--- title: "Malaysia (MY) — Financial-Integrity Intelligence · Sentinel" canonical: https://sentinel.gi/jurisdictions/malaysia/ source_html: /jurisdictions/malaysia/index.html description: "Financial integrity intelligence for Malaysia (MY): sanctions, beneficial ownership, enabler jurisdictions, conflict finance, digital assets and compliance technology — with sourced findings." generated_at: 2026-11-08T04:46:02Z content_sha256: 770807ab56304ec4ad5751a02134411b86a63c0c847308399ddce8cae6c82935 generator: "fe-fleet/md-twin@1.0" --- # Malaysia (MY) — Financial-Integrity Intelligence · Sentinel Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved. Financial Integrity Monitor # Malaysia MY Domains covered 8 of 8 Sources 167 Role actions 8 Horizon <90d 0 Jurisdiction profile FATF status: Largely Compliant Tier: B Risk direction: Increasing Enablement vs enforcement: Mixed Malaysia operates under the AMLA 2001 (Act 613), supervised by Bank Negara Malaysia, the Securities Commission and the Labuan FSA, coordinated via the National Coordination Committee to Counter Money Laundering. More FATF's Dec 2025 MER rates Malaysia compliant on 24 Recommendations and largely compliant on 16, citing a sound legal/supervisory architecture but persistent weaknesses converting investigations into prosecutions, dissuasive sanctions, and BO/TCSP oversight in Labuan. Key deficiencies - Low conversion rate of money-laundering investigations into prosecutions and convictions - Insufficiently dissuasive sanctions for terrorist-financing violations - DNFBPs focus on name-matching over actively freezing assets of designated-party proxies - Beneficial-ownership register not publicly accessible and verification capacity unclear - Mutual legal assistance remains underutilised relative to case volume Recent developments (18m) - FATF/APG adopted Malaysia's 5th-round MER at the Oct 2025 Plenary (published 11 Dec 2025); Malaysia and Belgium were the first countries assessed under the new time-bound methodology - Najib Razak convicted and sentenced (Dec 2025) to an additional 15 years and an RM11.4bn ($2.8bn) fine for 1MDB-linked abuse of power and money laundering - JPMorgan paid $330m (Aug 2025) to settle all 1MDB-related claims; MACC recovered a further $8.57m in Jho Low-linked assets (Sept 2025), bringing cumulative 1MDB recovery to ~$7.4bn - SSM's 'Companies (Access to the Register and Information Relating to the Beneficial Ownership) Regulations 2025' took effect 10 Jan 2025, restricting BO-register access - OFAC designated Malaysia-registered PRO MISSION SDN BHD (Apr 2025) amid intensified scrutiny of Iran-oil transshipment through Malaysian waters and the Labuan hub - Securities Commission Malaysia proposed relaxed crypto token-listing rules and strengthened VASP custody/governance requirements (2025-26) - A Malaysian-ringgit-backed stablecoin was launched (Dec 2025) by a company linked to the Johor royal family - ASEAN Leaders' Declaration on Combating Money Laundering adopted (~Oct 2025), deepening regional AML cooperation commitments Brief ## Lead signal #### Lead Signal Bank Negara Malaysia closed out October 2026 with a cluster of enforcement and supervisory signalling that, taken together, reads as deliberate attention to the gatekeeper layer of the financial system rather than to its regulated core. The central bank imposed administrative monetary penalties of RM276,000 each on AmBank (M) Berhad and AmBank Islamic Berhad for breaches of anti-money laundering and counter-financing-of-terrorism reporting and customer due diligence obligations. BNM's own notices are explicit that the penalties, which were paid in full, do not themselves establish that money laundering occurred; the finding is one of control deficiency, not of proven illicit flow. The more structurally significant development sits alongside the bank penalties: Deputy Governor Dato' Marzunisham Omar told the DNFBP Compliance Conference on 22 October 2026 that criminal networks are exploiting legitimate business structures through corporate mule accounts and weak customer due diligence by lawyers, accountants, and company service providers, and announced that BNM's next National Risk Assessment, scheduled for 2027, will focus specifically on the designated non-financial business and profession sector. Read full brief #### Lead Signal Bank Negara Malaysia closed out October 2026 with a cluster of enforcement and supervisory signalling that, taken together, reads as deliberate attention to the gatekeeper layer of the financial system rather than to its regulated core. The central bank imposed administrative monetary penalties of RM276,000 each on AmBank (M) Berhad and AmBank Islamic Berhad for breaches of anti-money laundering and counter-financing-of-terrorism reporting and customer due diligence obligations. BNM's own notices are explicit that the penalties, which were paid in full, do not themselves establish that money laundering occurred; the finding is one of control deficiency, not of proven illicit flow. The more structurally significant development sits alongside the bank penalties: Deputy Governor Dato' Marzunisham Omar told the DNFBP Compliance Conference on 22 October 2026 that criminal networks are exploiting legitimate business structures through corporate mule accounts and weak customer due diligence by lawyers, accountants, and company service providers, and announced that BNM's next National Risk Assessment, scheduled for 2027, will focus specifically on the designated non-financial business and profession sector. The pairing matters. A probe into bank-level reporting discipline is routine supervisory maintenance; a scheduled, named deepening of risk assessment into the professional-enabler layer is an architectural signal about where Malaysia's authorities believe the exploitable seams now sit. #### Other Developments Smaller remittance and forex penalties round out the enforcement picture. TML Remittance Center and Smile Honesty Forex were fined RM113,100 and RM8,400 respectively for separate breaches of AML reporting and customer due diligence requirements. The underlying decisions were reportedly made in September 2026 but disclosed together with the bank penalties at the end of October, suggesting a consolidated disclosure cadence rather than a new wave of discrete incidents. Combined with the AmBank penalties, total disclosed administrative penalties this cycle reach approximately RM673,500 across four firms spanning banking and money-services businesses. BNM marked twenty-five years of its foundational AML/CFT instrument. Governor Abdul Rasheed Ghaffour used an October address to mark twenty-five years since the enactment of the Anti-Money Laundering, Anti-Terrorism Financing, Anti-Restricted Activity Financing and Proceeds of Unlawful Activities Act 2001, citing the December 2025 Mutual Evaluation outcome and Malaysia's subsequent move to the Financial Action Task Force's Regular Monitoring track as a positive milestone. The retrospective framing is itself a governance signal: it anchors this cycle's enforcement activity within a narrative of a maturing, internationally-validated regime rather than a regime under acute external pressure. Malaysia's standing international posture is unchanged. Malaysia has been a Financial Action Task Force member since February 2016 and remains on Regular Monitoring following its early-2026 Mutual Evaluation outcome, with no indication this cycle of movement toward the Increased Monitoring list. This is a carry-forward of standing status rather than a new development, but it frames the enforcement actions above as occurring against a backdrop of an internationally-compliant, rather than internationally-scrutinised, regime. #### Cross-Monitor Connections The DNFBP gatekeeper warning, with its explicit reference to corporate mule accounts and company service provider due diligence gaps, is the kind of structural finding that typically has beneficial-ownership and corporate-transparency dimensions, and readers tracking the adequacy of Malaysia's corporate registry and ownership-disclosure architecture elsewhere should treat this cycle's DNFBP signal as an upstream input to that separate analysis rather than a substitute for it. Similarly, the scheduled 2027 National Risk Assessment's professional-sector focus has plausible relevance to conflict-finance and trade-based laundering channels that route through company service providers, a connection worth monitoring as the assessment's scope firms up. #### Outlook The most consequential date ahead is 2027, when BNM's next National Risk Assessment is due to report, with its DNFBP-sector focus signalled now. Firms in the legal, accountancy, and company-secretarial sectors should expect the intervening period to carry continued supervisory messaging ahead of that assessment, consistent with BNM's pattern of flagging direction before formal rule or guidance changes land. On the enforcement side, the bundled disclosure of four penalty actions spanning banks and remittance businesses suggests BNM is maintaining a steady, if modest-value, drumbeat of control-deficiency actions rather than large single actions; whether this cadence continues or whether the DNFBP-sector warning translates into the first enforcement actions against lawyers, accountants, or company service providers themselves is the development to watch next. Malaysia's Regular Monitoring status under the Financial Action Task Force is expected to remain stable absent a material deterioration, and the twenty-five-year anniversary framing of the core AML statute suggests the authorities intend to project continuity and maturity rather than signal regime overhaul. Earlier periodic briefs (6) 4 Nov 2026 · fim-2026-11-04 #### Lead Signal Bank Negara Malaysia closed out October 2026 with a cluster of enforcement and supervisory signalling that, taken together, reads as deliberate attention to the gatekeeper layer of the financial system rather than to its regulated core. The central bank imposed administrative monetary penalties of RM276,000 each on AmBank (M) Berhad and AmBank Islamic Berhad for breaches of anti-money laundering and counter-financing-of-terrorism reporting and customer due diligence obligations. BNM's own notices are explicit that the penalties, which were paid in full, do not themselves establish that money laundering occurred; the finding is one of control deficiency, not of proven illicit flow. The more structurally significant development sits alongside the bank penalties: Deputy Governor Dato' Marzunisham Omar told the DNFBP Compliance Conference on 22 October 2026 that criminal networks are exploiting legitimate business structures through corporate mule accounts and weak customer due diligence by lawyers, accountants, and company service providers, and announced that BNM's next National Risk Assessment, scheduled for 2027, will focus specifically on the designated non-financial business and profession sector. The pairing matters. A probe into bank-level reporting discipline is routine supervisory maintenance; a scheduled, named deepening of risk assessment into the professional-enabler layer is an architectural signal about where Malaysia's authorities believe the exploitable seams now sit. #### Other Developments Smaller remittance and forex penalties round out the enforcement picture. TML Remittance Center and Smile Honesty Forex were fined RM113,100 and RM8,400 respectively for separate breaches of AML reporting and customer due diligence requirements. The underlying decisions were reportedly made in September 2026 but disclosed together with the bank penalties at the end of October, suggesting a consolidated disclosure cadence rather than a new wave of discrete incidents. Combined with the AmBank penalties, total disclosed administrative penalties reach approximately RM673,500 across four firms spanning banking and money-services businesses. BNM marked twenty-five years of its foundational AML/CFT instrument. Governor Abdul Rasheed Ghaffour used an October address to mark twenty-five years since the enactment of the Anti-Money Laundering, Anti-Terrorism Financing, Anti-Restricted Activity Financing and Proceeds of Unlawful Activities Act 2001, citing the December 2025 Mutual Evaluation outcome and Malaysia's subsequent move to the Financial Action Task Force's Regular Monitoring track as a positive milestone. The retrospective framing is itself a governance signal: it anchors the enforcement activity within a narrative of a maturing, internationally-validated regime rather than a regime under acute external pressure. Malaysia's standing international