Bitcoin & Cryptocurrency Regulation in Malaysia

Yes. Buying, holding, selling and trading Bitcoin and other crypto assets is legal in Malaysia for individuals and businesses, provided you deal through channels that comply with the law. There is no ban on personal ownership, and the country hosts SC-registered digital asset exchanges where residents can trade approved tokens.

The key qualification is that crypto is not legal tender. Bank Negara Malaysia has stated that cryptocurrencies are not recognised as legal tender or as a payment instrument, so no merchant is obliged to accept them, and using crypto to pay does not carry the legal status of paying in ringgit. Instead, the Securities Commission treats most digital assets as securities, which brings them under capital-markets law.

Because crypto is legal but regulated, the practical question for most people is not whether they can use it, but which rules apply — chiefly trading only through registered platforms, completing identity checks, and meeting any tax-reporting obligations on their activity.

Malaysia uses a dual-regulator model, and many crypto businesses must satisfy both authorities.

• Securities Commission Malaysia (SC) is the lead regulator for digital assets. Under an order made in 2019 (commonly cited as the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019), most digital currencies and tokens are prescribed as securities. This brings exchanges, token issuers and related service providers under the Capital Markets and Services Act and the SC's Guidelines on Digital Assets.
• Bank Negara Malaysia (BNM), the central bank, focuses on monetary policy, financial stability and anti-money-laundering (AML) and counter-terrorism-financing (CTF) compliance. It does not recognise crypto as legal tender and applies AML/CTF and customer-due-diligence expectations to relevant service providers.

Under the SC framework, crypto exchanges operate as Digital Asset Exchanges (DAX) and must be registered with the SC. Token fundraising is channelled through regulated routes such as Initial Exchange Offerings (IEO) and registered Digital Asset Custodians (DAC) for safekeeping. Only tokens that have received SC concurrence may be listed for trading on registered exchanges, and the approved list is relatively short compared with the global universe of tokens.

The framework continues to be refined. The 2019 order was reportedly amended in 2025, and in early 2026 the SC issued clarifications on the offering of digital-asset broking services. Reported features of that clarification include requirements that brokers source assets only from registered exchanges, conduct transactions on a cash-upfront basis, avoid offering margin or lending facilities to clients, and refrain from exercising discretion over client trading accounts. Expect ongoing change — verify the current position directly with the SC rather than relying on a fixed snapshot.

Malaysia does not levy a broad-based capital gains tax on most assets, and this shapes how crypto is treated. The general principle reported by tax practitioners and reflected in Inland Revenue Board (LHDN) guidance is a distinction between investing and trading:

• Long-term investors. Where someone buys and holds crypto as a genuine long-term investment, gains on eventual disposal are generally not taxed, because Malaysia has no general capital gains tax on such gains. This makes the country relatively favourable for passive holders.
• Active traders. Where the activity looks like a trade or business — for example, frequent transactions carried out with a profit-seeking intent — profits can be treated as income and taxed accordingly. LHDN assesses this based on factors such as frequency, holding period and the overall nature of the activity (often described using "badges of trade").
• Other income. Crypto received from activities such as mining or staking, or accepted as payment in a business, may be treated as taxable income at its fair value in ringgit when received.

Whether you are taxed therefore depends on your specific facts, not on the asset itself. Tax outcomes hinge on classification, intent and how rules are applied in a given year, and the boundary between investing and trading can be subtle. Do not rely on any specific rate, threshold or example from an article. Confirm your position with LHDN or a qualified tax adviser, and keep clear records of dates, ringgit values and the purpose of each transaction. This section is general information, not tax advice.

The compliant way to buy crypto in Malaysia is through a Digital Asset Exchange (DAX) registered with the Securities Commission. Registered platforms let residents trade a defined list of SC-approved tokens, with deposits typically funded in ringgit via bank transfer.

What this means in practice:

• Identity verification (KYC). Expect to provide identification and personal details before trading or withdrawing. This is a legal AML/CTF requirement, not optional.
• Approved tokens only. Registered exchanges may list only tokens that have SC concurrence, so the selection is narrower than on some offshore platforms.
• Conduct rules. Following the SC's early-2026 broking clarification, expect requirements such as cash-upfront settlement and restrictions on margin or lending to retail clients on regulated channels.

The SC publishes lists of registered DAX operators and regularly warns the public about unauthorised or unlicensed entities, including offshore platforms soliciting Malaysian users. Dealing with an unlicensed operator means you are generally not protected under Malaysian securities laws and face heightened fraud, custody and money-laundering risks. Before funding any account, check that the platform appears on the SC's registered list, and weigh security record, fees, supported tokens and custody arrangements.

Bitcoin ATMs face a notably restrictive stance in Malaysia. The Securities Commission has stated that it has not authorised any entity to operate a crypto ATM, and that operating such a machine amounts to running a Digital Asset Exchange — an activity that requires SC registration.

In practical terms:

• Any crypto ATM operating without SC registration is doing so outside the regulated framework.
• The SC has cautioned the public against using crypto ATMs offered by unauthorised entities, warning that users are not protected under securities laws and are exposed to fraud, money-laundering and other risks.
• Because there is no authorised ATM channel, residents who want to buy crypto compliantly are generally directed to SC-registered exchanges instead.

If you encounter a crypto ATM in Malaysia, treat it with caution and verify the operator's regulatory status before using it. Confirm the current position with the SC, as enforcement priorities and any future licensing approach can change.

