Bookkeeping compliance in Malaysia goes beyond maintaining an accurate ledger. Companies must keep sufficient accounting records under the Companies Act 2016, meet SSM filing requirements through MBRS 2.0 and comply with LHDN obligations covering corporate tax, e-Invoice and, where applicable, MITRS submissions.
Under Section 245 of the Companies Act 2016, companies must maintain accounting records that sufficiently explain their transactions and financial position, make appropriate entries within 60 days of the relevant transactions and retain the records for seven years.
From 1 September 2026, taxpayers with annual income or sales below RM3 million are generally exempt from mandatory e-Invoice implementation. However, the exemption may not apply where specified ownership, holding-company, related-company or joint-venture conditions are met. For subsidiaries of overseas groups, the Malaysian entity’s revenue alone therefore may not determine its e-Invoice position.
This guide explains how the SSM and LHDN requirements interact, the deadlines businesses should track and where foreign-owned Malaysian entities require additional attention.
Why one set of books now answers to two regulators
Two regulators enforce digital-first requirements against the same records. LHDN validates transaction-level data through the MyInvois system. SSM accepts annual returns and financial statements only as structured XBRL data through MBRS 2.0.
Manual and spreadsheet-based bookkeeping can comply with Malaysian law, but businesses must still meet the statutory recordkeeping, tax and digital filing requirements. As transaction volumes grow, disconnected manual processes can make those obligations more difficult to manage efficiently.
The gap between when a transaction happens and when it is recorded is where both problems begin. A business that relies on month-end manual reconciliation may face a higher risk of inconsistent transaction data, duplicate entry and delayed exception detection, particularly where e-Invoice information is maintained separately from the accounting ledger
The scale is not marginal. Malaysia’s micro, small and medium enterprises contributed 39.7% of national GDP in 2025, with value added of RM689.8 billion, up from RM652.8 billion in 2024, according to the Department of Statistics Malaysia release of 30 July 2026. MSME growth of 5.7% outpaced the wider economy’s 5.2%. Enforcement capacity has been built to match a sector of that size.
Bookkeeping Compliance Malaysia: Which filing obligations apply to your Malaysian entity
Nine core accounting, corporate and tax obligations commonly interact with a Malaysian company’s books and records.
| Obligation | Applies to | Deadline | Legal basis |
|---|---|---|---|
| Annual return | Company incorporated in Malaysia | Within 30 days of the anniversary of incorporation | Section 68, Companies Act 2016 |
| Annual return of foreign company | Foreign company registered in Malaysia | Within 30 days of the anniversary of its registration date, subject to any further period allowed by the Registrar | Section 576, Companies Act 2016 |
| Circulation of financial statements | Malaysian Private companies | Within six months of financial year-end | Section 258, Companies Act 2016 |
| Lodgement of financial statements | Companies and registered foreign companies | Within 30 days of circulation to members | Section 259, Companies Act 2016 |
| Financial statements of foreign company | Foreign company registered in Malaysia | Generally within 2 months of its AGM, subject to Section 575 | Section 575 |
| Estimate of tax payable (Form CP204) | Companies | Generally, an existing company submits CP204 at least 30 days before the beginning of its basis period. A newly commenced company may generally be required to submit within three months from commencement, subject to the exemptions and conditions under Section 107C | Sections 107C(2) and 107C(4)(a), Income Tax Act 1967 |
| Corporate tax return (Form C) | Companies | Within seven months after the close of the company’s accounting period. | Income Tax Act 1967 |
| e-Invoice issuance via MyInvois | By turnover band and group status | Transaction-based, subject to the consolidated e-Invoice rules, applicable exemptions and any current interim relaxation. | Section 82C, Income Tax Act 1967 |
| Accounting records | Companies | Appropriate entries within 60 days; records retained for seven years. Location and accessibility requirements differ depending on whether the records relate to Malaysian or overseas operations | Section 245, Companies Act 2016; Section 82, Income Tax Act 1967 |
The e-invoicing rollout by turnover band
- Above RM100 million: began on 1 August 2024.
- RM25 million to RM100 million: began on 1 January 2025.
- RM5 million to RM25 million: began on 1 July 2025.
- RM3 million to RM5 million: began on 1 January 2026, with a relaxation period allowing consolidated e-invoicing to 31 December 2027.
- Below RM3 million: generally exempt from 1 September 2026, subject to the criteria below.