posture is unchanged. Malaysia has been a Financial Action Task Force member since February 2016 and remains on Regular Monitoring following its early-2026 Mutual Evaluation outcome, with no indication of movement toward the Increased Monitoring list. This is a carry-forward of standing status rather than a new development, but it frames the enforcement actions above as occurring against a backdrop of an internationally-compliant, rather than internationally-scrutinised, regime. #### Cross-Monitor Connections The DNFBP gatekeeper warning, with its explicit reference to corporate mule accounts and company service provider due diligence gaps, is the kind of structural finding that typically has beneficial-ownership and corporate-transparency dimensions, and readers tracking the adequacy of Malaysia's corporate registry and ownership-disclosure architecture elsewhere should treat the DNFBP signal as an upstream input to that separate analysis rather than a substitute for it. Similarly, the scheduled 2027 National Risk Assessment's professional-sector focus has plausible relevance to conflict-finance and trade-based laundering channels that route through company service providers, a connection worth monitoring as the assessment's scope firms up. #### Outlook The most consequential date ahead is 2027, when BNM's next National Risk Assessment is due to report, with its DNFBP-sector focus signalled now. Firms in the legal, accountancy, and company-secretarial sectors should expect the intervening period to carry continued supervisory messaging ahead of that assessment, consistent with BNM's pattern of flagging direction before formal rule or guidance changes land. On the enforcement side, the bundled disclosure of four penalty actions spanning banks and remittance businesses suggests BNM is maintaining a steady, if modest-value, drumbeat of control-deficiency actions rather than large single actions; whether this cadence continues or whether the DNFBP-sector warning translates into the first enforcement actions against lawyers, accountants, or company service providers themselves is the development to watch next. Malaysia's Regular Monitoring status under the Financial Action Task Force is expected to remain stable absent a material deterioration, and the twenty-five-year anniversary framing of the core AML statute suggests the authorities intend to project continuity and maturity rather than signal regime overhaul. 3 Nov 2026 · fim-2026-11-03 #### Lead Signal Bank Negara Malaysia disclosed combined administrative monetary penalties of RM673,500 against four institutions - AmBank (RM276,000), AmBank Islamic (RM276,000), TML Remittance Center (RM113,100) and Smile Honesty Forex (RM8,400) - for anti-money laundering and counter-financing-of-terrorism reporting and customer due diligence breaches. The penalties, announced 28 October 2026 against underlying decisions dated September 2026, span both large banking groups and smaller remittance and money-changing operators, indicating that supervisory attention reached across firm size and sector rather than concentrating on a single institution type. Bank Negara Malaysia's own notices state the penalties were paid in full and do not themselves establish that money laundering occurred, a distinction that matters for how the finding should be read: this is a compliance-control enforcement action, not a finding of underlying criminal conduct. The enforcement action sits alongside a retrospective marking twenty-five years since Malaysia enacted its Anti-Money Laundering, Anti-Terrorism Financing, Anti-Restricted Activity Financing and Proceeds of Unlawful Activities Act 2001, in which the Bank Negara Malaysia Governor cited the December 2025 Mutual Evaluation outcome and Malaysia's subsequent move to FATF Regular Monitoring status as a milestone. Taken together, the enforcement and the retrospective framing point toward a regime that regards itself as structurally mature but is simultaneously tightening operational supervision of the institutions sitting under that structure. #### Other Developments Gatekeeper-sector warning and a 2027 risk-assessment commitment. Bank Negara Malaysia's Deputy Governor told the DNFBP Compliance Conference on 22 October 2026 that criminal networks are exploiting legitimate business structures through corporate mule accounts and gaps in professional due diligence, and that the central bank will run its next National Risk Assessment in 2027 with a deepened focus on designated non-financial businesses and professions. This is reported through secondary press coverage rather than Bank Negara Malaysia's own speech transcript, so the exact scope and timing detail of the 2027 assessment is not yet independently confirmed, but the direction of travel - toward gatekeeper accountability for lawyers, accountants, company-service providers and similar professions - is consistent with the enforcement pattern seen in the penalties against remittance and forex operators. FATF standing unchanged. Malaysia's FATF membership, held since February 2016, and its Regular Monitoring status following the December 2025 Mutual Evaluation remain unchanged. No new grey-list or increased-monitoring action applies to Malaysia at this time. #### Cross-Monitor Connections The gatekeeper-sector warning touches the same institutional terrain that payment-infrastructure and remittance-corridor developments occupy elsewhere in Malaysia's financial system: money-changing and remittance operators named in the enforcement action operate in the same corridor space that cross-border payment connectivity initiatives are expanding into. A regime tightening its due-diligence expectations for remittance operators while that corridor activity itself expands is a pairing worth holding in view, even though the two developments were not reported as linked. The conflict-finance and sanctions-evasion typologies that often attach to remittance and money-changing channels were checked and returned no Malaysia-specific signal, so no cross-reference is drawn there at this time. #### Outlook The near-term marker to watch is the scope and timing of the 2027 National Risk Assessment as Bank Negara Malaysia's own materials become available; the current picture rests on secondary reporting of a named official's remarks rather than the primary assessment document. Separately, whether the pattern of enforcement against remittance and money-changing operators continues or widens to other designated non-financial businesses and professions will indicate whether the 22 October remarks reflect a sustained supervisory programme or an isolated statement. As scheduled, the assessment itself would not land until 2027, so this remains a horizon item rather than an immediate development. 25 Oct 2026 · fim-2026-10-25 #### Lead Signal Bank Negara Malaysia's Deputy Governor used a 22 October 2026 address to the DNFBP Compliance Conference to warn that criminal networks are exploiting legitimate business structures, naming company secretaries and other designated non-financial businesses and professions as the point of entry for corporate mule-account schemes. The remarks cited two unnamed enforcement actions as evidence of the exposure rather than describing new legal obligations, and no primary Bank Negara Malaysia or Labuan Financial Services Authority notice corroborating either matter has yet surfaced. The signal is therefore read as a supervisory posture statement rather than a confirmed enforcement record, and is treated accordingly until a primary source attaches. The first matter described is a joint Bank Negara Malaysia and Companies Commission of Malaysia action against an unnamed company secretary for failing to file suspicious transaction reports connected to a suspected international scam syndicate involving foreign nationals. The second is a joint Bank Negara Malaysia and Labuan Financial Services Authority action against an unnamed Labuan investment bank over material customer due diligence deficiencies and delayed suspicious transaction report filing. Neither disclosed a penalty amount, a named party, or an instrument reference, which keeps both findings at a probable rather than confirmed confidence tier pending primary-source confirmation. #### Other Developments Follow-up status under the 2025 mutual evaluation remains the structural anchor for the jurisdiction. Malaysia sits in Regular Follow-Up status following its 2025 FATF and Asia/Pacific Group mutual evaluation, assessed as compliant on 24 of 40 Recommendations and largely compliant on a further 16, and remains off both the FATF grey list and black list. This is the highest category available under the mutual evaluation framework and provides the backdrop against which the gatekeeper warning should be read: a jurisdiction with a well-regarded framework identifying a persistent enforcement gap at the professional-enabler layer, rather than a jurisdiction newly flagged for systemic weakness. The beneficial ownership transparency regime shows no movement. The Companies Commission of Malaysia's Guideline on Beneficial Ownership of Legal Persons, revised with effect from 10 January 2025, remains the operative instrument, and no further amendment has been located. The guideline's continuity, alongside the absence of any newly identified gap in corporate transparency reporting, keeps this module stable. #### Cross-Monitor Connections The gatekeeper warning touching company secretaries and corporate service providers overlaps with jurisdictions that monitor crypto, digital assets and financial innovation activity, insofar as corporate mule structures are a common vehicle for layering proceeds that may later intersect with payment or token-based rails, although no such nexus was asserted by Bank Negara Malaysia in the reported remarks. Equally, the beneficial ownership guideline's continuity is a standing reference point for any desk assessing the integrity of Malaysian corporate vehicles used in cross-border payment or digital-asset structures; the absence of amendment is itself the relevant fact for that comparison, not an indication that no comparison is warranted. #### Outlook The near-term question is whether Bank Negara Malaysia or the Labuan Financial Services Authority will publish primary confirmation of either enforcement matter referenced in the Deputy Governor's remarks. Until that occurs, the enabler-jurisdiction signal remains probable rather than confirmed, and the entities, penalties and instruments involved remain undisclosed. Malaysia's Regular Follow-Up status and unchanged beneficial ownership regime suggest the underlying architecture is not under acute strain; the signal to watch is whether the professional-enabler gap identified in the speech becomes a published, named enforcement record, which would upgrade both the confidence tier and the materiality of the finding. 