Why Choose Labuan for Crypto Licensing?
Labuan offers a regulated midshore Asia-Pacific pathway for digital-asset businesses targeting non-Malaysian institutional and high-net-worth clients. The Labuan Financial Services Authority licenses Money Broking, Credit Token, Securities Token Offering, fund management and exchange operations under the Labuan Financial Services and Securities Act 2010, supported by a 3% tax rate on net audited profits and total licensed entities of 838 at end-2024.[1] The framework rewards operators willing to fund local substance.
A Multi-Pathway Licensing Framework Under One Regulator
Labuan operates seven principal licensing pathways for digital-asset businesses, all administered by the Labuan FSA: Money Broking Business with Digital Asset activity (intermediary OTC), Credit Token Business (utility-token issuance and ecosystems), Securities Token Offering (security tokens for shares, debentures, fund units and PCC interests), Securities Licensee (advisory and administration), Fund Manager (portfolio management and dealing in securities), Section 134 Exchange (full digital-asset securities exchange) and Payment System Operator.[2] Operators can sequence pathways within a single Labuan entity where activities permit, reducing the friction of multi-regime operations across Asia.
3% Effective Tax with a Genuine Substance Trade-Off
Labuan business activity is taxed at 3% of net audited chargeable profits under the Labuan Business Activity Tax Act 1990, conditional on satisfying substance requirements set by P.U.(A) 423/2021 as amended by P.U.(A) 325/2025.[3] For Money Broker, Credit Token, Fund Manager and Securities Licensee activities the threshold is two fit-and-proper full-time employees in Labuan and RM 100,000 in annual operating expenditure, with the headcount detail set out under Requirements. Operators willing to fund a small Labuan office obtain a regulated 3% rate; operators not willing to do so should look elsewhere.
An Established Shariah-Compliant Track
Every conventional Labuan licence has an Islamic equivalent under the Labuan Islamic Financial Services and Securities Act 2010. In 2024 Labuan launched the Islamic Digital Asset Centre (IDAC), and Shariah-compliant security tokens (RAMZ) recorded a 21-fold surge in market value to USD 1.05 billion that year.[1] No other Asia-Pacific jurisdiction offers comparable Shariah-compliant digital-asset infrastructure, which makes Labuan the default pathway for operators with GCC capital or Islamic finance LP bases.
A Recognised International Standing
Malaysia is a FATF member, cleared its 5th-round Mutual Evaluation, and was removed from the EU Council’s Annex II grey list, with the dates and instruments set out under International Standing. These signals support institutional onboarding conversations that purely-offshore alternatives often cannot.
Regulatory Framework
Labuan’s digital-asset regime sits at the intersection of three regulators. Labuan FSA licenses digital financial services under the Labuan Financial Services and Securities Act 2010 and the Labuan Islamic Financial Services and Securities Act 2010, with delegated tax administration under the Labuan Business Activity Tax Act 1990.[2][3] Securities Commission Malaysia regulates onshore Malaysian crypto markets under the Capital Markets and Services Act 2007. Bank Negara Malaysia administers ringgit foreign-exchange policy and the AML/CFT framework. The boundaries are statutory, not soft. For the wider category framing, see VASP and CASP licensing explained.
Definition: Labuan Digital-Asset Licence
A Labuan digital-asset licence is an authorisation granted by Labuan FSA under the LFSSA 2010 (or LIFSSA 2010 for Islamic variants) permitting a Labuan company to offer specified digital-asset services (money broking, credit-token issuance, security-token offering, fund management, exchange operation or payment-system operation) to non-Malaysian institutional and high-net-worth clients, taxed at 3% on net audited chargeable profits under LBATA 1990 subject to substance.
Multi-Regulator Perimeter (FSA, SC, BNM)
The Labuan FSA holds exclusive authority over Labuan-domiciled financial entities under the Labuan Financial Services Authority Act 1996; its rule-making power flows from section 4A. Onshore Malaysian crypto activity falls under Securities Commission Malaysia through the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019 (in force ) and the Recognised Markets framework, with six registered Digital Asset Exchanges as of .[7] BNM administers Foreign Exchange Policy Notices 1 to 7 and is the AML/CFT primary supervisor, including the Financial Intelligence Unit under AMLA 2001.[8] Labuan entities are deemed non-residents of Malaysia under FSA 2013 ss.214–215 and IFSA 2013 ss.225–226; ringgit-denominated retail dealings with Malaysian residents are restricted.
Recent Regulatory Developments
- , IRBM Substance Guidelines. The Inland Revenue Board of Malaysia issued Guidelines LHDN.AG.600-1/7/3 on operationalising the “fit and proper full-time employees” criterion. Outsourced staff are explicitly disallowed.[4]
- , P.U.(A) 325/2025. Gazetted . Inserts Regulation 2A into P.U.(A) 423/2021 prescribing five qualitative substance tests (work appropriate to the Labuan activity; competence; no conflicting interests; permanent or contractual employment by the Labuan entity; physical work in Labuan).[3]
- , Labuan IBFC Market Report 2024. Released : 838 licensed entities at end-2024, 627 new company incorporations (+9% YoY), employment in the licensed financial sector at a five-year high of 5,006.[1]
- , Admissibility Framework for Digital Currencies. Issued .[9]
- , Money Broking Guidelines. Revised Guidelines on the Establishment of Money Broking Business in Labuan IBFC issued ; introduced the digital-asset extension, the 14-Day Intrusion Rule (para 7.12) and the 1:1 leverage cap on digital assets (para 7.6).[2]
- , EU Annex II delisting. Malaysia removed from the EU Council list of non-cooperative jurisdictions for tax purposes (Annex II) on .[6]
Regulatory Overlap
Four overlapping regimes shape day-to-day operations: (a) the LFSSA/LIFSSA licence stack at federal-territory level; (b) AMLA 2001 with FIU reporting and FATF Travel Rule overlay; (c) BNM Foreign Exchange Policy Notices governing ringgit flows; (d) the Strategic Trade Act 2010 implementing UNSCR-aligned sanctions. Where activities touch onshore Malaysia, SC Malaysia’s CMSA 2007 framework activates and Labuan licensing alone does not authorise the activity.
License Types and Activities Covered
Labuan FSA licenses seven principal pathways for digital-asset businesses. The Money Broking Business with Digital Asset activity is the most common crypto licence by use; STO, Credit Token, Fund Manager and Section 134 Exchange serve specific business models. Each pathway has a Shariah-compliant equivalent under LIFSSA 2010.
