Before sending money, check the operator’s exact legal name and official website, the specific asset and the activity being offered. SC registration of a Malaysian digital asset exchange is not a promise of profit, approval of every advertised service or legal-tender status. Asset listing and Shariah status are separate checks, and the May 2026 rules changed who assesses assets for listing.
What do BNM and SC each regulate?
The SC’s current portal describes its framework for digital-asset trading, issuance and safekeeping. A digital asset exchange, or DAX, facilitates trading; an initial exchange offering platform facilitates token fundraising; a digital asset custodian provides custody. These are different roles, so check the category that matches the service.
The Prescription Order 2019, in the linked consolidated copy incorporating the 2025 amendment, prescribes digital currencies and tokens meeting its conditions as securities. It does not make every digital record a security. BNM oversees payment systems and instruments. The regulators’ 16 December 2020 joint response distinguished investible digital assets from legal tender and general payment instruments; it was not a rule that investment registration makes crypto money.
SC Digital Assets portal (checked 6 October 2026) · Prescription of Securities Order 2019, consolidated copy (consolidated, 2025 amendment) · BNM/SC joint response on cryptocurrencies (16 December 2020)
Check the platform, asset and activity separately
Use the SC Digital Assets portal to verify the Malaysian operator’s legal name and category, and follow its official website link. On our access date, Luno Malaysia Sdn Bhd appears in the DAX list. That dated example does not establish the status of a lookalike site, offshore affiliate or social-media account using its logo.
For the asset, check its exact name, ticker and the operator’s current listing disclosures. The SC’s DAX FAQ revised on 20 May 2026 says the requirement to seek SC concurrence for offering each asset on a DAX was removed: the operator assesses assets for listing under the rules. Therefore “listed” should not be rewritten as “SC individually approved this coin”. The portal’s asset/Shariah table is still useful, but do not treat it as a complete inventory of every platform’s current offerings.
For the activity, ask whether you are buying and selling, holding with a custodian, sending to a wallet, joining staking or lending, or using a leveraged product. A platform’s DAX registration alone does not establish authorisation or Shariah status for each extra arrangement. The current FAQ also distinguishes an order-book model matching buy/sell orders from a direct-trade model where the operator is the counterparty. Ask which one you are using.
DAX Framework FAQ (20 May 2026 revision) · Guidelines on Recognized Markets (20 May 2026 revision)
Asset, platform and activity checks
Malaysia · access-date snapshot 6 October 2026 · live registers can change.
1. Platform identity
- Exact contracting nameMatch it to SC’s relevant operator category and follow the official website link.
- Lookalike checkCheck domain and contact details; an absent alert is not authorisation.
2. Asset and status
- Exact asset and listing disclosureMay 2026: DAX operator assesses assets for listing under SC rules.
- Separate Shariah recordCheck the exact SC SAC entry and scope where religious compliance matters.
3. Actual activity
- Trading, custody or something else?Read the agreement for that service, including the counterparty and exit rules.
- Do the records cover the offer?Unmatched name, activity or domain → pause and resolve before paying.
Reading the diagram: Work through all three groups. A platform identity match does not answer asset risk, activity authorisation or religious status. This is a verification checklist, not an automated approval or suitability decision.
A logo is not a platform check
In a fictional exercise, Aina sees an advertisement using the name “Platform X Malaysia” and promising a fixed return. She first identifies the contracting entity, checks its exact registered name and independently opens the official site linked by SC. She then compares the specific activity with the operator’s disclosures. The advertisement’s logo, app-store presence or company registration number does not answer those questions. No actual Platform X is being assessed here.
Also check the SC Investment Checker and Investor Alert List. SC warns that the alert list includes possible clones and is not exhaustive. No alert found does not mean authorised. If names, domains, recipient accounts or the offered service do not match, stop the payment and resolve the discrepancy through independently obtained official contacts.
SC Investor Alert List (checked 6 October 2026) · SC Investment Checker (checked 6 October 2026)
Trading, payment and legal tender are different
Buying crypto as an asset, transferring it to another address and paying a shop are different functions. The 2020 joint response says privately issued cryptocurrencies are not legal tender in Malaysia and does not promote them as a general payment instrument. A shop’s willingness to accept something does not establish legal-tender status or authorisation of the payment service. This guide does not decide the legality of a particular merchant arrangement.
Read that historical statement alongside BNM’s newer controlled work. Its DAIH initiatives table updated on 30 July 2026 includes ringgit stablecoins for business-to-business settlement and tokenised deposits for payments. DAIH admission does not guarantee regulatory recognition; a live launch needs further BNM assessment. These tests do not make Bitcoin legal tender or establish a retail payment service available to you.