11 Oct 2026 · fim-2026-10-11 #### Lead Signal Bank Negara Malaysia has disclosed three separate administrative monetary penalties against regulated entities in the trailing reporting period, covering both customer due diligence lapses and targeted financial sanctions screening failures. Wawasan Ilham (M) Sdn. Bhd. was fined RM22,000 for CDD failures under section 75(2)(b) of the Money Services Business Act 2011. Standard Chartered Bank Malaysia Berhad and Standard Chartered Saadiq Berhad together absorbed a combined RM264,000 penalty for targeted financial sanctions screening failures traced to an outdated sanctions database, under section 58(1)(a) of the Islamic Financial Services Act. AEON Credit Service (M) Berhad received the largest of the three, RM520,000, for a sanctions-screening compliance failure under section 48(1)(a) of the Financial Services Act. Taken together, these three confirmed enforcement actions describe routine supervisory cadence rather than a structural shift: BNM is applying its existing AML/TFS toolkit consistently across a bank, a money-services business, and a non-bank credit provider, with penalty quanta scaled to the severity of the underlying control failure. The architecture-over-incident reading is that targeted financial sanctions screening remains the dominant enforcement theme for Malaysia this period, appearing in two of the three disclosed actions. An outdated sanctions database at a major international bank's Malaysian subsidiary is a control-maintenance failure, not a willful evasion finding, but it signals that list-update discipline is an area supervisors are actively testing across firm types, including Islamic finance subsidiaries. #### Other Developments Malaysia's FATF/APG Mutual Evaluation standing remains the baseline backdrop. The Mutual Evaluation Report, adopted in October 2025 and published 11 December 2025, found Malaysia compliant on 24 of the 40 FATF Recommendations and largely compliant on 16, placing the country in Regular Follow-Up status. This baseline is unchanged this period and continues to frame Malaysia's AML/CFT regime as broadly aligned with FATF standards, with the country required to report back on progress against a three-year roadmap of Key Recommended Actions. A cross-border digital-asset cooperation workstream between Bank Negara Malaysia and the Hong Kong Monetary Authority was announced on 7 October 2026. The two authorities have agreed to deepen cooperation exploring tokenisation and cross-border stablecoin use cases. This finding carries a Probable confidence rating rather than Confirmed: only trade-press coverage was located this period, with no primary BNM or HKMA notice identified. The announcement is policy-stage only and does not itself create a new supervisory obligation. #### Cross-Monitor Connections The BNM-HKMA cooperation workstream sits at the intersection of financial-integrity supervision and payments-system policy: a cross-border stablecoin use case, once operational, would carry both a sanctions/AML exposure dimension (which counterparties and corridors are enabled) and a payments-infrastructure dimension (settlement and interoperability design). Where this workstream progresses from policy exploration to a concrete framework, it would warrant a corresponding look at how World Payments Monitor tracks stablecoin infrastructure development in Malaysia and Hong Kong. No conflict-finance, enabler-jurisdiction, or state-capture signal was identified this period. #### Outlook The near-term picture for Malaysia is one of continued, incremental AML/TFS supervisory enforcement consistent with Regular Follow-Up status under the FATF/APG Mutual Evaluation Report, with sanctions-screening control quality the recurring theme across the three disclosed actions. The more significant development to watch is whether the BNM-HKMA cross-border stablecoin cooperation workstream progresses from a policy-exploration announcement to a documented framework with primary-source confirmation; as scheduled, that would be the point at which this strand of activity could generate claims with Confirmed-tier sourcing and a materially higher financial-integrity salience for Malaysia's digital-asset corridor exposure. 28 Sep 2026 · fim-2026-09-28 #### Lead Signal Malaysia's fifth-round FATF/APG Mutual Evaluation Report has placed the jurisdiction in Regular Follow-Up status, the strongest post-assessment category available, following an on-site visit in February 2025 and publication in December 2025. Labuan International Business and Financial Centre's supervisory analytics, including network analysis identifying nested beneficial-ownership relationships, were specifically credited in the assessment. This result lands against a backdrop of simultaneous tightening across Malaysia's digital-asset and payments-technology oversight, suggesting a coordinated structural improvement rather than an isolated compliance win. #### Other Developments Beneficial ownership access remains contested even as the underlying register matures. The Companies (Access to Register and Information Relating to Beneficial Ownership) Regulations 2025, effective 10 January 2025, restrict public and third-party access to beneficial-ownership data collected under Division 8A of the Companies Act 2016, administered with Bank Negara Malaysia as competent authority under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001. Transparency International Malaysia has publicly urged reconsideration of these access restrictions, framing them as a step backward for corporate transparency even as the e-BOS register itself continues to mature operationally. Digital-asset exchange oversight tightened materially in the same window. The Securities Commission Malaysia issued revised Guidelines on Recognized Markets, effective 20 May 2026, raising financial, shareholding and governance requirements for digital-asset-exchange operators and adding them to the Financial Markets Ombudsman Service. The revision was accompanied by administrative action against four digital-asset exchanges operating without registration, plus advertising restrictions from 14 April 2026. This combination of raised standards and active enforcement against unregistered operators signals a securities regulator willing to pair rulemaking with immediate consequence. Payments-sector technology risk now sits under a single consolidated framework. Bank Negara Malaysia issued its Technology Requirements Policy Document for payment-services regulatees on 12 March 2026, consolidating previously dispersed technology-risk requirements into one policy instrument covering payment-service providers, e-money issuers, money-services businesses and virtual-asset service providers. A 90-day gap-analysis deadline applies, with full compliance due 12 March 2027. The full text of the policy document was identified by URL but not parsed in detail this cycle, which caps confidence on its granular provisions at Probable pending fuller review. Cambodia's enabler-jurisdiction exposure intensified even as enforcement scaled up. Cambodian authorities have revoked 18 and suspended 9 of 27 casino licences linked to online scam operations, forwarding 446 cases involving 3,927 accused persons of 29 nationalities to court as of September 2026. Notably, the National Bank of Cambodia's own Governor, Chea Serey, has publicly warned of FATF re-listing risk, an unusual instance of a regulator acknowledging its own jurisdiction's exposure even as it conducts an active crackdown. #### Cross-Monitor Connections The Cambodia casino/scam-centre enforcement campaign connects directly to broader Southeast Asian financial-crime architecture that other monitors track from the platform and content-distribution angle rather than the AML angle taken here; the underlying laundering typology is the shared thread. Malaysia's digital-asset licensing tightening under the Securities Commission similarly intersects with jurisdictions tracking crypto market structure from a payments and consumer-facing perspective, though this brief treats it strictly as an AML/regulatory-architecture development rather than a market-structure one. The beneficial-ownership access-restriction tension identified by Transparency International Malaysia is a corporate-transparency architecture question with relevance beyond financial crime narrowly defined, wherever platform or market-conduct oversight of the same corporate entities is assessed. #### Outlook Malaysia's trajectory across beneficial ownership, digital assets, payments technology and its FATF standing points toward a jurisdiction consolidating its position at the stronger end of the regional AML/CFT spectrum, though the beneficial-ownership access question remains an open point of domestic contestation that could resurface as a standing criticism if left unaddressed. Cambodia's position is less settled: the scale of enforcement action has not resolved the underlying enabler-jurisdiction risk, and the NBC Governor's own public acknowledgment of re-listing exposure suggests the crackdown itself may be, in part, a response to anticipated FATF scrutiny rather than a sign the risk has already been contained. Watch for whether Bank Negara Malaysia's Technology Requirements Policy Document, once its full text is reviewed, introduces additional obligations not yet captured at Probable confidence, and whether Cambodia's court referrals convert into completed prosecutions before any FATF re-listing decision. 5 Sep 2026 · fim-2026-08-21 #### Lead Signal Malaysia's anti-money-laundering architecture crossed two structural thresholds this cycle. The Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities (Amendment) Act 2025 (Act A1761) entered into force on 1 March 2026, tightening politically-exposed-person and high-risk-jurisdiction oversight and sharpening compliance-officer liability; Bank Negara Malaysia's own Annual Report frames the amendment as bringing greater alignment with FATF standards. Almost simultaneously, Malaysia's December-2025 Mutual Evaluation Report, following a February-2025 on-site visit, resulted in Regular Follow-Up status, the highest FATF category, anchored to a three-year Key Recommended Actions roadmap covering international cooperation, sanctions-framework strengthening, and money-laundering prosecution and conviction rates. High-confidence, primary-sourced developments of this kind, an entered-into-force statutory amendment and an internationally-assessed follow-up status upgrade in the same reporting window, constitute an architecture-level signal rather than an incident, and should be read as the dominant fact of this cycle. Bank Negara Malaysia remains the competent authority under the Act throughout this transition. #### Other Developments Targeted-financial-sanctions screening failures at Zurich Malaysia. Bank Negara Malaysia imposed administrative monetary penalties of RM1,040,000 on Zurich General Insurance Malaysia Berhad and RM520,000 on Zurich General Takaful Malaysia Berhad for inadequate targeted financial sanctions screening; one of the two entities failed to freeze funds and report a confirmed sanctions match. The assessed reading is that this reflects a domestic implementation gap in screening procedure rather than a new designation event or an evasion scheme, though BNM's zero-tolerance posture on this class of failure, given its FATF-linked implications, is itself notable. Corporate-secretarial DNFBPs compounded for STR and EDD failures. Bank Negara Malaysia imposed compounds of RM46,000 on Boardroom Corporate Services and RM8,625 on Ilham Secretarial Services for suspicious-transaction-report and enhanced-due-diligence failures, alongside penalties reported against MBSB Bank and SME Bank in the same enforcement wave. Corporate-secretarial designated non-financial businesses and professions recur as a nominee- and company-formation-adjacent enabler-layer weak point in Malaysia's AML perimeter, a pattern consistent across enforcement cycles rather than an isolated event. Malaysian Bar reminds law firms of AMLA obligations. The Malaysian Bar issued Circular No. 156/2026, reminding advocates, solicitors, and law firms that they remain reporting institutions under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act following the 2025 Amendment Act's entry into force. This is a professional body's active response to a strengthened statutory obligation rather than a new duty in itself, and signals continued institutional attention to the legal-sector enabler channel. #### Cross-Monitor Connections The regional scam-centre economy identified by OHCHR names Malaysia among countries implicated as a source or transit point for trafficked individuals held in scam-compound operations alongside Cambodia, Myanmar, Laos, and the Philippines. This is architecture-level regional context rather than a confirmed Malaysia-specific financing-corridor finding; a direct financial-flow linkage between Malaysian banking corridors and this conflict-finance-adjacent economy was not independently substantiated this cycle, and is logged as a coverage gap rather than asserted as fact. Readers tracking the World Payments Monitor's corridor and licensing coverage of Malaysia, and the crypto monitor's coverage of Securities-Commission-regulated digital asset exchanges, should note that AML-obligation scope for digital asset reporting institutions remains unchanged despite the broader licensing liberalisation those monitors are tracking independently; digital asset exchanges continue to sit as full-scope AMLA reporting institutions subject to customer due diligence, transaction monitoring, targeted financial sanctions screening, and suspicious-transaction-report obligations. #### Outlook Malaysia's three-year FATF/APG Key Recommended Actions roadmap will be the standing reference point against which future cycles measure progress on international cooperation, sanctions-framework strengthening, and prosecution and conviction rates; the gap assessment underlying that roadmap explicitly identifies continuing difficulty translating money-laundering investigations into prosecutions and convictions as the central risk to monitor. Enforcement activity for now continues at a routine administrative-penalty cadence rather than signalling systemic breakdown, but the recurrence of corporate-secretarial DNFBP