Regulatory overview
- Scope
- Malaysia
- Authorities
- Regulatory index
- Latest regulatory change
Malaysia distinguishes DAX exchanges, IEO platforms, DAC custodians and specified services by CMSL-licensed brokers. Tokenized securities retain their underlying product framework and are not covered by DAX registration. The May 2026 reform strengthens capital, governance and custody, with a financial transition for existing operators.
A business seeking token-based funding in Malaysia should start with the right offered to investors. A tokenized share, an issuance through an IEO platform and an asset traded on a DAX do not necessarily follow the same route, even when they all use distributed infrastructure.
The Securities Commission distinguishes the instrument, issuance, trading and custody. That distinction matters when selecting partners: registration for one activity does not itself authorise the others. The May 2026 DAX reform also introduces requirements and deadlines that belong in the operating budget.
What the token finances and which framework applies
The system distinguishes digital assets within the 2019 prescription order from capital market products represented by tokens. Some digital assets are prescribed as securities under that order, but this does not merge their frameworks. The DAX guidelines exclude tokenized securities, such as shares, debt and fund units, from their operational digital asset category.
The Guidelines on Digital Assets govern IEO offerings and DAC custody, while recognised market guidelines govern exchanges. A project may need separate permissions for issuance, distribution, trading and custody. Product technology does not displace requirements arising from rights, activities and the target market.
How the SC separates issuance, trading and custody
The SC supervises these capital market activities and publishes registered categories and entities. Legal entity, category and scope must be checked rather than inferring authorisation from a brand or group membership. A company's registration does not automatically validate every asset it markets.
An IEO operator assesses issuers and offerings under the specific guidelines, while custodians and exchanges have separate responsibilities. Paragraph 13.02 requires additional DAX registration where an IEO platform also facilitates digital asset trading. Engaging a third party neither makes these functions interchangeable nor removes their duties.

Which entry route each participant needs
The May 2026 DAX reform requires local incorporation, minimum paid-up capital of RM15 million and shareholders' funds calculated by operating model and expenses. The official FAQ gives operators registered before 20 May 2026 until 20 May 2028 to meet new financial requirements, while maintaining previous requirements during transition.
Practice Note 1/2026 permits specified services by CMSL holders dealing in securities, including licences restricted to listed securities. It requires prior notification, a declaration and readiness validation by a registered auditor. It regulates asset sourcing, dealing and custody; it neither authorises an unlicensed intermediary nor automatically grants exchange registration.
Which investor rights survive tokenization
The SC explains that a tokenized product retains its framework where the instrument's legal characteristics remain unchanged: fund units remain subject to fund rules, and bonds to debt requirements. Architecture and smart contracts must reflect rights, restrictions and exercise mechanisms; changes to those features require reconsidering classification.
Documentation must identify the authoritative ownership record, requirements for valid transfer and consequences of conflicting records. It must also specify custody of underlying products and insolvency rights. Digitally representing an economic interest does not itself give direct ownership of each asset held by the fund, issuer or vehicle.

How listing and asset protection requirements change
The DAX reform FAQ explains that prior SC concurrence for each asset offered by an exchange is removed, with greater assessment responsibility placed on the operator. Listing, delisting, disclosure and higher-risk asset controls must apply. Streamlining does not constitute public approval of an asset or remove custody and governance controls.
The CMSL broker framework retains different conditions: assets with SC concurrence, cash-upfront purchases, no margin financing and no discretionary management of that account. It requires segregation and registered DAC custody unless written approval is obtained for a foreign custodian. DAX changes must not automatically be extended to this route.
What to prepare before approaching the SC
Before selecting a DAX or custodian, document the instrument, its holders and each provider’s activity. For a capital market product, also explain evidence of ownership, transfer finality and recovery following lost keys. The SC’s tokenization FAQs identify these as matters for assessment.
Connect that classification with current registrations, contracts and the operator’s applicable transition timetable. If the model changes the original product’s economic or legal rights, reassess its classification before relying on an existing authorisation or earlier documentation.
To understand how this framework applies to your project, discuss your case with our team.
Key takeaways
- DAX registration does not replace permissions for tokenized securities.
- The 2026 reform removes prior asset concurrence for DAX while strengthening assessment responsibility.
- New financial requirements have a transition until May 2028 for qualifying existing DAX operators.
- The CMSL broker note retains its own asset, dealing and custody conditions.
Regulatory milestones
Note for specified CMSL brokers
Additional digital asset broking conditions are specified.
DAX framework reformed
Entry, asset listing and custody requirements change, with financial transition.
Frequently asked questions
Not on the basis of DAX registration. The guidelines distinguish digital assets from tokenized securities and refer the latter to the relevant instrument and activity framework.
Operators registered before 20 May 2026 have a transition until 20 May 2028 while maintaining previous financial requirements. This does not exempt them from other duties.
The tokenized product FAQs tie the assessment to the product’s rights and features. If the structure changes those rights, classification must be reassessed; the bond label alone does not decide it.
Yes. The SC recommends early engagement to explain the model, its regulatory treatment and operational readiness. That engagement does not replace applicable permissions.
The SC calls for assessment of legal enforceability and ownership, alongside transfer finality and recovery mechanisms. The design must connect the technical record with the product’s rights.