Covered Activities
- Money Broking Business with Digital Asset activity (LFSSA Part VI). Intermediary role: bringing counterparties together for trading or exchanging digital assets, and providing a system or facility to match orders. Strictly prohibits acting as principal, market-maker or liquidity provider. Maximum leverage 1:1 on digital assets (the Money Broking Guidelines para 7.6 cite the speculative nature of these assets). Clients must be institutional investors or high-net-worth individuals as defined in Appendix II of the Guidelines.[2]
- Credit Token Business and Islamic Credit Token Business (LFSSA / LIFSSA Part VI). Issuance, redemption and operation of credit tokens, including blockchain-based ecosystems for digital-asset use. Suitable for utility-token issuance, IEO support and merchant token programmes. Fundraising involving securities falls under the STO Guidelines, not Credit Token.[10]
- Securities Token Offering Issuer (LFSSA Part III; LIFSSA Part III–IV). Issuance of security tokens representing shares, debentures, units in funds, partnership interests, foundation interests or PCC interests. Requires fit-and-proper directors and CEO, a Compliance Officer, an IT Auditor and a Tokenisation Technology Provider.[11]
- Securities Licensee (LFSSA Part IV). Advice and administration of securities. Cannot hold client monies or assets.
- Fund Manager (LFSSA s.40). Portfolio management, dealing in securities, fund establishment and administration. Public-fund client monies must enter segregated trust accounts no later than the next bank business day.
- Section 134 Labuan Exchange. Full digital-asset securities exchange under s.134 LFSSA. Fusang Exchange Ltd was licensed in 2019 as Asia’s first fully licensed securities exchange specialising in digital assets.[12]
- Payment System Operator (LFSSA Part XI). Crypto payment processing, e-wallet, digital-currency settlement to non-Malaysian residents.
Shariah-compliant variants are available under LIFSSA 2010 for every pathway above, with a Shariah Advisory requirement.
What Does NOT Require a Labuan Licence
- Pure equity-holding by a Labuan company (Labuan non-trading activity, taxed at 0% under LBATA, subject to a 1-employee substance floor).
- Activity directed at Malaysian residents in ringgit (this routes to SC Malaysia and BNM, not Labuan FSA).
- Onshore Malaysian retail crypto exchange operation (requires SC Malaysia Recognised Market Operator status with RM 5,000,000 paid-up capital and Malaysian incorporation, not Labuan licensing).[7]
Activity Restrictions for Money Broking with Digital Assets
Money brokers cannot act as principal, market-maker or liquidity provider; cannot hold client digital assets beyond the operational minimum required for the 3-Day Transaction Rule (para 9.4(i)); and must obtain regulatory approvals in any other market they intend to operate in (para 7.15). Leverage on digital assets is capped at 1:1.[2]
Tokenised Securities and RWA
Where a token represents a real-world asset that is itself a security, Labuan routes it through a dedicated securities-token regime rather than the generic digital-asset licence. The Securities Token Offering (STO) Guidelines, issued by Labuan FSA in 2023 under the Labuan Financial Services and Securities Act 2010, define a “securities token” as securities, shares, debentures, bonds or fund units, held in digital form on a distributed ledger. An STO issuer needs Labuan FSA approval and must appoint a trustee, an IT auditor, a tokenisation technology provider and a compliance officer; a Labuan exchange can then list and trade those digital securities.
The honest point is that a generic Labuan digital-asset exchange licence does not cover securities tokens: those sit under the STO Guidelines as a securities-regime product, not the broker pathway. The same logic applies to a tokenised fund unit, which stays under the fund regime rather than a crypto wrapper; we set out that route in our fund licensing guide. We scope the right pathway, securities-token or fund, against your operating model before any filing.
Requirements
A Labuan digital-asset licensee is a Labuan company holding the relevant Labuan FSA licence, satisfying activity-specific capital and substance thresholds, with fit-and-proper directors and a compliant AML/CFT framework. The defining requirement post-2025 is substance: two fit-and-proper full-time employees physically working in Labuan plus RM 100,000 annual operating expenditure for the standard digital-asset pathways.
| Requirement | Money Broker (DA) | Credit Token | STO Issuer | Securities Licensee | Fund Manager |
|---|---|---|---|---|---|
| Minimum paid-up capital | RM 1,500,000 | RM 1,000,000 (Credit Token Guidelines para 5.1)[10] | RM 500,000 maintained at all times | RM 1,000,000 | RM 300,000 working funds |
| Substance, minimum FTE | 2 fit-and-proper, physically in Labuan | 2 | 2 (recommended; activity-specific) | 2 | 2 |
| Substance, minimum annual OPEX | RM 100,000 | RM 100,000 | RM 50,000 (residual) | RM 100,000 | RM 100,000 |
| Minimum directors | 2 | 2 | 2 | 2 | 2 |
| Foreign ownership | 100% permitted | 100% permitted | 100% permitted | 100% permitted | 100% permitted |
| Registered office | Labuan, provided by licensed Labuan trust company | Same | Same | Same | Same |
| Required appointments | Compliance Officer, MLRO | Compliance Officer | IT Auditor, Tokenisation Technology Provider, Compliance Officer, Trustee (private STO) | Compliance Officer | Compliance Officer; PII RM 1m |
| Leverage on digital assets | 1:1 (Guidelines para 7.6) | n/a | n/a | n/a | n/a |
| Auditor | Approved by Labuan FSA | Same | Same | Same | Same |
| Client eligibility | Institutional / HNWI per Appendix II Money Broking Guidelines | n/a (issuer model) | Per offer prospectus | Per advisory scope | Per fund mandate |
Fit-and-Proper Assessment
Labuan FSA applies fit-and-proper criteria to directors, the principal officer, controllers and persons in control, evaluating integrity, competency, financial soundness and operational reputation. Prior FSA approval is required for any shareholding change of 10% or more (Money Broking Guidelines para 7.10). Pursuing a LIFSSA Islamic variant adds Shariah Advisory requirements (qualified Shariah Adviser on an internal Shariah Advisory Board plus annual Shariah audit).
Local Presence, Substance Build-Out
In practice, the IRBM’s Guidelines mean an outsourced two-employee solution is no longer viable: the “fit and proper full-time employees” criterion explicitly excludes outsourced staff and excludes general-duty roles such as office cleaners or tea ladies. Office-related roles qualify: Director, Manager, Secretary, Administrative or Accounting Clerk, Receptionist or Despatch Clerk. The licensee must employ the FTEs on a permanent or contractual basis and the staff must physically work in Labuan. Hot-desking and shared offices are acceptable in form provided the physical-work test is met.[4]
AML/CFT and Travel Rule
The Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) applies to all Labuan FSA-licensed digital-asset entities as Reporting Institutions;[21] Suspicious Transaction Reports are filed to Bank Negara Malaysia’s Financial Intelligence Unit.[8] Labuan FSA’s Guidelines on AML/CFT/CPF and TFS for Labuan Key Reporting Institutions supplements AMLA, and the Guidance Note on Red Flag Indicators for Labuan Digital Financial Services (issued ) is the digital-asset overlay.[13] FATF Travel Rule applies: Labuan money brokers are expected to collect originator and beneficiary information. Targeted Financial Sanctions are administered under the Strategic Trade Act 2010 and the UNSCR implementation framework.