failures suggests that gate remains a persistent, not episodic, weak point worth sustained attention in coming cycles. Domain intelligence (D1–D8) #### Sanctions Architecture and Evasion Malaysia presents a structural sanctions-architecture finding that is worsening even as the jurisdiction is formally rated compliant or largely compliant across all 40 FATF Recommendations in its December 2025 Mutual Evaluation Report, the first assessment conducted under the new time-bound methodology alongside Belgium. Malaysian territorial waters and the Labuan offshore financial hub function as an active transit and payment-layering node for Iranian oil sanctions evasion. Ship-to-ship transfers off Malaysian waters relabel Iranian crude as Malaysian blend via falsified documentation, AIS transponders are disabled before transfer, and a parallel Labuan-routed United States dollar payment channel moves funds to Iranian state oil interests via shell firms and shadow-banking intermediaries. This is a multi-layered, persistent architecture rather than a single evasive transaction, corroborated across a tier-1 regulatory advisory and two independent tier-2 investigative sources. Continue reading The architecture has generated repeated Office of Foreign Assets Control secondary designations: an April 2025 designation of Malaysia-registered PRO MISSION SDN BHD under Executive Order 13902, concurrent with an updated Iran shipping and maritime evasion advisory, and an August 2025 action against a Chinese oil-terminal operator linked to the Labuan payment network. Neither the European Union Council nor United Kingdom Office of Financial Sanctions Implementation has designated equivalent Malaysia or Labuan-linked intermediaries, reflecting a narrower, largely nuclear-proliferation-linked EU and UK Iran sanctions scope against OFAC's broader extraterritorial secondary-sanctions reach into Southeast Asian transshipment hubs. This is a jurisdiction-agnostic divergence finding: it documents what each regime's architecture enables or fails to reach, not a judgment on which regime is correct. The Mutual Evaluation Report separately identified counter-terrorist-financing and counter-proliferation-financing deficiencies bearing on this same architecture: continuing concerns regarding the dissuasiveness of sanctions imposed for terrorist-financing violations, and a finding that designated non-financial businesses and professions focus more on positive-match screening than on actively freezing assets held by proxies of designated parties. Weak dissuasiveness and inconsistent asset-freezing practice among non-bank gatekeepers create residual channels through which the same architecture, or comparable proliferation-financing structures, could continue to operate with limited consequence. Malaysia remains absent from both the FATF grey list and black list as of the 19 June 2026 plenary statement, governed instead by a three-year Key Recommended Actions roadmap, and separately remains absent from both the EU High-Risk Third-Country list following its December 2025 update and the UK's own narrowed High-Risk Third-Country list. #### Outlook Malaysia's first FATF and Asia Pacific Group on Money Laundering Key Recommended Actions progress report is due no earlier than 1 October 2027, and is expected to cover strengthening of the sanctions framework specifically, alongside international cooperation and prosecution-conversion rates. Until that reporting cycle, the analytical watch point is whether OFAC secondary designations continue in the absence of EU or UK parallel action, sustaining the current regime-divergence posture, and whether the Labuan payment-layering channel identified this cycle is disrupted or migrates to alternative offshore structures. Judgment: No Malaysia-specific sanctions development found this cycle. Uncertain #### Beneficial Ownership and Corporate Transparency Malaysia is a non-EU, non-EEA third country and therefore sits entirely outside the AMLR, 6AMLD and AMLA supervisory and transposition perimeter; the durable structural backdrop against which Malaysia's own beneficial-ownership developments are read is the EU AML Package's three-instrument architecture. Globally, the AML Regulation, known as the AMLR (Regulation (EU) 2024/1624), is directly applicable across EU Member States; the sixth AML Directive, known as 6AMLD, requires transposition per Member State; and the AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority, shifting supervision of the highest-risk cross-border obliged entities from purely national authorities toward a hybrid EU-level direct and indirect supervisory regime. For Malaysia, this architecture is contextual rather than directly binding: its sole point of contact with the EU AML Package is the High-Risk Third-Country listing mechanism, from which it remains absent following the December 2025 update. Continue reading Malaysia's own, directly relevant beneficial-ownership developments this cycle centre on two threads. The first is a continuing decade-long unwind of the 1MDB sovereign wealth fund embezzlement architecture, in which approximately 4.5 billion United States dollars was embezzled via shell companies, nominee structures and offshore trusts in the British Virgin Islands, Seychelles and Luxembourg, layered through international private banks and law-firm escrow accounts. This cycle recorded the Kuala Lumpur High Court's conviction and sentencing of former Prime Minister Najib Razak to an additional 15 years imprisonment and an 11.4 billion ringgit fine, formally establishing that he used financier Jho Low as his agent; JPMorgan Chase and Co.'s 330 million United States dollar settlement of all 1MDB-related claims without admission of liability; and a further 8.57 million United States dollar recovery of Jho Low-linked assets, bringing cumulative recovery to approximately 7.4 billion United States dollars. The second thread is domestic corporate-transparency policy: the Companies (Access to the Register and Information Relating to Beneficial Ownership) Regulations 2025, effective 10 January 2025, restrict Companies Commission of Malaysia beneficial-ownership register disclosure to specified competent persons and groups rather than the public, sustaining non-public, unverified beneficial-ownership data of the kind that constrained third-party and cross-border due diligence in the original 1MDB scheme. The durability of the underlying opacity template, not any single prosecution or settlement, is the structural finding. A decade of recovery activity has not altered the professional-enabler jurisdictions or layering techniques that made the scheme possible; it has only continued to trace and claw back capital dispersed through them. #### Outlook Continuing 1MDB-linked recoveries and prosecutions are expected in subsequent cycles as offshore trust and nominee structures are progressively traced, though the pace is likely to slow given the decade-long tail already observed. Whether Malaysia's non-public beneficial-ownership register regime evolves toward wider competent-authority or public access, and whether SSM's verification mandate and capacity for submitted data is clarified, remain open watch points absent this cycle's evidence base. Judgment: No material Malaysia-specific BO-registry development found this cycle. Uncertain #### Enabler Jurisdictions The enabler-jurisdiction lens on Malaysia this cycle centres on the professional and business-services side of the economy rather than on cross-border shell structures. Bank Negara Malaysia's Deputy Governor, speaking at the DNFBP Compliance Conference on 22 October 2026, told the audience that criminal networks exploit legitimate business structures through corporate mule accounts and weaknesses in professional due diligence. This framing places the designated non-financial businesses and professions sector - company-service providers, accountants, and similar gatekeepers - squarely at the centre of how illicit funds can be layered through otherwise legitimate corporate vehicles registered in Malaysia. The remarks were accompanied by an announcement that Bank Negara Malaysia will run its next National Risk Assessment in 2027 with a deepened focus on this sector. Continue reading The significance of this development is structural rather than incident-specific. A regulator naming corporate mule accounts and weak customer due diligence among professional gatekeepers as a persistent vulnerability is flagging an architecture problem - how legitimate incorporation and professional-services infrastructure can be used as a conduit - rather than reporting a single enforcement case. This sits in contrast to the AML/CTF enforcement actions against banks and remittance operators tracked elsewhere this cycle, which addressed firm-level control failures at regulated financial institutions. The DNFBP remarks instead point toward exposure sitting with professional intermediaries who are not themselves financial institutions but who facilitate the corporate structures through which funds can move. This reporting reaches the record through secondary press coverage of the Deputy Governor's remarks rather than through Bank Negara Malaysia's own published speech transcript, so the precise scope of what the 2027 National Risk Assessment will cover, and how its DNFBP focus will be operationalised, is not yet confirmed from a primary document. What is established is the direction: Malaysia's supervisory authority is signalling intent to extend risk-assessment rigour into the gatekeeper sector on a defined forward timeline, rather than leaving that sector's exposure unassessed between the standing national risk-assessment cycles. #### Outlook The indicator to track is whether Bank Negara Malaysia's own materials - a published speech text, a consultation paper, or terms of reference for the 2027 assessment - become available, which would convert the current secondary-sourced signal into a primary-sourced one. Separately, any enforcement action naming a company-service provider, trust and corporate-services business, or accounting firm specifically (as distinct from the banks and remittance operators penalised this cycle) would confirm that the gatekeeper-sector warning is translating into supervisory practice rather than remaining at the level of a conference remark. As scheduled, the National Risk Assessment itself falls in 2027, so no finding from it is yet available to assess. Judgment: BNM publicly flagged DNFBP gatekeeper risk (corporate mule accounts, weak CDD by lawyers, accountants, company service providers) and scheduled a dedicated 2027 National Risk Assessment for the sector. Probable Judgment: No Malaysia-specific conflict-finance development found this cycle. Uncertain #### Crypto, Digital Assets, and Financial Innovation Malaysia's digital-asset regulatory environment is the directly relevant subject matter for this domain, ahead of any global structural backdrop. The Securities Commission Malaysia regulates digital assets as securities and has proposed relaxed token-listing rules devolving listing decisions to licensed exchanges, subject to liquidity, security-audit and FATF-compliant VASP criteria, alongside strengthened custody, governance and financial-resilience requirements, with implementation expected through 2026. This reform is dual-use in character: relaxed listing criteria could expand the licensed-VASP risk perimeter even as the accompanying custody and governance rules tighten controls, and the two effects will only be assessable once the reform is finalised and operating rather than merely proposed. Continue reading Against this unsettled regulatory backdrop, a company linked to the Johor royal family launched a Malaysian ringgit-backed stablecoin in December 2025, raising a beneficial-ownership and politically exposed person-adjacent scrutiny question for Malaysia's emerging stablecoin space. Coverage of this issuer is thin and lacks a direct primary or investigative source specific to its beneficial-ownership and control posture; this is flagged for further monitoring rather than asserted as illicit, and no regulatory or corporate-registry source has yet confirmed the issuer's AML control posture. The juxtaposition is nonetheless structurally significant: a PEP-adjacent digital-asset issuance emerging in a supervisory environment where custody and governance rules for exchanges are still being finalised illustrates how Malaysia's digital-asset risk perimeter is expanding ahead of confirmed guardrails, echoing the beneficial-ownership opacity pattern already well established in Malaysia's