What MBRS 2.0 changed
MBRS 2.0 is SSM’s digital submission platform, and it accepts filings only in XBRL, a structured data format with defined tagging requirements. Mandatory implementation began on 1 December 2024 for annual returns, unaudited financial statements and related exemption applications.
Foreign companies registered in Malaysia are also within the MBRS framework, but their statutory filing obligations arise under separate Companies Act provisions, including Sections 575 and 576, and should not be treated as identical to those of Malaysian-incorporated companies.
XBRL cannot be produced reliably from disorganised records. Where the source data is inconsistent, tagging is done manually at filing time, which is the slowest and most error-prone point in the year.
The exemption trap that catches foreign-owned subsidiaries
The RM3 million e-invoicing exemption is a group test, not a turnover test. A company below the threshold loses the exemption where its ownership or group structure disqualifies it, regardless of its own revenue.
Four situations remove the exemption:
- The company is owned, wholly or partly, by another company that does not itself qualify for the exemption.
- The company is a subsidiary of a holding company that does not meet the exemption criteria. A subsidiary does not qualify on its own revenue alone.
- The company forms part of a corporate group that does not meet the criteria. Shared directorship alone does not make two companies related.
- Annual revenue reaches or exceeds RM3 million, at which point the standard implementation timeline applies.
This is where most foreign-owned entities go wrong. A newly incorporated Malaysian subsidiary of an established overseas parent is frequently outside the exemption from day one, while a locally owned business of identical size sits comfortably inside it. Sizing your obligation from the Malaysian entity’s turnover alone will give you the wrong answer.
Confirm the position against your actual group structure before assuming an exemption applies. Where the parent is overseas, the analysis turns on the corporate shareholder’s position rather than on any figure in the Malaysian accounts.
What non-compliance costs
Exposure runs from a few hundred ringgit to compounding daily fines, and it sits with the company and with every officer in default — which means the directors you appointed, not the person keeping the books.
On the tax side
Non-compliance may constitute an offence for each affected transaction, with penalties under paragraph 120(1)(d) of the Income Tax Act 1967 ranging from RM200 to RM20,000, imprisonment for up to six months, or both. The key phrase is per offence: exposure scales with the number of non-compliant transactions, not the number of filing periods.
On assessment windows, the general time bar is five years under Section 91(1). That limit does not apply where there is fraud, wilful default or negligence, under Section 91(3). You must retain records for seven years.
On the corporate side
Failure to lodge an annual return under Section 68 of the Companies Act 2016 carries a fine of up to RM50,000, with a further fine of up to RM1,000 per day for a continuing offence. Failure to circulate financial statements under Section 258 carries up to RM50,000 plus up to RM500 per day. Failure to lodge them under Section 259 carries up to RM50,000 plus up to RM1,000 per day. Persistent non-filing can lead to the company being struck off.
Enforcement is active, not theoretical
LHDN reported RM1.4 billion in undeclared income identified through e-invoice review in a media release dated 3 February 2026. A compliance operation reported in April 2026 identified RM3.5 billion in unreported income, with 38,906 taxpayers filing after reminders, 108 found not to have implemented e-invoicing, and RM760.7 million in tax payable.
SSM has strengthened its focus on timely statutory submissions, including annual returns, financial statements and beneficial ownership information, and has indicated that non-compliance may lead to enforcement action against responsible company officers and company secretaries.
Not sure where your entity sits? Get your SSM and LHDN filing position reviewed before your next deadline — a compliance review takes less time than a single late filing costs.
Manual, in-house cloud or outsourced: how the three options compare
The choice is not really about software. It is about who holds the deadline and who carries the liability when it slips.
| Manual or spreadsheet | In-house cloud accounting | Outsourced to a local provider | |
|---|---|---|---|
| e-Invoice readiness | Poor. Invoices are produced after the fact, not at the point of sale | Good, where the system is MyInvois-integrated and configured correctly | Good, and the configuration is someone else’s responsibility |
| XBRL output for MBRS 2.0 | None. Tagging is done manually at filing time | Varies. Many systems export data that still needs mapping | Handled as part of the filing |
| Deadline tracking | Held informally, often by one person | Depends on internal discipline; the software does not know your incorporation date | Held contractually, with a calendar built around your dates |
| Where liability sits | With the directors | With the directors | With the directors — outsourcing does not transfer statutory liability |
| Typical failure mode | A recording error in month one surfaces as a filing error in month three | Correct data, missed deadline, usually the annual return | Poor handover of source documents from the local team |
| Best suited to | Dormant entities and holding companies with minimal activity | Groups with a finance function already in Malaysia | Groups running Malaysia remotely or without local finance staff |
One point deserves emphasis because it is regularly misunderstood in group structures. Outsourcing moves the work; it does not move the liability. Statutory responsibility remains with the company and its officers, whoever prepares the filing, which is why handover quality matters more than platform choice.
