution. The company’s constitution (or memorandum, if pre‑2017 incorporation) should expressly permit the conduct of money services business activities.
• Fit‑and‑proper directors and officers. Every director, chief executive and person responsible for management of the MSB must satisfy BNM’s fit‑and‑proper criteria (detailed in Section 5 below).
• No disqualifying convictions or insolvency. No director or officer may be an undischarged bankrupt or have been convicted of an offence involving fraud or dishonesty.

Foreign Ownership and Investor Considerations

The MSBA 2011 does not impose a blanket prohibition on foreign shareholders, but BNM assesses the ultimate beneficial ownership structure as part of its licensing review. Foreign‑owned applicants should expect additional scrutiny on source‑of‑funds documentation, the parent company’s regulatory track record and the proposed governance structure. Industry observers note that BNM may impose specific conditions, such as requiring a Malaysian‑resident managing director, on a case‑by‑case basis.

It is important to distinguish the MSB licensing regime from money lending. Money‑lending licences in Malaysia are issued under separate legislation (the Moneylenders Act 1951) and administered at the state level by the relevant Ministry. BNM’s role is confined to MSB licensing under the MSBA 2011.

4. Minimum Capital, Fees and Branching Rules

Minimum paid‑up capital requirements for each MSB licence class are prescribed by BNM through subsidiary legislation issued under the MSBA 2011. Because these thresholds may be updated periodically, applicants must verify the current figures directly on the BNM MSB Operators page or in the relevant P.U. instrument published in the Federal Gazette. The table below provides a structural overview.

Applicants pursuing a remittance Class B licence, the most common path for fintech and online‑first operators, should budget not only for the prescribed capital but also for operational set‑up costs: technology infrastructure, AML/CFT system procurement, compliance staff recruitment and legal advisory fees. The BNM MSB Licensees directory lists all currently active licensees by class, which can serve as a useful benchmark when assessing competitive positioning.

5. Required People: Fit‑and‑Proper, Directors and Compliance Officers

BNM requires every person who holds a position of responsibility in an MSB, directors, the chief executive officer, the compliance officer and any person concerned in the management of the business, to satisfy fit‑and‑proper criteria. The assessment considers three broad dimensions:

• Probity and integrity. No convictions for fraud, dishonesty or financial crimes; no adverse regulatory history; no undischarged bankruptcy.
• Competence and capability. Relevant professional qualifications, industry experience, and understanding of remittance operations, AML/CFT obligations and the regulatory environment.
• Financial soundness. The individual must not be in a position of financial distress that could compromise their judgment or expose the business to undue risk.

Each proposed director and officer must submit a completed personal declaration form (part of the BNM application pack), a detailed curriculum vitae, certified copies of identification documents, police clearance certificates from relevant jurisdictions and professional references.

Compliance Officer Duties and AML Training

The designated compliance officer carries specific responsibilities under BNM’s AML/CFT policy framework. These include overseeing the AML/CFT programme, filing suspicious transaction reports (STRs) with BNM’s Financial Intelligence and Enforcement Department, ensuring ongoing screening against sanctions and targeted financial sanctions (TFS) lists, and maintaining adequate record‑keeping systems. BNM’s Policy Document on AML/CFT/CPF and Targeted Financial Sanctions for DNFBPs and NBFIs sets out the expectation that compliance officers, and all relevant staff, undergo regular AML/CFT training, with refresher programmes conducted at least annually. This aligns with the FATF’s Guidance for a Risk‑Based Approach for Money or Value Transfer Services, which recommends ongoing training proportionate to the nature and scale of the business.

6. AML/CFT and e‑KYC Controls Required for Online Remittance Onboarding

For any applicant seeking to understand how to get a remittance license in Malaysia online, this section is critical. BNM will not approve an MSB licence in Malaysia unless the applicant demonstrates a robust AML/CFT programme tailored to its risk profile, and, for online channels, a compliant e‑KYC framework.

AML/CFT Programme Requirements

BNM’s Policy Document on AML/CFT/CPF and TFS (effective February 2024) requires every MSB to implement a risk‑based AML/CFT programme. The programme must address the following pillars:

• Institutional risk assessment. A documented assessment of money‑laundering and terrorism‑financing risks specific to the business model, customer types, geographies served, products offered and delivery channels used.
• Customer due diligence (CDD). Verification of customer identity before establishing a business relationship or executing a transaction above prescribed thresholds. Enhanced due diligence (EDD) is required for higher‑risk customers, politically exposed persons (PEPs) and non‑face‑to‑face onboarding.
• Transaction monitoring. Automated systems capable of detecting unusual or suspicious patterns, with clear escalation procedures to the compliance officer.
• Suspicious transaction reporting (STR). Procedures and templates for filing STRs with BNM’s Financial Intelligence and Enforcement Department within prescribed timeframes.
• Targeted financial sanctions (TFS) screening. Real‑time or near‑real‑time screening of customers and beneficiaries against UN, Malaysian and other applicable sanctions lists, with protocols for freezing and reporting.
• Record retention. All CDD records, transaction records and STR documentation must be retained for a minimum period as prescribed by the MSBA 2011 and BNM’s policy documents.
• Ongoing training. Annual AML/CFT training for all staff, with role‑specific modules for front‑line agents, compliance officers and senior management.