corporate-transparency history. Globally, broader crypto-policy developments such as MiCA in the European Union and the FATF's ongoing virtual-asset standards work form contextual backdrop to this Malaysia-specific picture, but are not themselves the subject of this cycle's Malaysia findings. #### Outlook The Securities Commission's listing and custody reform is expected to finalise during 2026; whether the strengthened custody and governance requirements are operational before or after the relaxed listing criteria take effect will determine the net direction of Malaysia's licensed-VASP risk perimeter over the coming cycles. Independent verification of the Johor-linked stablecoin issuer's beneficial-ownership and control structure remains an open evidentiary gap that would materially sharpen or dissolve the current PEP-adjacent scrutiny question. Judgment: No new Malaysia-specific crypto/AML development found this cycle; the SC's enhanced DAX guidelines remain the standing framework. Uncertain #### Compliance Technology and Active Defence Bank Negara Malaysia published a consolidated Technology Requirements Policy Document for payment-services regulatees on 12 March 2026, bringing together previously dispersed technology-risk requirements into a single tiered policy instrument. The document applies to a broad regulated population spanning payment-service providers, e-money issuers, money-services businesses and virtual-asset service providers, with a 90-day gap-analysis deadline and full compliance required by 12 March 2027. Consolidation of this kind is itself a structurally significant development, since a single coherent technology-risk framework applied proportionately across a tiered regulated population is a stronger compliance-technology architecture than a patchwork of sector-specific requirements accumulated over time. Continue reading A caveat on confidence is warranted: the policy document's full text was identified by URL this cycle but was not parsed in detail, capping assessment confidence at Probable pending closer review of its granular provisions. What can be said with more confidence is the structural fact of consolidation itself and the compliance timeline it establishes, both of which are corroborated by secondary Malaysian financial press coverage alongside the primary Bank Negara Malaysia publication. #### Outlook The 12 March 2027 full-compliance deadline is the key date to track, together with whatever supervisory guidance Bank Negara Malaysia issues during the intervening gap-analysis period. Once the document's granular provisions are parsed in full, confidence on its specific obligations for virtual-asset service providers in particular should be revisited, given the elevated financial-integrity relevance of technology-risk standards applied to that population. Judgment: No RegTech-specific development surfaced this cycle for Malaysia; D6 is exempt from the substantive-finding floor. Uncertain #### AML/CTF Regime Bank Negara Malaysia's enforcement record this cycle shows combined administrative monetary penalties of RM673,500 against four institutions for anti-money laundering and counter-financing-of-terrorism reporting and customer due diligence breaches: AmBank and AmBank Islamic were each fined RM276,000, TML Remittance Center was fined RM113,100, and Smile Honesty Forex was fined RM8,400. The penalties were announced on 28 October 2026, with the underlying decisions dated September 2026. Bank Negara Malaysia's own notices are explicit that the penalties were paid in full and do not themselves establish that money laundering occurred - the action addresses control and reporting deficiencies, not a finding of underlying criminal conduct by the penalised institutions. Continue reading The spread of the penalties across both large banking groups and smaller remittance and currency-exchange operators is itself a signal about how Malaysia's AML/CTF regime is being applied this cycle: supervisory attention is not concentrated on a single tier of the financial system. A universal bank and its Islamic banking subsidiary sit alongside a remittance centre and a money-changing business in the same enforcement announcement, indicating that customer due diligence and reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing, Anti-Restricted Activity Financing and Proceeds of Unlawful Activities Act 2001 are being tested and enforced across firm types rather than reserved for systemically significant institutions alone. This enforcement activity coincides with a retrospective moment for the regime itself. Marking twenty-five years since the 2001 Act's enactment, Bank Negara Malaysia's Governor cited the December 2025 Mutual Evaluation outcome and Malaysia's consequent move to FATF Regular Monitoring status - a step up from the more intensive monitoring category - as evidence of a maturing framework. Malaysia has held FATF membership since February 2016, and that status is unchanged this cycle; no grey-list or increased-monitoring action currently applies. Read together with the enforcement actions, the anniversary framing suggests a regime that regards its statutory architecture as settled and is now directing supervisory energy toward operational enforcement of that architecture's reporting and due-diligence requirements, extending next toward the designated non-financial businesses and professions sector flagged separately this cycle. #### Outlook The near-term question for the regime is whether the pattern of enforcement against institutions of varying size and sector continues at a similar cadence, which would indicate a sustained supervisory programme rather than an isolated clustering of cases resolved around the same period. The announced 2027 National Risk Assessment, with its stated focus on designated non-financial businesses and professions, is the next structural marker to watch; as scheduled, no findings from that assessment are available yet. Malaysia's FATF Regular Monitoring status and the trajectory toward any future review of that status remain the standing structural indicator against which this cycle's enforcement activity should be read. Judgment: BNM marked 25 years since AMLA 2001's enactment, citing the December 2025 Mutual Evaluation and subsequent move to FATF Regular Monitoring as a positive milestone; the standing AML/CTF regime remains unchanged in substance this cycle. Probable Judgment: No commercial event in the financial-integrity vendor/regtech space found this cycle for Malaysia. Uncertain Regulatory horizon Proposed 2027 · ±year ### BNM National Risk Assessment (DNFBP sectors) scheduled for 2027 BNM will run its next National Risk Assessment cycle in 2027 specifically deepening DNFBP-sector money-laundering and terrorism-financing risk assessment. [Source](https://www.malaymail.com/news/malaysia/2026/10/23/tighter-rules-for-malaysian-dealers-agents-and-accountants-bnm-to-review-money-laundering-risks-next-year/240302) Proposed 2027 · ±year ### BNM DNFBP-focused National Risk Assessment BNM will run its next National Risk Assessment cycle in 2027 specifically deepening DNFBP-sector ML/TF risk assessment. [Bank Negara Malaysia Source](https://www.malaymail.com/news/malaysia/2026/10/23/tighter-rules-for-malaysian-dealers-agents-and-accountants-bnm-to-review-money-laundering-risks-next-year/240302) Adopted 2028-Q4 · ±multi_year ### FATF/APG Malaysia MER 2025 - 3-year roadmap of Key Recommended Actions Malaysia must report back to FATF/APG on progress against the roadmap within three years of October 2025 adoption. [Source](https://www.apgml.org/news/publication-mutual-evaluation-report-malaysia) 3 dated · 3 pending date · baseline financial-integrity-2026-07-05 Role action cards MLRO ### BNM flagged corporate mule accounts and weak gatekeeper due diligence as a focus of its 2027 risk assessment, alongside RM673,500 in disclosed AML/CFT penalties across four firms this cycle. The gatekeeper warning signals that supervisory attention toward professional facilitator channels is rising, which may inform how suspicious activity involving corporate structures and company service providers is risk-rated. The penalty actions against two banks and two money-services businesses indicate continued supervisory scrutiny of reporting and customer due diligence discipline in the regulated sector. 3 evidence refs Compliance ### BNM disclosed four AML/CFT penalty actions totalling roughly RM673,500 and signalled a 2027 National Risk Assessment focused on the DNFBP sector. Firms in banking and money-services should expect continued supervisory pressure on AML/CFT reporting and customer due diligence controls. The scheduled 2027 risk assessment gives professional-services firms an extended runway to review gatekeeper due diligence practices ahead of any formal rule change. 3 evidence refs Legal ### BNM's penalty notices against AmBank, AmBank Islamic, TML Remittance Center, and Smile Honesty Forex explicitly state the fines address control deficiencies, not proven money laundering. The distinction drawn by BNM between a reporting or due diligence control breach and an established finding of money laundering is a material one for assessing liability exposure arising from these specific enforcement actions. 2 evidence refs Board ### Malaysia's central bank marked twenty-five years of its core AML statute while disclosing a cluster of enforcement actions and a supervisory warning on professional-sector gatekeeping. The combination signals continuity of Malaysia's AML/CFT regime alongside a specific new area of supervisory focus, the professional-facilitator sector, that may extend compliance expectations beyond traditionally regulated financial institutions over the coming years. 2 evidence refs Risk ### BNM's scheduled 2027 National Risk Assessment will concentrate on DNFBP-sector exposure to corporate mule accounts and weak gatekeeper due diligence. This represents an emerging risk-typology concentration in the professional-services and corporate-structure channel that may warrant inclusion in exposure concentration tracking ahead of the formal assessment outcome. 1 evidence refs Operations ### Four AML/CFT penalty actions were disclosed this cycle against two banks and two money-services businesses for reporting and customer due diligence breaches. The pattern of breaches disclosed spans both bank and remittance screening and due diligence workflows, which may be relevant context for transaction-monitoring and customer due diligence process reviews in comparable firm types. 2 evidence refs Audit ### BNM's penalty notices cite specific AML/CFT reporting and customer due diligence control deficiencies at four firms this cycle. The disclosed breaches provide an external reference point for assessing whether comparable reporting and customer due diligence controls remain fit for purpose, and whether documentation evidencing control testing is adequate. 2 evidence refs Standing trackers (T1–T6) Tracker Status Note T1 · Russian Sanctions-Evasion Architecture no_change No material Malaysia-specific change found this cycle. T2 · EU AML Package / AMLA no_change Malaysia is outside the EEA and not bound by AMLR/6AMLD/AMLA. T3 · FATF Grey List no_change Malaysia's FATF status (Regular Monitoring since early 2026) is unchanged this cycle; member since Feb 2016, not on Increased Monitoring. T4 · Beneficial-Ownership Register Status no_change No material Malaysia-specific BO-registry development found this cycle. T5 · Crypto & Digital-Asset Integrity no_change No new Malaysia-specific crypto/AML delta found this cycle; SC's enhanced DAX guidelines remain standing. T6 · Sanctions Regime Divergence no_change No Malaysia-specific sanctions-divergence development found this cycle. Registers ### Enforcement actions - 26 Dec 2025 - 22 Aug 2025 - 10 Sep 2025 - 16 Apr 2025 - 15 Nov 2025 - 3 Dec 2025 - 3 Dec 2025 - 16 Dec 2025 - 15 Dec 2025 - 30 Apr 2026 - 30 Apr 2026 - 19 Jan 2026 - 20 May 2026 - 30 Sep 2026 - 30 Sep 2026 - 27 Aug 2026 - 10 Jun 2026 - 6 Apr 2026 - 22 Oct 2026 - 22 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - 28 Oct 2026 - Najib Razak, already imprisoned over 1MDB, was convicted on four counts of abuse of power and 21 of money laundering and sentenced to an additional 15 years' imprisonment plus an RM11.4bn ($2.8bn) fine, with the judge finding he used financier Jho Low as his agent. 26 Dec 2025 - JPMorgan agreed to pay 1.4 billion ringgit ($330 million) to Malaysia, without admission of liability, to resolve all existing and potential claims relating to 1MDB. 22 Aug 2025 - MACC recovered $8.57 million in further assets linked to fugitive 1MDB financier Jho Low, bringing Malaysia's cumulative 1MDB-related asset recovery to 31.19 billion ringgit ($7.4 billion). 