Cryptocurrency mining is not, in itself, illegal in Malaysia. There is no specific ban on running mining hardware. The serious legal exposure comes from electricity theft, which is a separate and heavily enforced offence.

• Electricity theft is the red line. Tampering with or bypassing electricity meters to power mining rigs is prosecuted under the Electricity Supply Act, which carries severe penalties — reportedly up to a substantial fine and/or a lengthy prison term.
• Large-scale crackdown. Through 2025, the national utility Tenaga Nasional (TNB) and authorities intensified enforcement, reporting many thousands of premises tied to illegal power siphoning for mining and very large estimated losses. A joint task force has used technology such as drones with thermal imaging and smart-meter monitoring to detect abnormal usage and shut down illicit rigs.
• Energy and cost factors. For legitimate operators, profitability depends heavily on electricity prices and reliable supply. Interest in energy efficiency and cleaner power sources is a recurring theme, but mining remains an industrial-scale activity rather than a casual one.

The takeaway: mining itself is legal, but it must use lawfully supplied, properly metered and paid-for electricity, and operators should consider their tax and business obligations. Illegal power tapping is treated as a serious crime.

Crypto can be used for cross-border value transfer, and some people use Bitcoin or stablecoins to move money internationally, potentially faster or cheaper than some traditional channels. In Malaysia, such activity intersects with AML/CTF rules overseen by the SC and BNM, including expectations around customer due diligence and the international Travel Rule, which requires originator and beneficiary information to accompany transfers handled by in-scope service providers.

Practical points for anyone considering crypto for remittances:

• Use regulated channels where possible, and understand the fees on both the sending and receiving sides, including conversion to local currency.
• Mind volatility. Bitcoin's price can move between sending and receiving; stablecoins reduce but do not eliminate this risk and carry their own counterparty considerations.
• Confirm details carefully. Crypto transactions are generally irreversible, so a wrong address can mean permanently lost funds.
• Keep records for compliance and any tax implications, since conversions and disposals may matter for your tax position.

The recipient's country has its own rules on receiving and converting crypto, so check the regulations at both ends and use providers that comply with the relevant requirements.

Whether Bitcoin or any crypto is a "good" investment depends entirely on your financial goals, time horizon and tolerance for risk — and no honest guide can promise returns. Crypto is highly volatile, can fall sharply and quickly, and is not covered by the deposit-protection arrangements that apply to bank savings.

Some Malaysians treat a small allocation as a high-risk component of a diversified portfolio. Points worth weighing:

• Volatility and drawdowns can be severe; only consider money you can afford to lose entirely.
• No deposit guarantee. Crypto held on platforms or in personal wallets is not protected like bank deposits, so platform failure or loss of keys can mean total loss.
• Limited approved tokens. On regulated Malaysian exchanges, only SC-approved assets are available, which constrains choice but also filters out some higher-risk listings.
• Tax considerations. Active trading may be treated as taxable income, adding record-keeping and reporting work.

This is general information, not financial advice. Consider speaking with a licensed financial adviser and reviewing the SC's investor-education resources before investing, and be wary of any scheme promising guaranteed or unusually high returns.

A careful, compliant path to buying Bitcoin in Malaysia looks like this:

• 1. Choose a registered exchange. Pick a Digital Asset Exchange (DAX) that appears on the Securities Commission's registered list. Compare fees, security record, supported tokens and custody arrangements.
• 2. Create and verify your account. Complete KYC by submitting your identification and details. Enable two-factor authentication, preferably via an authenticator app rather than SMS.
• 3. Deposit funds. Fund the account in ringgit, typically by bank transfer, allowing for any bank limits or processing times.
• 4. Place an order. Buy Bitcoin using a market or limit order. Start small while you learn how the platform works.
• 5. Secure your holdings. For meaningful amounts, consider moving crypto to a wallet you control. A hardware (cold) wallet with a securely stored offline backup of the recovery phrase offers strong protection; never store the phrase online or share it.
• 6. Keep records. Save transaction details and ringgit values in case they are needed for tax purposes.

Stay alert to scams throughout: fake apps, unsolicited "investment managers" who contact you first, guaranteed-return schemes, unauthorised offshore platforms and pressure to act urgently are all warning signs.

Key risks. Beyond price volatility, the main risks for Malaysian users are scams and fraud (including unauthorised platforms and impersonation), dealing with unlicensed operators who fall outside legal protection, platform failure or insolvency, loss or theft of private keys, and irreversible transactions. For would-be miners, the dominant legal risk is electricity theft, which is treated as a serious crime. Self-custody removes counterparty risk but shifts full responsibility for security onto you.

Outlook. Malaysia is steadily tightening and clarifying its securities-led regime. The SC's framework for exchanges, custodians and token offerings has matured, recent amendments and the early-2026 broking clarifications point to more detailed conduct rules, and BNM continues to emphasise AML/CTF compliance. At the same time, authorities have escalated enforcement against illegal mining and unauthorised operators. The likely direction is stronger investor protection and clearer rules for licensed players, alongside continued scrutiny of unregulated activity — but none of this removes market risk.

Because the framework keeps evolving, treat lists, thresholds and requirements as moving targets. Verify the current position with the Securities Commission Malaysia (SC), Bank Negara Malaysia (BNM) and the Inland Revenue Board (LHDN). This article is informational only and is not legal, tax or financial advice.

Is Bitcoin legal in Malaysia?

Who regulates cryptocurrency in Malaysia?

Do I have to pay tax on crypto in Malaysia?

Are Bitcoin ATMs legal in Malaysia?

Is Bitcoin mining legal in Malaysia?