Application Process
Labuan FSA reviews complete applications within 30 working days (15 working days fast-track) per the Money Broking Guidelines, but end-to-end the process takes 4–6 months once incorporation, banking and substance build-out are included.[2] The application language is English. Pre-application engagement with Labuan FSA is recommended for digital-asset structures.
Pre-application engagement. Labuan FSA encourages pre-application meetings for digital-financial-services applicants, particularly for novel structures or Section 134 Exchange applications. Engage through a licensed Labuan trust company that holds the sponsoring relationship.
Labuan Company Formation
Forming a Labuan company is the first step: see the full Labuan company formation guide →. Incorporation runs through a Labuan-licensed trust company under the Labuan Companies Act 1990. 100% foreign ownership is permitted; the entity must maintain a registered office in Labuan provided by the trust company.
Pre-Application Engagement
Optional but advisable. Labuan FSA reviews the business model, regulatory pathway selection and substance plan before formal lodgement. This stage filters non-viable applications early.
Application Preparation
Drafting the three-year business plan, AML/CFT manual, IT and cybersecurity framework, fit-and-proper declarations for all directors and shareholders, source-of-funds documentation, operations manual, and (where regulated abroad) the Letter of Awareness or written consent from the home regulator.
Submission to Labuan FSA
Form LFB-MB (or pathway equivalent) lodged to the Head of Authorisation and Licensing Unit, Labuan FSA, with processing fee. Statutory review window runs from a complete file, not from initial submission.
Conditional Approval and Satisfaction of Conditions
Labuan FSA typically grants conditional approval requiring final capital injection, banking arrangements, substance build-out evidence and operational readiness sign-off. Conditions are jurisdiction-specific; the IT audit certificate is a recurring condition for digital-asset licensees.
Full Licence Issued and Operational Commencement
Licence document issued; the entity commences regulated activity. Annual licence fees fall due on or before 15 January of each year under s.189 LFSSA / s.150 LIFSSA.
Jagelski & Partners’ specialist compliance partners draft Labuan-specific AML/CFT manuals, enterprise risk assessments, Travel Rule procedures and IT / cyber frameworks as part of the Labuan licensing engagement. The compliance documentation is the most time-intensive component of any Labuan digital-asset application: 8 to 12 weeks of specialist work that cannot be shortcut with generic templates.
Required Documents
Labuan FSA’s Money Broking, Credit Token and STO Guidelines each enumerate the required document set: corporate documents, personal documents for all directors and qualifying shareholders, the compliance documentation suite, a three-year business plan with financial projections, and technology and operational documentation.[2][10][11] The compliance documentation is the most regulator-scrutinised component.
Corporate Documents
Certificate of Incorporation under the Labuan Companies Act 1990; Memorandum and Articles of Association; certified register of directors, shareholders and beneficial owners; certified resolution authorising the licence application; registered office address confirmation from the licensed Labuan trust company.
Personal Documents (all directors, principal officer, qualifying shareholders, UBOs)
Certified passport copy; address proof; CV with regulated-industry experience; police clearance certificate or equivalent good-conduct certification; bank reference letter; signed fit-and-proper declaration; source-of-funds and source-of-wealth documentation for any shareholder holding 10% or more.
Compliance Documentation
The compliance documentation is the most heavily scrutinised component of any Labuan digital-asset application. Jagelski & Partners’ specialist compliance partners draft each of these documents as part of the licensing engagement: bespoke and Labuan-specific, not templates adapted from other jurisdictions. Each document must reflect the applicant’s specific business model, risk profile, and operational structure.
- AML/CFT Policy Manual. Covers customer due diligence, enhanced due diligence triggers, ML/TF typologies, and Labuan-specific reporting flows to BNM’s Financial Intelligence Unit.
- Enterprise-Wide Risk Assessment. ML/TF, operational, technology, sanctions and jurisdictional risk identification under AMLA 2001 and Labuan FSA’s AML/CFT/CPF Guidelines.
- Sanctions Screening Procedures. UNSCR-aligned sanctions under the Strategic Trade Act 2010 with OFAC, EU and UK list screening at onboarding, periodic refresh, and transaction screening.
- Restricted Countries and Jurisdictions Matrix. High-risk jurisdiction handling, FATF black/grey list integration, and case-by-case enhanced due diligence thresholds.
- Transaction Monitoring Framework. Rules and thresholds for digital-asset transactions, with the Money Broking Guidelines’ red-flag indicators as a baseline.[13]
- Travel Rule Implementation. Originator and beneficiary information collection and transmission under FATF Recommendation 16, with provider integration architecture.
- SAR/STR Procedures. Suspicious Transaction Report filing flows to BNM FIU under AMLA 2001 with internal escalation, retention and tipping-off controls.
- KYC and Client Onboarding (incl. KYB). Identity verification, beneficial ownership identification, institutional and HNWI eligibility validation against Money Broking Guidelines Appendix II.
- Compliance Monitoring Programme. Compliance Officer’s annual workplan, board reporting cadence, and external compliance audit scheduling.
- Data Protection Policies. Practical alignment to BNM-equivalent data protection norms; the Personal Data Protection Act 2010 has not historically applied to Labuan-licensed entities, and the Personal Data Protection (Amendment) Act 2024 (Act A1727) left the Act’s application provisions unchanged – it amended sections 4, 5, 9, 16, 21, 48, 67, 129 and 136, not section 2 or 3. Voluntary compliance remains the market standard.[24]
- Risk Appetite Statement. Board-approved risk tolerances by activity and counterparty type.
Business Plan and Financial Projections
Three-year P&L, balance sheet, and cash-flow projections with substantiated assumptions; revenue model; capital adequacy stress test; outsourcing arrangements (where Labuan FSA approval is required).
Technology and Operational Documentation
IT infrastructure architecture; cybersecurity controls aligned to the Labuan FSA Guidelines on Technology and Cyber Risk Management;[14] custody and key management procedures for digital assets; business continuity and disaster recovery; outsourcing register; e-KYC architecture per the Labuan FSA e-KYC Circular for Digital Financial Services.