10 Sep 2025 - OFAC updated the SDN list to designate PRO MISSION SDN BHD, a Malaysia-registered/Kuala Lumpur-addressed entity, under the Iran sanctions program (EO 13902), concurrent with publication of an updated Advisory on Detecting and Mitigating Iranian Oil Sanctions Evasion for shipping and maritime stakeholders. 16 Apr 2025 - RMP identified, froze and seized hundreds of thousands of euros held in Malaysian front-company bank accounts that laundered proceeds of a business email compromise (BEC) fraud committed in Finland, via informal cooperation with Europol and Finnish authorities facilitated by UNODC absent a formal MLA treaty. 15 Nov 2025 ### Sanctions changes - 16 Apr 2025 - 1 Aug 2025 - OFAC designated Malaysia-registered PRO MISSION SDN BHD and other network entities under the Iran sanctions program, concurrent with an updated shipping/maritime advisory on Iranian oil sanctions evasion tactics implicating Southeast Asian, including Malaysian, transshipment activity. 16 Apr 2025 - OFAC sanctioned a Chinese oil-terminal operator and affiliated individuals within an Iran sanctions-evasion network that investigative reporting found had routed large-dollar payments to Iranian state oil interests through Malaysia's Labuan offshore financial hub. 1 Aug 2025 ### Regulatory horizon (register) - FATF/APG Key Recommended Actions roadmap - FATF/APG Malaysia MER 2025 - 3-year roadmap of Key Recommended Actions - BNM DNFBP-focused National Risk Assessment - BNM National Risk Assessment (DNFBP sectors) scheduled for 2027 - FATF Key Recommended Actions roadmap progress report - SC Malaysia relaxed crypto token-listing and custody reforms - ASEAN Leaders' Declaration on Combating Money Laundering implementation ### Active schemes - Iran oil transshipment and Labuan payment hub - 1MDB-era sovereign fund PEP asset layering - Cross-border scam-syndicate mule-account laundering Sources - [Upcoming changes to The Money Laundering Regulations 2017](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/upcoming-changes-to-the-money-laundering-regulations-2017) - [https://www.bnm.gov.my/publications/ar2025/ch1g](https://www.bnm.gov.my/publications/ar2025/ch1g) - [https://amlcft.bnm.gov.my/web/amlcft/the-amla](https://amlcft.bnm.gov.my/web/amlcft/the-amla) - [https://www.bnm.gov.my/-/eapn072026](https://www.bnm.gov.my/-/eapn072026) - [https://www.malaysianbar.org.my/cms/upload_files/document/Circular%20No%20156-2026.pdf](https://www.malaysianbar.org.my/cms/upload_files/document/Circular%20No%20156-2026.pdf) - [https://www.thestar.com.my/business/business-news/2026/01/29/bank-negara-imposes-penalties-on-four-institutions-over-amlcft-compliance-failures](https://www.thestar.com.my/business/business-news/2026/01/29/bank-negara-imposes-penalties-on-four-institutions-over-amlcft-compliance-failures) - [https://fincrimecentral.com/bnm-zurich-sanctions-penalty-2026-compliance/](https://fincrimecentral.com/bnm-zurich-sanctions-penalty-2026-compliance/) - [https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-malaysia-2025.html](https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-malaysia-2025.html) - [https://track.unodc.org/uploads/documents/UNCAC/WorkingGroups/workinggroup2/2025-September-3-5/BO-Questionnaire-Responses/Malaysia_E.pdf](https://track.unodc.org/uploads/documents/UNCAC/WorkingGroups/workinggroup2/2025-September-3-5/BO-Questionnaire-Responses/Malaysia_E.pdf) - [https://www.ohchr.org/en/press-releases/2026/02/un-report-details-grave-abuses-against-those-trafficked-scam-centres](https://www.ohchr.org/en/press-releases/2026/02/un-report-details-grave-abuses-against-those-trafficked-scam-centres) - [https://news.un.org/en/story/2025/05/1163521](https://news.un.org/en/story/2025/05/1163521) - [https://complyadvantage.com/insights/anti-money-laundering-malaysia/](https://complyadvantage.com/insights/anti-money-laundering-malaysia/) - [https://www.fatf-gafi.org/en/countries/detail/Malaysia.html](https://www.fatf-gafi.org/en/countries/detail/Malaysia.html) - [https://amlcft.bnm.gov.my/faq/tfs-fi/targeted-financial-sanctions](https://amlcft.bnm.gov.my/faq/tfs-fi/targeted-financial-sanctions) - [https://transparency.org.my/pages/news-and-events/press-releases/transparency-international-malaysia-urges-reconsideration-of-restrictive-access-to-beneficial-ownership-data](https://transparency.org.my/pages/news-and-events/press-releases/transparency-international-malaysia-urges-reconsideration-of-restrictive-access-to-beneficial-ownership-data) - [https://www.lexology.com/library/detail.aspx?g=25e073b6-a1da-4dae-ac1b-4b607768088a](https://www.lexology.com/library/detail.aspx?g=25e073b6-a1da-4dae-ac1b-4b607768088a) - [https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [https://www.checkmarble.com/blog/sanctions-screening-malaysia](https://www.checkmarble.com/blog/sanctions-screening-malaysia) - [FATF](https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-malaysia-2025.html) - [Labuan FSA](https://www.labuanfsa.gov.my/resources/media/press-releases/labuan-ibfcs-amlcft-regime-recognised-in-malaysias-fatf-mutual-evaluation-report-2025) - [Lexology](https://www.lexology.com/library/detail.aspx?g=1f19a107-bc11-4d3f-994d-1d3abe7a9fbf) - [Transparency International Malaysia](https://transparency.org.my/pages/news-and-events/press-releases/transparency-international-malaysia-urges-reconsideration-of-restrictive-access-to-beneficial-ownership-data) - [Securities Commission Malaysia](https://www.sc.com.my/resources/media/media-release/sc-issues-revised-guidelines-on-recognized-markets-for-digital-asset-exchange) - [Bank Negara Malaysia](https://www.bnm.gov.my/documents/20124/943361/pd-tecreq-psr-mar2026.pdf) - [The Star](https://www.thestar.com.my/business/business-news/2026/03/12/bank-negara-issues-technology-risk-policy-for-payment-service-regulatees) - [Asia Times](https://asiatimes.com/2026/09/cambodia-is-closing-scam-centers-but-needs-help-tracking-the-money/) - [Bank Negara Malaysia](https://www.bnm.gov.my/) - [The Star](https://www.thestar.com.my/business/business-news/2026/09/30/bank-negara-imposes-penalties-on-three-companies-for-non-compliance-amounting-to-rm40400) - [Bank Negara Malaysia (Annual Report 2025)](https://www.bnm.gov.my/publications/ar2025/ch1g) - [FATF](https://www.fatf-gafi.org/en/countries/detail/Malaysia.html) - [Bank Negara Malaysia](https://www.bnm.gov.my/-/eapn192026) - [Bank Negara Malaysia](https://www.bnm.gov.my/-/eapn162026) - [Bank Negara Malaysia](https://www.bnm.gov.my/-/eapn112026) - [Asia/Pacific Group on Money Laundering (APG)](https://www.apgml.org/news/publication-mutual-evaluation-report-malaysia) - [Fintech News Malaysia](https://fintechnews.my/) - [https://fincrimecentral.com/malaysia-dnfbp-corporate-mules-risk-warning/](https://fincrimecentral.com/malaysia-dnfbp-corporate-mules-risk-warning/) - [https://www.ssm.com.my/Pages/Legal_Framework/Document/Guideline%20BO%20(Revised)%202025%20fair.pdf](https://www.ssm.com.my/Pages/Legal_Framework/Document/Guideline%20BO%20(Revised)%202025%20fair.pdf) - [Fincrime Central](https://fincrimecentral.com/malaysia-bnm-aml-fines-ambank-tml-smile-2026-2/) - [Fincrime Central](https://fincrimecentral.com/malaysia-dnfbp-corporate-mules-risk-warning/) - [Malay Mail](https://www.malaymail.com/news/malaysia/2026/10/23/tighter-rules-for-malaysian-dealers-agents-and-accountants-bnm-to-review-money-laundering-risks-next-year/240302) - [Bank for International Settlements](https://www.bis.org/speeches/20261013-intelligence-led-financial-crime-prevention-power-data-insights-and-collaboration) - [Bank Negara Malaysia](https://amlcft.bnm.gov.my/international-engagement) - [Malaysia's measures to counter money laundering, terrorist financing and proliferation financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-malaysia-2025.html) - [December 2025 Mutual Evaluation of Malaysia](https://www.fatf-gafi.org/content/dam/fatf-gafi/mer/mer-malaysia-2025.pdf.coredownload.inline.pdf) - [Malaysia](https://www.fatf-gafi.org/en/countries/detail/Malaysia.html) - [Outcomes FATF Plenary, 22-24 October 2025](https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-FATF-plenary-october-2025.html) - [Assessments](https://www.fatf-gafi.org/en/calendars/assessments.html) - [Mutual Evaluation of Malaysia](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationofmalaysia.html) - [FATF Week - October 2025](https://www.fatf-gafi.org/en/publications/Fatfgeneral/FATF-Week-October-2025.html) - [Asia/Pacific Group on Money Laundering (APG)](https://www.fatf-gafi.org/en/countries/global-network/asia-pacific-group-on-money-laundering--apg-.html) - [News](https://www.fatf-gafi.org/en/the-fatf/news.html) - [Documents - Financial Action Task Force (FATF)](http://www.fatf-gafi.org/publications/mutualevaluations/documents/mutualevaluationofmalaysia.html) - ["Black and grey" lists](https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html) - [Jurisdictions under Increased Monitoring - 13 February 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-february-2026.html) - [Jurisdictions under Increased Monitoring - 19 June 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [High-Risk Jurisdictions subject to a Call for Action - 13 February 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/Call-for-action-february-2026.html) - [Countries / Jurisdictions](https://www.fatf-gafi.org/en/countries.html) - [High-risk and other monitored jurisdictions](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions.html) - [Search page](https://www.fatf-gafi.org/en/search-page.html) - [THEMATIC COMPILATION OF RELEVANT INFORMATION SUBMITTED BY MALAYSIA](https://www.unodc.org/documents/corruption/WG-Prevention/Art_14_Prevention_of_money-laundering/Malaysia.pdf) - [Malaysia's measures to combat money laundering and terrorist financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mer-malaysia-2015.html) - [Anti-money laundering and counter-terrorist financing measures - Malaysia](https://www.fatf-gafi.org/content/dam/fatf-gafi/mer/2-National-AML-CFT-Policies-Mutual-Evaluation-Malaysia-2015.pdf) - [Bank Negara Malaysia to Revise Rules Against Money Laundering - Bloomberg](https://www.bloomberg.com/news/articles/2019-08-29/bank-negara-malaysia-to-revise-rules-against-money-laundering) - [BANK NEGARA MALAYSIA overview - Find and update company information - GOV.UK](https://find-and-update.company-information.service.gov.uk/company/OE030815) - [Iran-related Designations; Publication of Updated Iran Shipping Advisory | Office of Foreign Assets Control](https://ofac.treasury.gov/recent-actions/20250416) - [FinCEN Advisory on the Iranian Regime's Illicit Oil ...](https://www.fincen.gov/system/files/FinCEN-Advisory-Illicit-Oil-Smuggling-508.pdf) - [Sanctions Risk of Dealing with Teapot Oil Refineries](https://ofac.treasury.gov/media/935546/download?inline=) - [Iran Oil-Filled Tankers Build Up Off Malaysia as Sanctions Mount - Bloomberg](https://www.bloomberg.com/news/articles/2025-03-27/iran-oil-filled-tankers-build-up-off-malaysia-as-sanctions-mount) - [Iran Sanctions | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/iran-sanctions) - [Oil Tankers Going Dark Off Malaysia as Iran Trade Draws Scrutiny - Bloomberg](https://www.bloomberg.com/news/articles/2025-05-30/oil-tankers-going-dark-off-malaysia-as-iran-trade-draws-scrutiny) - [SANCTIONS ADVISORY - Guidance for Shipping and ...](https://ofac.treasury.gov/media/934236/download?inline=) - [U.S. Sanctions Chinese Oil Terminal Operator Tied to Iranian Sanctions Evasion Scheme | OCCRP](https://www.occrp.org/en/news/us-sanctions-chinese-oil-terminal-operator-tied-to-iranian-sanctions-evasion-scheme) - [OFAC sanctions a crypto-enabled financial network for facilitating Iranian oil smuggling](https://www.elliptic.co/blog/ofac-sanctions-financial-facilitators-front-companies-for-supporting-iran-in-evading-sanctions-seven-crypto-addresses-listed) - [2025 Crypto Regulatory Round-Up](https://www.chainalysis.com/blog/2025-crypto-regulatory-round-up/) - [Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/global-crypto-policy-review-outlook-2025-26) - [Quick guide on assessing the Money Laundering risks of virtual assets (VA) and virtual asset service providers (VASP)](https://www.fatf-gafi.org/en/publications/Methodsandtrends/quick-guide-on-assessing-ML-risks-of-VA-and-VASPs.html) - [FATF urges stronger global action to address Illicit Finance Risks in Virtual Assets](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/targeted-update-virtual-assets-vasps-2025.html) - [Crypto