BNM/SC joint response on cryptocurrencies (16 December 2020) · Digital Asset Innovation Hub (DAIH) (update 30 July 2026)
Trading, payment and legal-tender status
Distinct functions; the 2020 statement and July 2026 testing update have different scopes.
Trading an asset
- Buy or sell through a DAXCheck operator registration, listing disclosures, execution and fees.
- What it establishesA regulated trading framework; no guaranteed price or general payment status.
Transferring or paying
- Send a token or use a proposed payment serviceCheck supported network, recipient, issuer claim and the actual service’s regulatory scope.
- DAIH controlled initiativesJuly 2026 table includes B2B stablecoins/tokenised deposits; admission does not guarantee recognition.
Legal-tender question
- Privately issued cryptocurrenciesThe BNM/SC 2020 joint response states these are not legal tender in Malaysia.
- Do not merge classificationsDAX registration, merchant acceptance and test admission do not establish legal-tender status.
Reading the diagram: Each column answers a different question. Trading access is not payment authorisation. Controlled tokenised-money tests do not change Bitcoin’s status into legal tender.
From ringgit in to ringgit out
Depositing ringgit gives you a platform balance, not crypto ownership by itself. An executed purchase then exchanges that balance for the specified crypto interest under the terms. With an order book, another matched trader is normally on the other side; with direct trade, the operator is your counterparty. The price, fee basis and execution result matter. A sell order must actually execute before you have sale proceeds to withdraw.
SC’s May 2026 rules set client-asset safeguards, including investor-money trust accounts, digital-asset controls and segregation from the operator’s inventory. These requirements are not an audit finding that your money is immediately recoverable in every failure. Check who holds the money and assets, who controls keys and how withdrawal works during an outage or insolvency.
Luno Malaysia’s terms state that legal ownership of crypto held in its wallets remains with the customer, while Luno controls the private keys and may use shared blockchain addresses with separate customer records. That is an attributed contract description, not our guarantee of insolvency recovery. Keeping a platform balance is different from personally controlling a wallet’s signing keys.
Guidelines on Recognized Markets (20 May 2026 revision) · DAX Framework FAQ (20 May 2026 revision) · Luno Malaysia Terms of use (updated 14 May 2026)
From money in to withdrawal
Fictional platform flow · RM1,000 input · 1% buy fee · 1% sell fee · RM1 bank withdrawal fee. These are not Luno fees.
Money and counterparties
- Your bank → platform balanceRM1,000 arrives; deposit alone does not buy crypto.
- Executed buy → crypto held in custodyRM10 buy fee; RM990 buys crypto. Counterparty is matched seller or direct-trade operator.
- Executed sale → ringgit balanceAt unchanged price: RM990 gross less RM9.90 sell fee = RM980.10. Custodian/key control follows the agreement.
- Platform → your approved bank accountRM980.10 less RM1 withdrawal fee = RM979.10. No crypto-network withdrawal is modelled.
Price scenarios for the same crypto quantity
- Price falls 20%RM792 gross − RM7.92 sell fee − RM1 = RM783.08 returned.
- Price unchanged: 0%RM990 gross − RM9.90 sell fee − RM1 = RM979.10 returned.
- Price rises 20%RM1,188 gross − RM11.88 sell fee − RM1 = RM1,175.12 returned.
Reading the diagram: Follow the first column from bank deposit to completed withdrawal. The second varies only the sale price; all trades execute in full in this model. An account display is not proof that cash is already in your bank.
Costs can reduce the amount you get back
Figure 3 assumes RM1,000 paid in, a fictional 1% buy fee deducted first, a 1% sell fee on gross sale proceeds and a RM1 withdrawal fee. At an unchanged price, RM990 × 99% − RM1 = RM979.10 returns to the bank. The RM20.90 difference is modelled fees, not a prediction. A 20% fall gives RM783.08; a 20% rise gives RM1,175.12. No borrowing, yield, spread, tax or network withdrawal is included.
For a real fee-document example checked on our access date, Luno’s Malaysia page displays 2% for instant buying and 2% for instant selling; Exchange trading uses separate tiers based on trading volume and order type. Its bank withdrawal fee is shown separately as RM0.10, and sending crypto has its own fee rules. These figures are not the fictional rates in Figure 3 and are not a complete quote. Check the final preview for the exact route, any price spread, limits and total received.
Who can participate, and what about Shariah?
Luno Malaysia’s eligibility and verification sections require age 18 or above, capacity, an account in your own name and identity verification. They do not specify a Muslim-only condition. This is a limited provider-document observation, not guaranteed eligibility for all Malaysians or every platform. Nationality, residency, verification and service restrictions still need checking for the actual account.