Costs and Pricing
A Labuan Money Broker (Digital Asset extension) costs approximately USD 90,000 in year-one fees and substance to a lean budget, USD 150,000 mid-tier, and USD 250,000 or more for a full-spec build-out. Government fees rise sharply through the 2026–2028 phase-in: the Money Broker (Digital Asset) annual fee climbs from USD 1,500 in 2026 to USD 10,000 in 2028.[15]
Labuan FSA issued its revised fee schedule under Notice LFSA.900-24/REG/FR/2025(2) on , with phased application from .[15] All government fees below are USD-denominated and assume substance compliance.
Government / Labuan FSA Fees
| Fee Item | Current (USD) | 2026 (USD) | 2027 (USD) | 2028 (USD) |
|---|---|---|---|---|
| Licence application processing | 350 | 500 | – | – |
| Fast-track processing (LFSSA / LIFSSA) | 1,200 | 1,500 | – | – |
| Money Broker (Conventional) annual | 1,500 | 1,500 | 3,250 | 5,000 |
| Money Broker (Digital Asset) annual | 1,500 | 1,500 | 5,750 | 10,000 |
| Securities Licensee annual | 1,500 | 1,500 | 2,000 | 2,500 |
| Fund Manager annual | 1,500 | 1,500 | 2,250 | 3,000 |
| Credit Token annual | 13,000 | 13,000 | – | – |
| Payment System Operator annual | 13,000 | 13,000 | – | – |
| Labuan Exchange annual (new fee tier 2026) | – | 13,000 | – | – |
| Marketing office annual | 100 | 500 | – | – |
Statutory deadline: each year (s.189 LFSSA / s.150 LIFSSA). What the published fee schedule does not capture is the cumulative impact of the phase-in: a Money Broker (Digital Asset) licensee budgeting on 2026 fees alone will face a ~6.7x increase in the annual licence fee by 2028, materially shifting the five-year cost model. The phase-in is the single biggest variable in the multi-year cost.
Total Cost Summary (Money Broker with Digital Asset activity, primary pathway)
| Cost Item | Year 1 Lean (USD) | Year 1 Mid (USD) | Year 1 High (USD) |
|---|---|---|---|
| Government fees (application + Year 1 annual) | 2,000 | 2,000 | 3,000 (fast-track) |
| Labuan company incorporation | 2,500 | 4,500 | 6,000 |
| Registered office / resident secretary (Year 1) | 2,500 | 4,000 | 6,000 |
| Trust company sponsorship / company management | 3,000 | 5,000 | 8,000 |
| Substance, 2 FTE annual salary and statutory contributions | 25,000 | 35,000 | 45,000 |
| Substance, physical office in Labuan (annual) | 8,000 | 12,000 | 18,000 |
| Audit fees (Year 1) | 4,000 | 7,000 | 10,000 |
| Compliance documentation (AML manual, EWRA, Travel Rule, sanctions framework) | 8,000 | 15,000 | 25,000 |
| Technology / ICT documentation (IT audit, cyber framework, custody, BCP) | 10,000 | 20,000 | 35,000 |
| Legal and advisory for licence application | 25,000 | 45,000 | 80,000 |
| Total Year 1 | ~90,000 | ~150,000 | ~250,000 |
| Annual ongoing Year 2+ | ~55,000 | ~90,000 | ~140,000 |
Indicative private-sector ranges; specific provider quotations vary. All MYR figures convert at approximately MYR:USD 3.97 as at .
Timeline
End-to-end Labuan crypto licensing runs 4–6 months for a Money Broker, Credit Token, Securities Licensee or Fund Manager pathway. The statutory Labuan FSA review window is 30 working days normal and 15 working days fast-track, but realistic timelines include incorporation, application drafting, substance build-out and satisfaction of conditions.
| Stage | Duration | Cumulative |
|---|---|---|
| Labuan company formation | 3–6 weeks | 3–6 weeks |
| Pre-application engagement (optional) | 2–4 weeks | 5–10 weeks |
| Application preparation | 8–12 weeks | 13–22 weeks |
| Labuan FSA review (statutory 30 / fast-track 15 working days) | 6 weeks (fast track 3) | 19–28 weeks |
| Satisfaction of conditions | 4–8 weeks | 23–36 weeks |
| Total end-to-end | 17–36 weeks (≈4–6 months realistic / 8–9 months stretched) | – |
Labuan FSA has historically targeted a 4–6 week initial substantive response for crypto-licence applications, but the timeline depends on the completeness of the fit-and-proper package and the regulatory novelty of the model. Digital-bank and Section 134 Exchange applications run materially longer (6–12 months+) on capital and substance build-out grounds.
Taxation
Labuan is a low-tax jurisdiction: but the headline 3% rate applies only to qualifying Labuan trading activity that satisfies substance requirements under P.U.(A) 423/2021 as amended by P.U.(A) 325/2025. Operators that fail substance revert to 24% on chargeable profits under the Income Tax Act 1967, including capital gains and otherwise-exempt income.[3]
| Tax | Rate | Crypto Application |
|---|---|---|
| Corporate income tax, Labuan trading | 3% on net audited profits | Applies if substance met; otherwise 24% MITA fallback. As of |
| Corporate income tax, Labuan non-trading | 0% | Pure equity-holding companies only; 1-FTE substance floor |
| Capital gains tax | 0% (within LBATA scope) | Capital gains fall into chargeable profits at 24% under MITA fallback |
| Withholding tax, dividends to non-residents | 0% | Subject to anti-avoidance |
| Withholding tax, royalties, interest, technical fees | 0% (LBATA scope) | Royalty/IP income is NOT eligible for LBATA post-2019; taxed under MITA at 24% |
| SST | Designated Area treatment | Cross-border digital services require case-by-case review |
| Stamp duty | Exempt for Labuan-entity instruments | Stamp Act 1949 exemptions apply |
LBATA 3% Rate and Substance
Operators willing to fund a Labuan office obtain the 3% rate; the legacy option of a fixed RM 20,000 lump-sum tax was abolished by the Finance Act 2018. The IRBM’s Guidelines of made the substance test materially tougher, on the headcount terms set out under Requirements.[4]
DTA Treaty Exclusion List
Operators serving Japanese, German, Australian or Indian counterparties will find that those treaty partners exclude Labuan entities under LBATA from treaty benefits, making the 24% election under the Income Tax Act 1967 a calculated trade-off rather than a fallback. Confirmed treaty exclusions include Australia, Chile, Germany, Indonesia, Japan, Luxembourg, the Netherlands, Poland, South Africa, South Korea, Spain, Sweden, Seychelles, Ukraine and the United Kingdom; India applies a limitation-of-benefits clause that has the same practical effect.[16] Cross-check the relevant tax treaty before relying on the 3% rate for cross-border income.