Building one compliance calendar for both regulators
A single calendar works because the obligations run off three anchor dates, not one. Map those three and the rest follows.
- The financial year end drives the circulation of financial statements (six months), their lodgement with SSM (a further 30 days), and the Form C corporate tax return (seven months).
- Date of incorporation drives the annual return, due within 30 days of each anniversary. This is independent of the financial year-end, and groups miss it most often because it does not align with anything else in the finance calendar.
- The basis period drives the CP204 tax estimate, due 30 days before it begins, or within three months of commencing operations for a newly established company.
Because the annual return runs off the incorporation date, a company with a December year-end can have an annual return falling in, say, March, entirely disconnected from its reporting cycle. Groups that build the calendar around the financial year alone will miss it.
What to check before you change systems
Before recommending a solution, InCorp Malaysia reviews three things:
- How the entity currently records transactions, and the lag between transaction and entry.
- Whether that data is structured well enough to produce XBRL without manual re-tagging.
- Where the SSM and LHDN deadlines actually fall across the year, given the incorporation date, financial year end and basis period.
That sequence matters. Choosing a platform before mapping the deadlines produces a system that records cleanly and still files late.
Government support is available for part of the move. “Budget 2026 introduced a 50% additional tax deduction for qualifying SMEs on expenditure relating to recognised AI and cybersecurity training, subject to the applicable eligibility requirements. Grant and matching-support programmes change scope regularly, so confirm current eligibility before building a business case.
Related guides
- Annual Filing in Malaysia: How to Avoid Corporate Compliance Pitfalls
- MBRS 2.0 Malaysia: Mandatory Filing Guide for Companies
- Accounting and Bookkeeping in Malaysia: Five Practical Tips
Speak to an adviser
Get your SSM and LHDN filing position reviewed. We map your incorporation date, financial year-end, and basis period into one calendar, confirm whether your entity qualifies for the e-invoicing exemption under its actual group structure, and tell you what needs to change before your next deadline — not after it has passed.
FAQs for Bookkeeping Compliance Malaysia
- Under Section 245 of the Companies Act 2016, companies must maintain accounting and other records that sufficiently explain their transactions and financial position and enable proper financial statements to be prepared. Companies should generally make appropriate entries within 60 days of completing the relevant transaction, and they must retain the records for seven years.
- Yes. Malaysian law does not require companies to use a specific accounting or cloud bookkeeping system. However, businesses must still maintain complete and accurate records, make timely accounting entries and comply with SSM and LHDN requirements. As transaction volumes grow, manual processes can increase the risk of errors, duplicate entries and reconciliation issues.
- A company incorporated in Malaysia must generally lodge its annual return with SSM within 30 days of the anniversary of its incorporation under Section 68 of the Companies Act 2016. Foreign companies registered in Malaysia are subject to separate annual return requirements under Section 576.
- From 1 September 2026, taxpayers with annual income or annual sales below RM3 million are generally exempt from mandatory e-Invoice implementation. However, the exemption is subject to additional conditions. A Malaysian entity may still fall outside the exemption where certain shareholder, holding-company, related-company or joint-venture conditions are met.
- Foreign ownership itself does not automatically determine whether a Malaysian company must implement e-Invoice. A Malaysian subsidiary with annual income or sales below RM3 million may nevertheless fall outside the exemption if its holding company, non-individual shareholder, related company or joint venture meets the relevant conditions under HASiL's e-Invoice guidelines. Businesses should therefore assess both the Malaysian entity and its wider group structure.
- Under the Companies Act 2016, companies must generally retain accounting records for seven years after the relevant transactions or operations are completed. Malaysian tax legislation also requires record retention for supporting tax documentation. Businesses should maintain organised records that can support SSM filings, tax returns, e-Invoice transactions and regulatory reviews.
Get your SSM and LHDN deadlines mapped
About the Author