e‑KYC for Online Remittance Channels

BNM’s policy document on Electronic Know‑Your‑Customer (e‑KYC) sets out the standards for remote, non‑face‑to‑face customer verification. For operators building an online remittance platform, the practical technology requirements include:

• Digital identity verification. Integration with a reliable digital ID source, typically MyKad verification via the National Registration Department (JPN) or equivalent biometric databases for foreign nationals.
• Liveness detection. Real‑time biometric checks (facial recognition with liveness) to confirm the person presenting the identity document is physically present during onboarding.
• Document authentication. Automated optical character recognition (OCR) and tamper‑detection for identity documents uploaded through the platform.
• Risk‑tiered onboarding. Lower‑risk customers may be onboarded with simplified CDD within BNM’s prescribed transaction or balance thresholds; higher‑risk profiles require EDD and may trigger manual review.
• Sanctions and PEP screening API. Automated screening at the point of onboarding and on an ongoing basis throughout the customer lifecycle.
• Data security. Encryption in transit and at rest, secure storage of biometric data, and compliance with Malaysia’s Personal Data Protection Act 2010.

The FATF’s Guidance on Digital Identity reinforces these requirements at the international level, emphasising that digital ID solutions used for CDD must provide an appropriate level of assurance relative to the risk. Early indications suggest that BNM’s expectations are converging with the FATF framework, meaning applicants who build their e‑KYC stack to FATF standards will be well‑positioned for BNM approval.

When You Might Need an E‑Money Issuer Licence

Remittance and e‑money issuance are distinct activities under Malaysian law. If the proposed business model involves issuing stored‑value instruments, digital wallets, prepaid cards or tokens that represent a monetary value, the operator may need an e‑money issuer licence under the Financial Services Act 2013 or the Islamic Financial Services Act 2013, in addition to or instead of an MSB licence. An MSB licence alone does not authorise the issuance of e‑money. Applicants whose product roadmap includes wallet‑based features should assess this distinction early and, if necessary, pursue parallel licensing.

7. Document Checklist and Sample Application Pack

BNM’s application form for an MSB licence requires a comprehensive document pack. The following ordered checklist reflects the typical requirements for a remittance licence Malaysia application, particularly for a Class B (remittance‑only) applicant pursuing online channels:

1. Completed BNM application form, available from the BNM MSB Operators page.
2. Certificate of incorporation and SSM registration documents.
3. Company constitution (memorandum and articles of association or new‑form constitution under the Companies Act 2016).
4. Board resolution authorising the application for an MSB licence.
5. Directors’ and officers’ personal declaration forms, CVs, certified IDs, police clearance certificates and professional references.
6. Shareholders’ register and ultimate beneficial ownership chart (including source‑of‑funds declarations for significant shareholders).
7. Audited financial statements (or pro‑forma financials for newly incorporated entities), demonstrating the company meets the prescribed minimum paid‑up capital.
8. Business plan, covering market analysis, target corridors, projected transaction volumes, revenue model, operational structure, technology architecture, customer acquisition strategy and three‑year financial projections.
9. Remittance flow diagrams, end‑to‑end transaction flow, fund‑flow diagrams showing settlement with correspondent partners, and the online user journey from registration through to completed transfer.
10. AML/CFT programme document, institutional risk assessment, CDD and EDD procedures, STR filing procedures, TFS screening protocols, record‑retention policy and training calendar.
11. e‑KYC policy and technology description, vendor details, integration architecture, liveness detection methodology, data security measures and risk‑tiered onboarding thresholds.
12. IT and information security policy, cybersecurity framework, penetration testing schedule, disaster recovery plan, and data‑protection measures under the Personal Data Protection Act 2010.
13. Compliance manual and internal audit framework.
14. Agent or correspondent agreements (if applicable), draft or executed agreements with any overseas partners, aggregators or payout networks.

Applicants should prepare each document as a clearly labelled, indexed PDF. Incomplete submissions are the single most common cause of delay, so a thorough internal review against BNM’s published checklist before filing is strongly recommended.

8. Step‑by‑Step Application Flow and Realistic Timelines for a Remittance Licence in Malaysia

The table below outlines the typical stages involved in applying for an MSB licence and the indicative timeframes observed by industry practitioners. These are estimates, BNM does not publish guaranteed service‑level timelines, and actual durations depend on the quality and completeness of the submission.

Total indicative timeline: approximately 3–6 months from the start of preparation to licence issuance, assuming no material deficiencies in the application.