Islamic Digital Asset Centre (IDAC) and Shariah-Compliant Tokens (RAMZ)
The Islamic Digital Asset Centre (IDAC) and RAMZ framework, covered under Why Labuan, give Labuan a Shariah-compliant digital-asset differentiator that for tax-planning purposes matters only to operators with an Islamic finance LP base or a GCC capital sourcing strategy. Islamic variants run under LIFSSA 2010 with a Shariah Advisory requirement and annual Shariah audit.
CRS / CARF Reporting
Malaysia is an OECD Common Reporting Standard participating jurisdiction. CARF implementation is in progress: Malaysia is committed to commence its first CARF information exchanges by 2028 under the OECD Global Forum’s CARF commitment process.[23] Labuan has not enacted domestic Pillar Two legislation: the OECD Global Minimum Tax (GloBE) applies to multinational groups with consolidated revenue exceeding 750 million euros, a threshold unlikely to affect standalone Labuan-domiciled licensed entities.
Ongoing Compliance & Post-Registration
A Labuan licence is a continuous compliance obligation, not a one-time grant. Licensees file audited financial statements through COR@L within six months of financial year-end, declare substance compliance annually, pay annual licence fees on or before 15 January, and notify Labuan FSA of material changes within seven days.[2]
Annual Reporting Obligations
Audited annual financial statements submitted via COR@L through the resident secretary or licensed trust company within six months of financial year-end (Money Broking Guidelines para 10.1). Annual statutory return to Labuan FSA, including External Assets and Liabilities (EAL) Reporting via the Supervisory Intelligence System (SIS). Compliance Officer’s annual report to the board. AML/CFT independent audit report submitted per Labuan FSA Circular. Annual substance declaration to the Inland Revenue Board of Malaysia evidencing FTE and OPEX compliance.
Licence Fees and Renewal
Annual licence fees payable on or before of each year under s.189 LFSSA / s.150 LIFSSA, on the phased Money Broker (Digital Asset) schedule under LFSA.900-24/REG/FR/2025(2) set out in Costs and Pricing.[15] Late payment triggers automatic late penalties and, on persistent default, enforcement action including potential licence suspension.
Material Change Notifications and Prior Approvals
Notify Labuan FSA within seven days of: change of bank account holding paid-up capital; resignation of director or principal officer; change of place of business; change of constitutional documents; significant going-concern event. Prior Labuan FSA approval required for: change of business plan; shareholding change of 10% or more; director and principal officer appointments; reduction of paid-up capital below the regulatory floor; outsourcing arrangements.
Regulatory Inspections and Enforcement
Labuan FSA’s Enforcement Actions register records actions against 118 Labuan licensed entities from December 2015 to October 2025.[17] Penalties under s.36G of the Labuan FSA Act 1996 include administrative penalties, restriction of business, revocation of licence, and striking off from the registry. Cooperation with law-enforcement agencies on fraud cases was confirmed by Labuan FSA in a November 2024 press release. Licensees are subject to thematic reviews; recent themes include AML/CFT effectiveness, digital-asset custody controls and substance compliance.
ICT Risk Management & Operational Resilience
Labuan operates a defined technology rulebook for digital-financial-services licensees. Labuan FSA’s Guidelines on Digital Governance Framework (effective ) set Board-level cyber accountability principles;[20] the Guidelines on Technology and Cyber Risk Management (issued ) extend to cryptographic key management and public-cloud security.[14] Market-conduct expectations for digital financial intermediaries sit alongside these in a separate rulebook.[19]
Key ICT Obligations
- Board accountability. Six Digital Governance Framework principles place cyber accountability at the board level; ICT risk is a board-reported domain on at least a half-yearly cadence.
- Public cloud security. Guidelines on Technology and Cyber Risk Management para 9.24 requires that critical systems hosted on public cloud carry additional security measures preserving confidentiality and integrity of cloud-stored information assets at all times.[14]
- 14-Day Intrusion Rule. Money Broking Guidelines para 7.12: root-cause and impact-analysis report within 14 days of any system incident.[2]
- 3-Day Transaction Rule. Money Broking Guidelines para 9.4(i): client withdrawals must complete within three business days.
- Custody and key management. Hot/cold wallet segregation; cryptographic key lifecycle controls; signing-quorum policies.
- Outsourcing of technology functions. Falls under Labuan FSA’s External Service Arrangements rulebook; prior approval where the arrangement is material.
- e-KYC. Governed by the Labuan FSA e-KYC Circular for Digital Financial Services.
Banking
Banking is the operational hurdle most Labuan crypto licensees underestimate. Onshore Malaysian commercial banks are typically reluctant to onboard digital-asset businesses; international Electronic Money Institutions and specialist multi-currency platforms in Singapore, the EU and the UK are the practical fiat rail. Multi-currency capability (USD, EUR, SGD) is routinely available; ringgit accounts are restricted by BNM Foreign Exchange Policy.
The assumption that banking lines up automatically post-licence is the single most common cause of post-licensing operational stalling. Labuan supported 72 Labuan banks at end-2023 per the Labuan IBFC Market Report 2023,[18] with four new investment-bank licences approved in 2023. Crypto-friendly local banking is limited, and card programmes and merchant acquiring are not generally available locally for crypto-classified merchants.
Jagelski & Partners is paid by the institution, not by the client. We do not charge an onboarding fee. Through Jagelski & Partners’ partner network, businesses placed more than fourteen billion euros in client turnover across banking and EMI relationships in 2025. A licence without banking access is a certificate on the wall: learn about our Banking service →
Select Labuan banks, Singapore multi-currency platforms, and EU and UK EMIs combined into the correspondent-plus-EMI stack Labuan digital-asset licensees actually run. The partner network maintains live account-opening routes in every jurisdiction Jagelski & Partners services, and banking feasibility is confirmed at the scoping stage, before any licence application is filed.
Explore Banking SolutionsFATF Status & International Standing
Malaysia is a FATF member since and is not on the FATF grey or black list as of . Malaysia and Belgium were the first two FATF members assessed under the FATF 5th-round methodology in 2025; the APG-FATF Joint Mutual Evaluation Report was adopted in October 2025 and published .[5]
Malaysia’s 5th-round MER states that Malaysia has significantly strengthened its defences against illicit finance since 2015, notably by enhancing its legal framework and supervisory approaches. The FATF flagged continuing need to demonstrate sustained increase in money-laundering prosecutions and convictions over the next three years.