A Muslim reader seeking Shariah compliance needs a separate asset and arrangement check. On 6 October 2026 the SC table records Bitcoin and Ethereum as Shariah-compliant, referring to its SAC meeting of 20 July 2020. The original resolution is limited to SC-regulated digital assets and qualifying investment/trading on SC-registered DAX. It does not settle every offshore, lending, staking or leveraged arrangement using those assets.
The ICM guidelines effective 30 March 2026 require DAX operators proposing to offer Shariah-compliant digital currency to seek SC SAC endorsement before offering it (38.07). This requirement is distinct from the May 2026 listing-assessment reform. Do not read a table note or lack of a confirmed status as a declaration of either compliance or prohibition. Non-Muslim readers can use the same platform, fee and custody checks without those checks becoming religious membership conditions.
Luno Malaysia Terms of use (updated 14 May 2026) · SC Digital Assets portal (checked 6 October 2026) · SC SAC resolution on digital assets (2020 meetings) · Islamic Capital Market Products and Services guidelines (effective 30 March 2026)
Common traps and an exit checklist
“Registered means my capital is safe”, “listed means each coin is individually SC-approved”, and “not on the alert list means licensed” all skip a necessary check. A price fall, thin market, failed login or suspended withdrawal can affect an exit even when you used a registered platform. No regulator badge promises a buyer at your preferred price.
- Match the legal entity, domain and activity with current official records; keep the dated evidence.
- Read the exact asset’s listing disclosure and separate Shariah record where relevant.
- Identify the counterparty, custodian, key controller and your contractual rights.
- Compare total ringgit in and out, not just the advertised percentage fee.
- Check withdrawal timing, bank-account rules, supported network/address and recovery procedure before sending crypto.
- Retain trade confirmations and the complaint route. If approval scope is unclear, obtain a written answer for that exact service.
Guidelines on Recognized Markets (20 May 2026 revision) · SC Investor Alert List (checked 6 October 2026)
Read next
References
Sources checked on 6 October 2026, Malaysia time. The live SC portal is used as a dated snapshot, not a frozen exhaustive asset list. The current DAX guideline and FAQ are revised 20 May 2026; the linked consolidated Prescription Order incorporates the 2025 amendment. The 2020 BNM/SC statement and SC SAC resolution retain their dates and scope. Luno documents illustrate one provider’s terms, not a recommendation. All fictional model figures are labelled separately from provider fees.
- SC Digital Assets portal (checked 6 October 2026)Securities Commission Malaysia · Live register; no overall publication dateOperator lists; tradeable-asset and Shariah-status table
- Prescription of Securities Order 2019, consolidated copy (consolidated, 2025 amendment)Securities Commission Malaysia; Minister of Finance · In force 15 January 2019; incorporates P.U.(A) 6/2025Paragraphs 2–4
- Guidelines on Recognized Markets (20 May 2026 revision)Securities Commission Malaysia · Revised 20 May 2026; SC-GL/6-2015 (R14-2026)15.20–15.25, 15.34–15.41, 15.49–15.50, 15.56
- DAX Framework FAQ (20 May 2026 revision)Securities Commission Malaysia · Issued 15 November 2022; revised 20 May 2026Questions 1 and 6–7
- BNM/SC joint response on cryptocurrencies (16 December 2020)Bank Negara Malaysia and Securities Commission Malaysia · 16 December 2020Regulator roles, legal tender and payment instrument paragraphs
- Digital Asset Innovation Hub (DAIH) (update 30 July 2026)Bank Negara Malaysia · Initiatives updated 30 July 2026; FAQ undatedIntroduction; initiatives; FAQ 1, 2 and 4
- Luno Malaysia Terms of use (updated 14 May 2026)Luno Malaysia Sdn Bhd · Last updated 14 May 2026; separate effective date not statedSections 3, 6, 7, 13–16
- Luno fees and limits in Malaysia (checked 6 October 2026)Luno · Live page; revision/effective date not statedInstant buy/sell; Exchange fees; withdrawal; sending fees
- SC SAC resolution on digital assets (2020 meetings)Shariah Advisory Council of Securities Commission Malaysia · Meetings 29 June and 20 July 2020; publication date unstatedIntroduction and resolution, pp. 1–4
- Islamic Capital Market Products and Services guidelines (effective 30 March 2026)Securities Commission Malaysia · Revised/effective 30 March 2026; R2-202638.07; Appendix 18
- SC Investor Alert List (checked 6 October 2026)Securities Commission Malaysia · Live list; checked 6 October 2026Introductory notice: clones and non-exhaustive scope
- SC Investment Checker (checked 6 October 2026)Securities Commission Malaysia · Live tool; checked 6 October 2026Public authorised-entity search