Common Delays and Red Flags

• Incomplete document packs. Missing financial statements, unsigned declarations or outdated police clearances force BNM to issue additional requests, adding weeks to the process.
• Weak AML/CFT programme. A generic, template‑style AML programme that does not address the specific risks of the applicant’s business model and corridors is likely to trigger extensive follow‑up queries.
• Unresolved fit‑and‑proper issues. Directors with undisclosed adverse histories, pending litigation or regulatory censure in other jurisdictions can stall or derail an application entirely.
• Inadequate e‑KYC documentation. For online operators, failure to describe the liveness detection methodology, vendor due diligence or data security measures in sufficient detail is an increasingly common friction point.

9. Post‑Approval Obligations and Ongoing Compliance

Obtaining the licence is the beginning, not the end. MSB licensees must comply with a range of ongoing obligations under the MSBA 2011 and BNM’s regulatory framework:

• Licence conditions. BNM may impose conditions specific to the licensee, on transaction limits, corridors, agent appointments or technology changes. Breaching these conditions can result in enforcement action.
• Periodic reporting. Licensees must submit prescribed returns and statistical reports to BNM at intervals specified in the licence conditions or BNM directions.
• Agent and principal rules. If operating through agents, the licensee remains fully responsible for the agent’s compliance with the MSBA 2011 and AML/CFT requirements. Agent agreements must be submitted to BNM.
• Annual AML/CFT review. The AML/CFT programme must be reviewed and updated at least annually to reflect changes in business model, risk environment and regulatory expectations.
• BNM inspections. BNM conducts periodic on‑site and off‑site inspections of MSB licensees. Licensees must cooperate fully and provide access to records, systems and personnel.
• Prior approval for material changes. Changes to the business model, ownership structure, directors, principal place of business or technology platform typically require BNM’s prior written approval.
• MSB licence check. Licensees should periodically verify their own listing on the BNM MSB Licensees directory to ensure accuracy and public visibility.

10. Practical Tips and Pre‑Submission Checklist

Drawing on common patterns observed in MSB licensing projects, the following practical tips can materially improve the quality of an application and reduce the likelihood of delays:

1. Start with the AML programme, not the form. The AML/CFT programme is the most scrutinised document. Draft it first, then build the business plan and application around it.
2. Appoint the compliance officer early. BNM expects this person to be in place, and named in the application, from the outset. Hiring after submission raises questions about genuine readiness.
3. Use BNM’s own templates. Where BNM provides prescribed forms or declaration templates, use them exactly. Do not substitute bespoke formats.
4. Index every document. Label each file by reference to the BNM checklist item number. This small step prevents “completeness” queries that add weeks.
5. Pre‑test your e‑KYC stack. Run a pilot with sample data before submission. BNM may ask for a live demonstration or test results during the review.
6. Prepare corridor‑specific risk assessments. If you plan to remit to high‑risk jurisdictions, address those risks explicitly in your AML programme, do not wait for BNM to ask.
7. Engage a licensed auditor. Financial statements should be audited (or reviewed) by a firm registered with the Malaysian Institute of Accountants.
8. Budget for capital maintenance. The minimum paid‑up capital must be maintained throughout the life of the licence, not merely at the point of application.
9. Designate a BNM liaison. Nominate a single point of contact, ideally the compliance officer or legal counsel, for all BNM communications. Consistent, responsive engagement builds regulatory confidence.
10. Keep the licence renewal cycle in mind. An MSB licence is not perpetual. Plan for renewal well in advance of expiry, maintaining all compliance records in audit‑ready condition.

For founders and compliance teams who need specialist guidance on any stage of this process, connecting with a fintech licensing adviser experienced in Malaysian regulatory submissions can significantly reduce risk and accelerate the timeline. The Malaysia lawyer directory is a useful starting point for identifying qualified professionals.

Conclusion

Understanding how to get a remittance license in Malaysia online requires more than familiarity with a single application form, it demands a structured approach to corporate set‑up, human capital, AML/CFT programme design, e‑KYC technology and responsive engagement with BNM throughout the review process. The MSBA 2011 provides the legislative foundation, but the practical detail sits in BNM’s policy documents, prescribed forms and the regulator’s evolving expectations around digital onboarding and financial crime controls.

For fintech founders and compliance leads, the investment in building a genuinely robust application pack pays dividends: not only in a smoother approval process, but in creating the operational and compliance infrastructure that supports sustainable growth once the licence is in hand. Whether the goal is a remittance Class B licence for an online‑only platform or a Class A licence combining money‑changing and remittance, the steps outlined in this guide provide a reliable roadmap from initial planning through to post‑approval compliance.

Sources

1. Bank Negara Malaysia, MSB Operators
2. Bank Negara Malaysia, MSB Licensees (FSP Directory)
3. BNM Policy Document, AML/CFT/CPF and Targeted Financial Sanctions for DNFBPs and NBFIs
4. FATF, Guidance for a Risk‑Based Approach for Money or Value Transfer Services