EU Market Access
A Labuan licence does not confer EU passporting rights. MiCA contains no third-country equivalence regime: there is no mechanism for the European Commission to recognise a non-EU licence as equivalent. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative. ESMA’s guidelines (published , applicable from ) interpret this restrictively: any form of EU-targeted marketing, EU-language website content, geo-targeted advertising, app-store availability, or use of EU-based influencers constitutes solicitation that voids the exemption. The exemption is designed for isolated contacts, not systematic EU market access. For a detailed analysis of what constitutes solicitation and the documentation requirements, see Reverse Solicitation Under MiCA →.[22]
EU Council List Status
Malaysia was removed from Annex II of the EU list of non-cooperative jurisdictions for tax purposes on following ECOFIN Council confirmation, and is not on Annex I.[6] Annex I, confirmed at the 10 October 2025 update, contains American Samoa, Anguilla, Fiji, Guam, Palau, Panama, Russia, Samoa, Trinidad and Tobago, US Virgin Islands and Vanuatu. Malaysia’s EU positioning supports institutional onboarding conversations that purely-offshore alternatives often cannot.
Advantages and Limitations
Labuan offers a regulated 3% effective tax rate, a multi-pathway licence stack, Shariah-compliant infrastructure, and FATF/EU-cleared standing. The trade-offs are real: substance obligations close the letterbox option, the licence does not authorise onshore Malaysia activity, EU market access requires a separate EU authorisation, and government licence fees rise materially through 2028.
- 3% effective tax with regulated standing. LBATA 1990 grants a 3% rate on net audited chargeable profits, subject to substance compliance.
- Multi-pathway licence stack under one regulator. Money Broking, Credit Token, STO, Securities Licensee, Fund Manager, Section 134 Exchange and Payment System Operator pathways all administered by Labuan FSA.
- FATF-cleared, EU-delisted standing. Malaysia is not grey-listed or blacklisted; EU Annex II delisting on supports institutional onboarding.
- Shariah-compliant digital-asset framework. LIFSSA 2010 and the Islamic Digital Asset Centre offer a globally unique pathway for GCC and Islamic finance capital.
- 100% foreign ownership permitted. Labuan companies under the Labuan Companies Act 1990 do not require Malaysian shareholder participation.
- Statutory non-resident tax status for Malaysia. Labuan entities are deemed non-residents under FSA 2013 ss.214–215 / IFSA 2013 ss.225–226, simplifying cross-border tax positioning.
- Substance obligations close the letterbox option. 2 fit-and-proper FTE physically in Labuan + RM 100,000 annual OPEX; outsourced staff disallowed by IRBM Guidelines of . Mitigation: budget USD 50,000–80,000 annually for a Labuan office and FTE, or route cost-sensitive token-only setups to BVI or Seychelles.
- No EU passporting. Labuan-licensed entities cannot serve EU clients beyond the narrow MiCA Article 61 reverse-solicitation exemption. Mitigation: Operators targeting EU clients can obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, for isolated genuinely unsolicited contacts only, may fall within the narrow reverse solicitation exemption under MiCA Article 61.
- DTA treaty exclusions on the 3% rate. Australia, Japan, Germany, the UK, India and other treaty partners exclude Labuan entities from treaty benefits. Mitigation: model the 24% MITA election against the relevant DTA before committing to the 3% LBATA rate, particularly for cross-border IP and royalty income.
- 2026–2028 fee phase-in. Money Broker (Digital Asset) annual fees rise from USD 1,500 (2026) to USD 10,000 (2028). Mitigation: build the five-year cost model on 2028 fees, not 2026 fees; total fee exposure remains modest in absolute terms.
- Banking is the hard part. Onshore Malaysian banks are typically reluctant; international EMIs are the practical fiat rail. Mitigation: pre-secure EMI and correspondent banking relationships before lodging the Labuan FSA application.
How Labuan Compares
Three jurisdictions sit closest to Labuan in the Asia-Pacific crypto licensing comparison: Hong Kong (premium-cost, principal-permitting VATP regime), Singapore (premium-cost Major Payment Institution under the Payment Services Act), and Kazakhstan (regulated cost-leader in Central Asia). Cyprus is the natural EU upgrade reference for operators considering passporting access.
| Factor | Labuan | Hong Kong | Singapore | Kazakhstan | Cyprus (cross-tier) |
|---|---|---|---|---|---|
| Licence Type | Money Broker (DA) / Credit Token / STO / Fund / s.134 Exchange | VATP (SFC) | Major / Standard PI (MAS, PSA) | AIFC Digital Asset Service Provider | MiCA CASP |
| Regulator | Labuan FSA | Securities and Futures Commission | Monetary Authority of Singapore | Astana Financial Services Authority | CySEC |
| Timeline | 4–6 months | 12–18 months | 9–12 months | 4–12 months | 8–14 months |
| Min. Capital | RM 500k–1.5m (~USD 126k–378k) | HKD 8m (5m paid-up + 3m liquid; ~USD 1.02m) | SGD 100k–250k (~USD 75k–187k) | USD 10k–250k by activity | EUR 50k–150k |
| Total Year 1 Cost | USD 90k–250k | USD 900k–1.9m | USD 1.1m–2.2m all-in | USD 90k–180k | USD 380k–760k (EUR 350k–700k) |
| Corporate Tax | 3% LBATA (substance-conditional) | 16.5% | 17% | 0% AIFC | 12.5% (Cyprus statutory) |
| Local Presence | 2 FTE in Labuan + RM 100k OPEX | Substantial; HK office, key staff | Substantial; SG office, key staff | AIFC presence | Cyprus office, key staff |
| EU Passporting | No | No | No | No | Yes, full MiCA passporting to 30 EEA states |
| FATF Status | Not listed | Not listed | Not listed | Not listed | Not listed |
| Best For | APAC institutional OTC, token issuers, Shariah-compliant | Retail and institutional exchange operators wanting Tier-1 standing | Retail and institutional payments and stablecoins, Tier-1 standing | Central Asia cost-leader, AIFC English-law gateway | EU market access for crypto-asset services |
Compare every crypto jurisdiction side by side →
When Labuan Is the Right Choice
Choose Labuan if:
- You target Asia-Pacific institutional and high-net-worth clients (not Malaysian retail).
- You can fund local substance (2 FTE physically in Labuan + RM 100,000 OPEX).
- You want a regulated 3% effective tax rate with FATF and EU-cleared standing.
- Your model fits the Money Broking (DA) intermediary scope, Credit Token issuance, STO, fund management, or full Section 134 Exchange operation.
- You have a Shariah-compliant operating model or GCC capital base.
Consider alternatives if:
- You need EU passporting → Cyprus or another MiCA jurisdiction.
