The gap between expectation and reality
The most common complaint we hear from newly incorporated foreign-owned Malaysian companies is not about the incorporation itself — that process has become relatively smooth and can be completed in days through SSM (the Companies Commission of Malaysia). The complaint is about the bank account. Specifically: how long it takes, how many times the bank asks for additional documents, and how little anyone tells you upfront about what the process actually involves.
This article is our attempt to give you a realistic picture. Not the bank's marketing materials, not the best-case scenario — the actual experience of opening corporate accounts for foreign-owned Malaysian entities, based on the dozens we handle each year.
Which banks are worth your time
Not all Malaysian banks are equally willing to onboard foreign-owned or foreign-director companies. This is a function of each bank's internal compliance appetite and their AML/KYC frameworks. The hierarchy, in rough order of openness to international business:
Malaysian banks — openness to foreign-owned companies
- HSBC Malaysia: Most internationally minded — leverages global HSBC KYC infrastructure. Strong for companies with parent relationships already in the HSBC network. Best for international trade flows.
- Standard Chartered Malaysia: Similar profile to HSBC. Excellent for Middle Eastern, South Asian, and African business relationships.
- Maybank: Largest Malaysian bank. Works with foreign-owned entities but is more documentation-intensive than international banks. Strong for domestic operations.
- CIMB: Good regional network (significant ASEAN presence). Open to foreign-owned structures with adequate documentation.
- RHB: More selective with foreign-owned entities but increasingly competitive. Worth approaching if the above are slow.
- Avoid approaching for new foreign-owned entities: Local Islamic banks and smaller domestic banks — they typically require more local ties and their KYC processes are less adapted to international structures.
What you actually need
Banks will tell you they have a "standard checklist." What they will not tell you is that the checklist is a floor, not a ceiling. The actual documents requested vary by relationship manager, by the nature of your business, and by where your directors and shareholders are based. This list covers what you should prepare upfront — having everything ready dramatically reduces back-and-forth.
Core document package — prepare all of these
- Certificate of Incorporation from SSM (certified copy)
- Constitution (M&A or Constitution under CA 2016) — certified copy
- Form 49 (Register of Directors) — certified copy
- Form 24 (Allotment of Shares) — certified copy
- Board resolution authorising bank account opening (the bank will provide a template)
- Certified copies of passports for ALL directors and shareholders (certified by a notary or Commissioner for Oaths in Malaysia)
- Proof of address for all directors and shareholders (utility bill or bank statement, within 3 months, in English or with certified translation)
- Source of funds declaration for initial deposit
- Business plan or description of business activities (2–3 pages is sufficient — focus on what the company does, who its customers are, and where revenue comes from)
- If parent company exists: parent's certificate of incorporation, audited accounts (last 2 years), and ownership structure chart
- For Labuan entities: add Labuan FSA approval letter and Labuan business licence
"Banks do not reject applications because your business is bad — they reject or delay them because your documentation makes it difficult to clear their compliance process quickly. Prepare everything upfront."
The realistic week-by-week timeline
This is the timeline for a straightforward foreign-owned Sdn Bhd with two non-resident directors, approaching HSBC or Standard Chartered.
Preparation and initial meeting
Compile the full document package. Request an introduction to a relationship manager at your chosen bank — either through your corporate secretary, your advisory firm, or a cold approach via the business banking desk. At HSBC and StanChart, an initial meeting can usually be scheduled within 1–2 weeks.
Initial submission
Submit the complete document package at the meeting or immediately after. The relationship manager forwards to the compliance team. This is when the clock starts on the bank's internal review.
Compliance review and supplementary requests
Expect at least one round of supplementary document requests — even with a complete initial submission. Common additions: enhanced due diligence (EDD) forms, more detailed source-of-funds narrative, bank reference letters from directors' home banks, or proof that directors have visited Malaysia.
Approval and account opening
For a clean application at a cooperative bank, final approval typically arrives 4–8 weeks from initial submission. Account numbers are issued; the relationship manager sends account details and internet banking setup instructions.
If things are not moving
If you have not received a decision or meaningful update within 6 weeks, escalate through your relationship manager's line manager. At 8 weeks without approval, consider running parallel applications at a second bank. Do not wait. Banks prioritise applications that are being actively chased.
The most common delays — and how to avoid them
Non-resident directors who have never visited Malaysia. Some banks view this as a red flag — a company with no physical presence or committed principals. If possible, have at least one director make a physical visit to the bank branch during the process. This alone removes a significant objection.
High-risk jurisdictions. If your shareholders or ultimate beneficial owners are from or have funds in jurisdictions on Malaysia's or FATF's high-risk lists, expect enhanced due diligence. This is not insurmountable, but it requires preparation of a more detailed narrative and may add 4–8 weeks to the process.
Complex ownership structures. Multi-layered holding structures with multiple intermediate entities in different jurisdictions make compliance officers work harder. Where possible, simplify the ownership chart presented to the bank — not the actual structure, but how you explain it.
Unfamiliar business activities. Businesses in sectors the compliance team is less familiar with — cryptocurrency, certain fintech, arms-adjacent industries, certain natural resource trading — will face heightened scrutiny regardless of how legitimate they are. Factor in extra time.
Our view
Treat the bank account as a critical path item, not an afterthought. Start the process the moment your company is incorporated — not after you have signed your first client contract or hired your first employee. Many businesses have lost weeks of operational time because they underestimated how long this takes.
An introduction through an established advisory firm makes a genuine difference. Banks give more attention to applications that arrive through known intermediaries, because the intermediary has done some of the vetting work already. If you are navigating this alone, be prepared for a longer, more iterative process.