Regulatory Affairs: MAS proposes framework for digital assets](https://www.elliptic.co/blog/analysis/crypto-regulatory-affairs-mas-proposes-framework-for-digital-assets) - [Crypto regulatory affairs: OCC gives US banks go-ahead on riskless crypto transfers](https://www.elliptic.co/blog/crypto-regulatory-affairs-occ-gives-us-banks-go-ahead-on-riskless-crypto-transfers) - [Public Key Ep 60: Malaysia Crypto Regulations](https://www.chainalysis.com/blog/ep-60-malaysian-crypto-regulations/) - [Malaysia Country Guide | Elliptic](https://www.elliptic.co/country-guides/malaysia) - [Crypto regulatory affairs: Singapore’s June 30 deadline for digital token service providers approaches](https://www.elliptic.co/blog/crypto-regulatory-affairs-singapores-june-30-deadline-for-digital-token-service-providers-approaches) - [Elliptic's 2026 regulatory and policy outlook: a global pivot toward innovation](https://www.elliptic.co/blog/elliptics-2026-regulatory-and-policy-outlook-global-pivot-to-innovation) - [of 13 A. Information on a registry or alternative mechanism ...](https://track.unodc.org/uploads/documents/UNCAC/WorkingGroups/workinggroup2/2025-September-3-5/BO-Questionnaire-Responses/Malaysia_E.pdf) - [Beneficial Ownership Regulations and Company Registries in Southeast Asia](https://www.unodc.org/roseap/uploads/documents/topics/anti-corruption/2022/Beneficial_ownership_regulations_and_company_registries_in_Southeast_Asia.pdf) - [Implementation of Beneficial Ownership Transparency in ASEAN Member States and](https://www.unodc.org/roseap/uploads/documents/Publications/2024/Implementation_of_Beneficial_Ownership_Transparency_in_ASEAN_Member_States_and_Timor-Leste.pdf) - [Guidance on Beneficial Ownership of Legal Persons](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Guidance-Beneficial-Ownership-Legal-Persons.html) - [BENEFICIAL OWNERSHIP DISCLOSURE IN MALAWI A presentation by Collin Chitsime](https://track.unodc.org/uploads/documents/UNCAC/WorkingGroups/workinggroup2/2025-September-3-5/presentations/WGAR19_item_3a_MALAWI.pdf) - [MALAYSIAN SECURITIES COMMISSION - Company Profile and News - Bloomberg Markets](https://www.bloomberg.com/profile/company/MSCZ:MK) - [Frequently Asked Questions | FinCEN.gov](https://www.fincen.gov/boi-faqs) - [U.S. Beneficial Ownership Information Registry Now Accepting Reports | FinCEN.gov](https://www.fincen.gov/news/news-releases/us-beneficial-ownership-information-registry-now-accepting-reports) - [Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ](https://www.icij.org/inside-icij/2025/03/treasury-department-wont-enforce-beneficial-ownership-rule-under-the-corporate-transparency-act/) - [Follow the money: how Southeast Asian countries are fighting cyber-fraud](https://www.unodc.org/roseap/en/2025/11/southeast-asian-cyber-fraud/story.html) - [Illicit Financial Flows from Cyber-Enabled Fraud November 2023](https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/Illicit-financial-flows-cyber-enabled-fraud.pdf.coredownload.inline.pdf) - [Malaysia Fines Ex-PM Najib $2.8 Billion for 1MDB, Adds Jail Time - Bloomberg](https://www.bloomberg.com/news/articles/2025-12-26/malaysia-judge-says-ex-pm-najib-used-financier-jho-low-as-agent) - [Malaysia Police Make Arrests in Cryptocurrency Fraud Scheme | TRM Blog](https://www.trmlabs.com/resources/blog/malaysian-police-make-arrests-in-cryptocurrency-fraud-scheme) - [Chinese Money Laundering Networks: 2020](https://www.fincen.gov/system/files/2025-08/4000-10-INV-144549-S3F6L-FTA-CMLN-508.pdf) - [Tracking Digital Trails: UNODC and Malaysia Step Up the Fight Against High-Tech Financial Crime and Dark Web Threats](https://www.unodc.org/roseap/en/malaysia/2025/12/financial-crime/story.html) - [1 The U.S. Department of the Treasury’s (Treasury)](https://www.fincen.gov/system/files/2025-08/FinCEN-Advisory-CMLN-508.pdf) - [FATF REPORT Professional Money Laundering July 2018](https://www.fatf-gafi.org/content/dam/fatf-gafi/reports/Professional-Money-Laundering.pdf) - [Malaysia Recovers Some Assets Linked to 1MDB Fugitive Jho Low - Bloomberg](https://www.bloomberg.com/news/articles/2025-09-10/malaysia-recovers-some-assets-linked-to-1mdb-fugitive-jho-low) - [JPMorgan to Pay $330 Million to Malaysia to Settle 1MDB Case - Bloomberg](https://www.bloomberg.com/news/articles/2025-08-22/jpmorgan-to-pay-330-million-to-malaysia-to-settle-1mdb-claim) - [Malaysia to Look Into Claim 1MDB Fugitive Jho Low Is in China - Bloomberg](https://www.bloomberg.com/news/articles/2025-07-21/malaysia-to-look-into-claim-1mdb-fugitive-jho-low-is-in-china) - [Malaysia Has Recovered $7 Billion in Funds Linked to 1MDB - Bloomberg](https://www.bloomberg.com/news/articles/2025-08-14/malaysia-has-recovered-7-billion-in-funds-linked-to-1mdb) - [U.S. Wants to Recover $300M in Assets Linked to 1MDB | OCCRP](https://www.occrp.org/en/news/us-wants-to-recover-300m-in-assets-linked-to-1mdb) - [1MDB Case: Jho Low to Forfeit Warhol, Monet Works in Deal with DOJ - Bloomberg](https://www.bloomberg.com/news/articles/2024-06-26/jho-low-to-forfeit-warhol-monet-works-in-1mdb-deal-with-doj) - [Malaysia Recoups Some 1MDB Assets After Ex-Banker’s Trial - Bloomberg](https://www.bloomberg.com/news/articles/2024-02-08/malaysia-recoups-some-1mdb-assets-after-ex-banker-s-trial) - [Jho Low Gives Up $1 Billion in Assets to Settle 1MDB Suits - Bloomberg](https://www.bloomberg.com/news/articles/2019-10-30/u-s-is-nearing-settlement-to-recover-1mdb-loot-from-jho-low) - [All About Jho Low, the Alleged Mastermind of the 1MDB Scandal - Bloomberg](https://www.bloomberg.com/news/articles/2026-05-13/all-about-jho-low-the-alleged-mastermind-of-the-1mdb-scandal) - [Anti-money laundering and counter-terrorist financing measures - Malaysia](https://www.fatf-gafi.org/content/dam/fatf-gafi/mer/5-Preventive-Measures-Mutual-Evaluation-Malaysia-2015.pdf) - [The FATF Recommendations](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html) - [Home](https://www.fatf-gafi.org/en/home.html) - [Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Countering the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov](https://www.fincen.gov/news/news-releases/financial-action-task-force-identifies-jurisdictions-anti-money-laundering-3) - [US Treasury Sanctions DPRK Bankers and Front Companies Laundering Proceeds from Cybercrime and IT Worker Operations | TRM Blog](https://www.trmlabs.com/resources/blog/us-treasury-sanctions-dprk-bankers-and-front-companies-laundering-proceeds-from-cybercrime-and-it-worker-operations) - [North Korea IT Workers: Inside the DPRK’s Crypto Laundering Network](https://www.chainalysis.com/blog/dprk-it-workers-north-korea-crypto-laundering-networks/) - [OFAC Targets DPRK IT Workers Using Crypto](https://www.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/) - [Crypto Sanctions: 2026 Crypto Crime Report](https://www.chainalysis.com/blog/crypto-sanctions-2026/) - [OFAC lists 53 crypto addresses of sanctioned North Korean Cheil Credit Bank](https://www.elliptic.co/blog/ofac-lists-53-crypto-addresses-of-sanctioned-north-korean-cheil-credit-bank) - [OFAC sanctions a fraud network for assisting the North Korean (DPRK) regime](https://www.elliptic.co/blog/ofac-sanctions-a-fraud-network-for-assisting-the-north-korean-dprk-regime) - [Advisory on North Korean IT Workers](https://assets.publishing.service.gov.uk/media/66e2ec410d913026165c3d91/OFSI_Advisory_on_North_Korean_IT_Workers.pdf) - [OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis](https://www.chainalysis.com/blog/ofac-sanctions/) - [OFAC Charged and Sanctioned DPRK Facilitators](https://blog.chainalysis.com/reports/ofac-dprk-north-korea-sanctions-april-2023/) - [2025 Crypto Theft Reaches $3.4 Billion](https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2026/) - [Sanctions Programs and Country Information | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information) - [OFAC Consolidated Frequently Asked Questions | Office of Foreign Assets Control](https://ofac.treasury.gov/faqs/all-faqs) - [Where is OFAC's Country List? What countries do I need to worry about in terms of U.S. sanctions? | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/where-is-ofacs-country-list-what-countries-do-i-need-to-worry-about-in-terms-of-us-sanctions) - [Burma-Related Sanctions | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/burma) - [257 | Office of Foreign Assets Control](https://ofac.treasury.gov/faqs/257) - [Basic Information on OFAC and Sanctions](https://ofac.treasury.gov/faqs/topic/1501) - [Sanctions List Search Tool | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-list-search-tool) - [Mali-Related Sanctions | Office of Foreign Assets Control](https://ofac.treasury.gov/sanctions-programs-and-country-information/mali-related-sanctions) - [Page 1 of 501 Country Review Report of Malaysia](https://www.unodc.org/documents/treaties/UNCAC/CountryVisitFinalReports/2018_11_16_Malaysia_Final_Country_Report.pdf) - [Rate Hike Expectations Build in Malaysia on Economic Resilience - Bloomberg](https://www.bloomberg.com/news/articles/2026-03-05/rate-hike-expectations-build-in-malaysia-on-economic-resilience) - [Anti-money laundering and countering the financing of terrorism at international level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en) - [High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission](https://finance.ec.europa.eu/financial-crime/high-risk-third-countries-and-international-context-content-anti-money-laundering-and-countering_en) - [European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/european-commission-updates-list-high-risk-countries-strengthen-international-fight-against-2025-12-04_en) - [Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance](https://finance.ec.europa.eu/news/commission-updates-list-high-risk-countries-strengthen-international-fight-against-financial-crime-2025-06-10_en) - [Anti-Money Laundering and Terrorist Financing Directive 4 - Finance](https://finance.ec.europa.eu/regulation-and-supervision/financial-services-legislation/implementing-and-delegated-acts/anti-money-laundering-and-terrorist-financing-directive-4_en) - [EU methodology for the identification of high-risk third countries - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level/eu-methodology-identification-high-risk-third-countries_en) - [High-risk and other monitored jurisdictions](https://www.fatf-gafi.org/en/topics/high-risk-and-other-monitored-jurisdictions.html) - [Money Laundering Advisory Notice: June 2026 - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/money-laundering-advisory-notice-high-risk-third-countries--2) - [Anti-money laundering: the Commission updates its list of high-risk third-country jurisdictions to strengthen the international fight against financial crime - Finance](https://finance.ec.europa.eu/news/anti-money-laundering-commission-updates-its-list-high-risk-third-country-jurisdictions-strengthen-2022-12-20_en) - [Anti-money laundering and countering the financing of terrorism at EU level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-eu-level_en) - [Money Laundering Advisory Notice: High Risk Third Countries - GOV.UK](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2) - [HM Treasury publish updated list of high risk third jurisdictions](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/hm-treasury-publish-updated-list-of-high-risk-third-jurisdictions) - [High-risk third countries](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/high-risk-third-countries) - [Updated casino guidance to include proliferation financing](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/updated-casino-guidance-to-include-proliferation-financing?es_id=36c0030f75) - [The Money Laundering and Terrorist Financing (Amendment) Regulations 2026](https://www.legislation.gov.uk/ukdsi/2026/9780348281743) - [RPC opinion: The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 - GOV.UK](https://www.gov.uk/government/publications/rpc-opinion-the-money-laundering-and-terrorist-financing-amendment-regulations-2026) - [The Money Laundering and Terrorist Financing (High-Risk ...](https://www.legislation.gov.uk/uksi/2024/69/made) - [Upcoming changes to The Money Laundering Regulations 2017](https://www.gamblingcommission.gov.uk/licensees-and-businesses/notice/upcoming-changes-to-the-money-laundering-regulations-2017) - [FATF / Asia-Pacific Group on Money Laundering (APG)](https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-malaysia-2025.html) - [FATF](https://www.fatf-gafi.org/en/countries/detail/Malaysia.html) - [FATF](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [U.S. Department of the Treasury (OFAC)](https://ofac.treasury.gov/recent-actions/20250416) - [FinCEN](https://www.fincen.gov/system/files/FinCEN-Advisory-Illicit-Oil-Smuggling-508.pdf) - [UNODC / Government of Malaysia](https://track.unodc.org/uploads/documents/UNCAC/WorkingGroups/workinggroup2/2025-September-3-5/BO-Questionnaire-Responses/Malaysia_E.pdf) - [UNODC](https://www.unodc.org/roseap/en/2025/11/southeast-asian-cyber-fraud/story.html) - [UNODC](https://www.unodc.org/roseap/en/malaysia/2025/12/financial-crime/story.html) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-12-26/malaysia-judge-says-ex-pm-najib-used-financier-jho-low-as-agent) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-08-22/jpmorgan-to-pay-330-million-to-malaysia-to-settle-1mdb-claim) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-09-10/malaysia-recovers-some-assets-linked-to-1mdb-fugitive-jho-low) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-05-30/oil-tankers-going-dark-off-malaysia-as-iran-trade-draws-scrutiny) - [OCCRP](https://www.occrp.org/en/news/us-sanctions-chinese-oil-terminal-operator-tied-to-iranian-sanctions-evasion-scheme) - [TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/global-crypto-policy-review-outlook-2025-26) - [European Commission](https://finance.ec.europa.eu/news/european-commission-updates-list-high-risk-countries-strengthen-international-fight-against-2025-12-04_en) - [HM Treasury](https://www.gov.uk/government/publications/money-laundering-advisory-notice-high-risk-third-countries--2/money-laundering-advisory-notice-high-risk-third-countries--2) Coverage gaps fim-int-2026-07-07-G001: Evidence establishing SSM independe… fim-int-2026-07-07-G001: Evidence establishing SSM independent verification mandate and capacity for beneficial-ownership register submissions in Malaysia has not been established this cycle, limiting confidence in the BO-opacity gap severity. [resolved] fim-int-2026-07-07-G002: No confirmed evidence of Russian da… fim-int-2026-07-07-G002: No confirmed evidence of Russian dark-fleet or G7 price-cap-evasion transshipment activity specific to Malaysian waters was identified this cycle despite structural similarity to known Asian transit corridors, and targeted monitoring of AIS-dark vessel activity would close this gap. [resolved] fim-int-2026-07-07-G003: No FATF Recommendation-numbered cit… fim-int-2026-07-07-G003: No FATF Recommendation-numbered citation was available this cycle to support obligation mapping for the Malaysia beneficial-ownership register or DNFBP asset-freezing deficiencies. [resolved] fim-int-2026-07-07-G004: Direct primary regulator confirmati… fim-int-2026-07-07-G004: Direct primary regulator confirmation naming the Chinese oil-terminal operator and affiliated individuals designated in the August 2025 Labuan-linked action was not retrieved this cycle, limiting source-tier corroboration to investigative reporting alone. [resolved] fim-int-2026-07-07-G005: No direct regulatory or corporate-r… fim-int-2026-07-07-G005: No direct regulatory or corporate-registry source was retrieved this cycle confirming the beneficial ownership and AML control posture of the Johor royal family-linked ringgit stablecoin issuer, limiting confidence in the PEP-adjacent scrutiny signal. [resolved] fim-int-2026-08-21-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-08-21-G001 ({'scheme': 'financial_integrity', 'value': 'D4'}): Malaysia-specific financial-flow linkage (banking corridors, mule-account nexus) to regional scam-centre/conflict finance was not independently substantiated this cycle. [resolved] fim-int-2026-08-21-G002: Mexico (MX) and Colombia (CO) Tier-… fim-int-2026-08-21-G002: Mexico (MX) and Colombia (CO) Tier-D coverage could not be reached this cycle within pooled research budget. [resolved] fim-int-2026-08-21-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-08-21-G003 ({'scheme': 'financial_integrity', 'value': 'D6'}): No MY-specific guidance update matching FinCEN/FCA-style AI-model-risk expectations for AML transaction monitoring was identified, despite BNM's stated SupTech direction. [resolved] fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No T1 primary source located this cycle for D3 (enabler jurisdictions) or D4 (conflict finance) MY-specific findings within the pooled search budget. [resolved] fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): The full FATF/APG Malaysia MER text was not directly retrieved this cycle; specific compliance-rating tallies rest on T4 secondary compilations rather than the primary document. [resolved] fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): BNM's own enforcement-action page for the Zurich penalties was not directly reached; figures rest on a single T4 aggregator this cycle. [resolved] fim-int-2026-09-28-G001: Laos, Mexico and Colombia (Tier D) … fim-int-2026-09-28-G001: Laos, Mexico and Colombia (Tier D) were not actively searched this cycle; logged as a coverage gap, not asserted as no-material-change. [resolved] fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D6'}): BNM's Technology Requirements Policy Document full text was identified by URL but not parsed/quoted this cycle, capping confidence at Probable. [resolved] fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No beneficial-ownership register effectiveness update or amendment located for Malaysia this cycle; the Companies (Amendment) Act 2024 regime continues as the standing instrument. [resolved] fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No MY-specific enabler-jurisdiction finding was located this cycle for D3. [resolved] fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', 'value': 'D6'}): No MY-specific RegTech/AI-transaction-monitoring supervisory guidance located this cycle for D6. [resolved] fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): Enabler-jurisdiction (D3) and conflict-finance (D4) domains were not actively researched this cycle because the run is bound to Malaysia only. [resolved] fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No primary BNM/HKMA documentation of the stablecoin cooperation workstream was located; only trade press coverage was found. [resolved] fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No primary BNM press release or Labuan FSA enforcement notice was retrieved corroborating the two enforcement examples cited in the Deputy Governor's speech; entities, penalties and instrument references remain undisclosed. [resolved] fim-int-2026-10-25-G002: Standing trackers T1, T5 and T6 wer… fim-int-2026-10-25-G002: Standing trackers T1, T5 and T6 were not actively researched this cycle; search effort was concentrated on MY-bound AML/BO/enforcement topics rather than the global Russia-sanctions, crypto-integrity, or sanctions-divergence trackers. [resolved] fim-int-2026-10-25-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-25-G003 ({'scheme': 'financial_integrity', 'value': 'D8'}): Tier-D watch jurisdictions (KH, LA, MX, CO) and D8 commercial activity were not actively searched this cycle for Malaysia; recorded as awaiting_primary_source. [resolved] fim-int-2026-11-01-G001: No Malaysia-specific D1 (sanctions)… fim-int-2026-11-01-G001: No Malaysia-specific D1 (sanctions), D2 (beneficial ownership), D4 (conflict finance), D5 (crypto/digital assets) or D6 (compliance technology) development was found this cycle; coverage was thin across these domains. [open] fim-int-2026-11-01-G002: BNM's own speech transcript for the… fim-int-2026-11-01-G002: BNM's own speech transcript for the 25-year AMLA retrospective at IFCTF 2026 was retrieved directly (T1 via BIS), but the DNFBP conference remarks rely on secondary press only; BNM's own speech text for the DNFBP conference was not independently retrieved. [open] FIM-GAP-001 (D3): Despite legal-framework strengthening sinc… FIM-GAP-001 (D3): Despite legal-framework strengthening since 2015, Malaysia continues to face significant challenges converting money-laundering investigations into prosecutions and convictions, per FATF's Dec 2025 MER. FIM-GAP-002 (D2): Malaysia's SSM-held beneficial-ownership r… FIM-GAP-002 (D2): Malaysia's SSM-held beneficial-ownership register is not publicly accessible under the 2025 Access Regulations, and prior UNODC/regional assessments found it unclear whether the Registrar's mandate includes independent verification of submitted BO data. FIM-GAP-003 (D1): FATF's Dec 2025 MER found continuing conce… FIM-GAP-003 (D1): FATF's Dec 2025 MER found continuing concerns regarding the dissuasiveness of sanctions imposed for terrorist financing, and that DNFBPs focus more on positive-match screening than on actively detecting and freezing assets held by persons acting on behalf of designated parties. ## Evidence #### Confidence-tiered claims RM11,500 fine for failing to maintain a sanctions-screening mechanism and to screen customers against the Domestic List and UNSCR List [[Source 1]](#sec-sources) Probable · 1 source Fined (amount combined with two other firms totalling RM40,400) for failing to conduct customer due diligence on a money-changing transaction [[Source 1]](#sec-sources) Probable · 1 source AMLA (Amendment) Act 2025 (Act A1761) in force since 1 March 2026, broadening predicate offences to any serious federal offence carrying over one year's imprisonment and adding proliferation-financing provisions; FATF/APG Regular Follow-Up status confirmed (October 2025 MER, published December 2025), Compliant on 24 and Largely Compliant on 16 of 40 Recommendations [[Source 1]](#sec-sources) Probable · 1 source Enhanced Guidelines on Recognised Markets for digital asset exchange effective 20 May 2026 remains the standing supervisory instrument; administrative action against four unregistered DAX operators previously noted [[Source 1]](#sec-sources) Probable · 1 source AMP of RM22,000 for CDD failures under MSBA 2011 s.75(2)(b) [[Source 1]](#sec-sources) Probable · 1 source Combined AMP of RM264,000 for targeted financial sanctions screening failures (outdated sanctions database) [[Source 1]](#sec-sources) Probable · 1 source AMP of RM520,000 for TFS compliance failure under FSA s.48(1)(a) [[Source 1]](#sec-sources) Probable · 1 source Compliant on 24 and largely compliant on 16 of the 40 Recommendations; Regular Follow-Up status; MER adopted October 2025, published 11 December 2025. [[Source 1]](#sec-sources) Probable · 1 source Joint policy workstream on digital assets, tokenisation and cross-border stablecoin use cases between Hong Kong and Malaysia, announced 7 October 2026. [[Source 1]](#sec-sources) Probable · 1 source BNM's Deputy Governor warned at the DNFBP Compliance Conference (22 Oct 2026) that criminal networks are exploiting company secretaries and DNFBPs to run corporate mule accounts, citing two unnamed enforcement actions. [[Source 1]](#sec-sources) Probable · 1 source Joint BNM/Companies Commission of Malaysia (SSM) action for failing to file STRs linked to a suspected international scam syndicate involving foreign nationals. [[Source 1]](#sec-sources) Probable · 1 source Joint BNM/Labuan Financial Services Authority action over material CDD deficiencies and delayed STR filing. [[Source 1]](#sec-sources) Probable · 1 source Malaysia is in Regular Follow-Up status after the 2025 FATF/APG Mutual Evaluation, compliant on 24 and largely compliant on 16 of 40 Recommendations; not on the FATF grey or black list. [[Source 1]](#sec-sources) Probable · 1 source The SSM Guideline on Beneficial Ownership of Legal Persons (revised, effective 10 Jan 2025) superseded the prior 1 March 2020 guideline; no new amendment located this cycle. [[Source 1]](#sec-sources) Probable · 1 source RM673,500 combined administrative monetary penalties, announced 28 Oct 2026 [[Source 1]](#sec-sources) Probable · 1 source BNM Deputy Governor's remarks at DNFBP Compliance Conference, 22 Oct 2026 [[Source 1]](#sec-sources) Probable · 1 source 25-year anniversary remarks, 6 Oct 2026 [[Source 1]](#sec-sources) Probable · 1 source Deputy Governor warned DNFBPs on corporate mule accounts and weak CDD; announced 2027 NRA focused on DNFBP sector [[Source 1]](#sec-sources) Probable · 1 source 25 years since enactment of AMLA 2001; cites Dec 2025 Mutual Evaluation outcome and move to FATF Regular Monitoring [[Source 1]](#sec-sources) Probable · 1 source RM276,000 each for AML/CFT reporting and CDD breaches [[Source 1]](#sec-sources) Probable · 1 source RM113,100 and RM8,400 respectively for separate AML reporting/CDD breaches [[Source 1]](#sec-sources) Probable · 1 source FATF member since Feb 2016; Regular Monitoring status since early-2026 Mutual Evaluation outcome; not on Increased Monitoring list [[Source 1]](#sec-sources) Probable · 1 source