- You want a Tier-1 reputation regardless of cost → Hong Kong or Singapore (Hong Kong is the APAC route we support end-to-end).
- You need the lowest substance cost in Asia → Kazakhstan AIFC.
- Your model targets Malaysian retail customers → SC Malaysia Recognised Market Operator route (not Labuan).
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Labuan Applications
Five recurring mistakes cause Labuan applications to stall or fail post-licensing: substance non-compliance under the post-2025 IRBM Guidelines, confusion between Labuan FSA and SC Malaysia regimes, treating Money Broking as exchange operation, conflating Credit Token and STO pathways, and lodging incomplete fit-and-proper packages.[2][4][7]
- Substance non-compliance under the IRBM Guidelines of . The most acute live risk: an outsourced two-employee solution no longer satisfies the headcount test set out under Requirements. Failure means a reversion to 24% on chargeable profits under the Income Tax Act 1967, including capital gains and otherwise-exempt income.
- Confusing Labuan FSA’s pathways with the SC Malaysia DAX framework. These are statutorily distinct regimes. The SC Malaysia DAX (Recognised Market Operator) framework requires RM 5,000,000 paid-up capital and Malaysian incorporation; it serves Malaysian retail. Labuan FSA’s Money Broking (DA) pathway requires RM 1,500,000 and Labuan incorporation; it serves non-Malaysian institutional and HNWI clients. Conflating the two creates marketing-perimeter and BNM enforcement risk.
- Treating “Money Broking” as “exchange operation”. Money Broking strictly prohibits principal, market-maker and liquidity-provider activity (Guidelines para 7.6). Exchange-style operations require a Labuan Exchange licence under s.134 LFSSA, not a money broker licence.
- Confusing utility/credit token with security/STO token. Different guidelines, different licences. Credit Token Business covers utility tokens, IEO support and merchant token programmes; STO Issuer covers security tokens representing shares, debentures, fund units, partnership interests, foundation interests and PCC interests. Choosing the wrong pathway forces a re-application.
- Soliciting Malaysian residents in ringgit. A Labuan licence does not authorise ringgit-denominated retail dealings with Malaysian residents. BNM’s Foreign Exchange Policy Notices 1 to 7 govern ringgit flows, and Malaysian retail crypto access must route through an SC-registered DAX RMO. Operators that drift over this line face BNM enforcement.
- Banking not pre-secured. The most common cause of operational stalling post-licensing. Pre-qualify the correspondent and EMI fiat rail set out under Banking before lodging the Labuan FSA application, rather than assuming it lines up automatically post-licence.
Frequently Asked Questions
A Labuan licence does not grant EU market access or passporting rights. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative: but ESMA’s February 2025 guidelines interpret this exemption very narrowly, and any form of EU-targeted marketing voids it. Operators seeking systematic EU market access should obtain a separate CASP authorisation in an EU member state. See our Reverse Solicitation Under MiCA guide for the detailed analysis.
Generally no. Labuan entities are deemed non-residents of Malaysia under FSA 2013 ss.214–215 and IFSA 2013 ss.225–226; ringgit-denominated retail dealings with Malaysian residents are restricted by BNM Foreign Exchange Policy Notices. Malaysian retail crypto access must route through an SC-registered DAX RMO; six DAX RMOs were registered as of . Operators that target Malaysian retail customers should not pursue Labuan licensing; they should engage SC-Malaysia-track counsel.
No, not in a principal or market-maker sense. Money Broking is strictly an intermediary licence; principal activity, market-making and liquidity provision are prohibited under the Money Broking Guidelines para 7.6. A full digital-asset exchange requires a Labuan Exchange licence under section 134 LFSSA, with different capital, governance and operational requirements.
Yes, via two pathways depending on token type. Utility tokens, IEO support and merchant token programmes route through the Credit Token Business pathway under the 2025 Guidelines on Credit Token Business in LIBFC. Security tokens (representing shares, debentures, fund units, partnership or PCC interests) route through the STO Issuer pathway under the 2023 Guidelines on Labuan Securities Token Offering. Choosing the right pathway is a regulatory question, not a marketing one.
No. A generic Labuan digital-asset exchange licence does not cover securities tokens; those run under a separate securities regime. Labuan FSA’s Securities Token Offering (STO) Guidelines, issued in 2023 under the Labuan Financial Services and Securities Act 2010, define a “securities token” as securities, shares, debentures, bonds or fund units, in digital form on a distributed ledger. An STO issuer needs Labuan FSA approval and must appoint a trustee, an IT auditor, a tokenisation technology provider and a compliance officer, and a Labuan exchange can list and trade the digital securities. A tokenised fund unit instead stays under the fund regime, which we cover in our fund licensing guide.
Statutory 30 working days normal and 15 working days fast-track from a complete file. Realistic end-to-end timeline including incorporation, application drafting, substance build-out and satisfaction of conditions is 4–6 months for Money Broker, Credit Token, Securities Licensee and Fund Manager pathways. Digital Bank and Section 134 Exchange applications run materially longer, 6–12 months or more, on capital and substance build-out grounds.
Recommended, not strictly required. Pre-application engagement filters non-viable applications early, allows the regulator to flag novel-structure concerns before formal submission, and reduces the satisfaction-of-conditions cycle. For novel digital-asset structures and Section 134 Exchange applications, pre-engagement is effectively expected.
Founders need not be resident in Labuan, but the licensee must employ at least two fit-and-proper full-time employees physically working in Labuan and incur RM 100,000 in annual operating expenditure. The IRBM Guidelines of disallow outsourcing of these FTE roles and exclude general-duty positions.
3% on net audited chargeable profits under section 4 of the Labuan Business Activity Tax Act 1990, conditional on substance compliance under P.U.(A) 423/2021 as amended by P.U.(A) 325/2025. If substance fails or the entity elects out, the rate reverts to 24% on chargeable profits under the Income Tax Act 1967, including capital gains and otherwise-exempt income. Royalty and IP income is taxed under MITA at 24% regardless of LBATA election.
Pathway-dependent. Money Broker (Digital Asset extension) requires RM 1,500,000 paid-up capital; Credit Token Business RM 1,000,000 (Credit Token Guidelines para 5.1); STO Issuer RM 500,000 maintained at all times; Fund Manager RM 300,000 working funds; Securities Licensee RM 1,000,000. Labuan FSA reserves discretion to require additional capital based on the risk profile and scale of the business.
USD 90,000 lean, USD 150,000 mid-tier, USD 250,000 or more for a full-spec build-out. Year 2+ ongoing cost is approximately USD 55,000–USD 140,000 depending on substance scale, audit cost and ICT compliance footprint. The 2026–2028 government fee phase-in materially shifts the five-year cost model; the Money Broker (Digital Asset) annual fee climbs from USD 1,500 in 2026 to USD 10,000 in 2028.
No. Dividends paid by a Labuan entity to non-resident shareholders are not subject to withholding tax, subject to anti-avoidance provisions. Royalties, interest and technical fees paid to non-residents are also exempt within the LBATA scope, but royalty and IP income is NOT eligible for LBATA post-2019 reforms and is taxed under MITA at 24%.
Yes. Malaysia has been a FATF member since February 2016 and is not on the FATF grey or black list as of . Malaysia and Belgium were the first two FATF members assessed under the new 5th-round methodology in 2025; the APG-FATF Joint Mutual Evaluation Report was adopted in October 2025 and published 11 December 2025, recording that Malaysia has significantly strengthened its defences against illicit finance since 2015.
No, not as of . Malaysia was removed from the EU Council’s Annex II (grey list) on . Malaysia is not on Annex I (blacklist). Annex I, confirmed at the 10 October 2025 update, contains American Samoa, Anguilla, Fiji, Guam, Palau, Panama, Russia, Samoa, Trinidad and Tobago, US Virgin Islands and Vanuatu.
Yes, but onshore Malaysian commercial banks are typically reluctant. Most digital-asset licensees combine a Labuan-domiciled correspondent relationship with international Electronic Money Institutions and specialist multi-currency platforms in Singapore, the EU and the UK for fiat rails. Pre-secure banking before lodging the Labuan FSA application; banking is the operational hurdle that surprises most applicants.
Labuan Company Formation
Incorporate a Labuan company under the Labuan Companies Act 1990 with 100% foreign ownership and a Labuan-licensed trust company sponsor.
Open a Crypto-Friendly Business Account
Pre-qualified banking and EMI relationships for Labuan-licensed digital-asset businesses across Asia-Pacific, the EU and the UK.
Start Your Labuan Crypto Licence Application
Jagelski & Partners coordinates the entire Labuan licensing process: from Labuan company incorporation through Labuan FSA authorisation, substance build-out, banking, and ongoing compliance. One engagement, one point of contact.
Not ready to book? Ask Emma first. She answers now, and if it needs a human she takes your details so the consultation starts ahead.
References
Show all references
- Labuan FSA, Labuan IBFC Market Report 2024, labuanfsa.gov.my, accessed . (Released 30 April 2025; 838 licensed entities at end-2024; RAMZ USD 1.05 billion; employment 5,006.)
- Labuan FSA, Guidelines on the Establishment of Money Broking Business in Labuan IBFC (9 September 2024), labuanfsa.gov.my, accessed .
- Attorney General’s Chambers Malaysia, P.U.(A) 325/2025, Labuan Business Activity Tax (Requirements for Labuan Business Activity) (Amendment) Regulations 2025, gazetted 9 September 2025, accessed .
- Lembaga Hasil Dalam Negeri (Inland Revenue Board of Malaysia), Guidelines on Substance Requirements for Fit and Proper Full-Time Employees of Labuan Entities (LHDN.AG.600-1/7/3, 5 November 2025), hasil.gov.my, accessed .
- FATF, Outcomes FATF Plenary, 22-24 October 2025; Malaysia’s measures to counter money laundering, terrorist financing and proliferation financing (5th-round MER adopted October 2025, published 11 December 2025), fatf-gafi.org, accessed .
- Council of the European Union, EU list of non-cooperative jurisdictions for tax purposes, Annex II update of 8 October 2024 and Annex I update of 10 October 2025, consilium.europa.eu, accessed .
- Securities Commission Malaysia, List of Registered Digital Asset Exchanges (Recognised Markets), sc.com.my, accessed . (Six DAX RMOs as of 3 December 2025: HATA Digital, Luno Malaysia, MX Global, SINEGY DAX, Kinetic DAX, Torum International.)
- Bank Negara Malaysia, Foreign Exchange Policy Notices, bnm.gov.my, accessed .
- Labuan FSA, Admissibility Framework for Digital Currencies (30 December 2024), labuanfsa.gov.my, accessed .
- Labuan FSA, Guidelines on Credit Token Business and Islamic Credit Token Business in Labuan IBFC (6 February 2025), para 5.1 (minimum paid-up capital RM 1,000,000), labuanfsa.gov.my; companion FAQ on the Guidelines (2025), labuanfsa.gov.my, accessed .
- Labuan FSA, Guidelines on Labuan Securities Token Offering (9 October 2023), labuanfsa.gov.my, accessed .
- Labuan IBFC, Securities Licensees, Capital Markets, labuanibfc.com, accessed .
- Labuan FSA, Guidance Note on Red Flag Indicators for Labuan Digital Financial Services (21 June 2024), labuanfsa.gov.my, accessed .
- Labuan FSA, Guidelines on Technology and Cyber Risk Management for Labuan Banking and Insurance Business (6 December 2023), labuanfsa.gov.my, accessed .
- Labuan FSA, Notice on 2026 Annual and Licence Fees under the Revised Fee Structure Effective 1 January 2026 (LFSA.900-24/REG/FR/2025(2), dated 6 November 2025), coral.labuanfsa.gov.my, accessed .
- EY Malaysia, Update to employee and annual opex requirements for Labuan companies (tax alert), ey.com, accessed .
- Labuan FSA, Enforcement Actions Register (2015-2025), labuanfsa.gov.my, accessed .
- Labuan FSA, Labuan IBFC Market Report 2023, labuanfsa.gov.my, accessed .
- Labuan FSA, Guidelines on Market Conduct for Labuan Digital Financial Intermediaries (20 December 2023), labuanfsa.gov.my, accessed .
- Labuan FSA, Guidelines on Digital Governance Framework (effective 1 January 2022), labuanfsa.gov.my, accessed .
- Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA), bnm.gov.my, accessed .
- ESMA, Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030, published 26 February 2025, applicable from 27 April 2025), esma.europa.eu, accessed .
- OECD Global Forum, Jurisdictions committed to implement the Crypto-Asset Reporting Framework (CARF) in time to commence exchanges in 2027, 2028 or 2029 (last updated 19 February 2026; Malaysia listed under jurisdictions undertaking first exchanges by 2028), oecd.org, accessed .
- Attorney General’s Chambers Malaysia, Personal Data Protection (Amendment) Act 2024 (Act A1727) (amends sections 4, 5, 9, 16, 21, 48, 67, 129 and 136 of the Personal Data Protection Act 2010; application provisions in sections 2 and 3 unchanged), pdp.gov.my, accessed .