Malaysia — Merchant Acquiring License (MAS) 2026
The Malaysia Merchant Acquiring License (MAS) from Bank Negara Malaysia is the mandatory authorization for any entity providing merchant acquiring services in Malaysia — covering payment gateway operations, POS terminal deployment, card payment processing (Visa, Mastercard, MyDebit), QR code payment acceptance, and DuitNow integration. Malaysia's rapidly growing digital payments market and BNM's cashless economy roadmap create a compelling opportunity for regulated payment operators.
— Last updated: April 2026 · 12 min read
What is the Malaysia Merchant Acquiring License?
The Malaysia Merchant Acquiring License (MAS) is issued by Bank Negara Malaysia (BNM) under the Financial Services Act 2013 (FSA 2013). It authorizes licensed institutions to provide merchant acquiring services — enabling retailers and merchants to accept payment instruments including payment cards, QR codes, online payments, and digital wallets — and to handle the settlement of funds between buyers and merchants through Malaysia's national payment infrastructure.
The MAS license is governed by BNM's Policy Document on Merchant Acquiring Services (April 2023) — the primary regulatory reference for all MAS applicants in 2026. Any entity wishing to operate a payment gateway, deploy POS terminals, process card payments, or provide QR code payment acceptance in Malaysia must hold a valid MAS license from BNM.
What Merchant Acquiring Covers
- •Enable retailers and merchants to accept payment instruments — cards, QR codes, online payments, and digital wallets
- •Deploy and manage payment infrastructure — point-of-sale (POS) terminals, online payment gateways, and mobile payment acceptance
- •Process card payment transactions — Visa, Mastercard, UnionPay, MyDebit, and other card scheme transactions
- •Handle QR code payment acceptance — including DuitNow QR integration (Malaysia's national QR standard)
- •Manage settlement of funds — processing the payment transaction lifecycle from authorization to settlement between buyer and merchant
- •Provide e-wallet integration and payment acceptance services for merchants
| Feature | Details |
|---|---|
| Regulator | Bank Negara Malaysia (BNM) |
| Primary Legislation | Financial Services Act 2013 (FSA 2013) |
| Policy Document | BNM Policy Document on Merchant Acquiring Services (April 2023) |
| Corporate Structure | Locally incorporated Malaysian company (Sdn Bhd) |
| Min. Capital | No fixed statutory minimum — adequacy demonstrated |
| Market | Malaysia (onshore) |
| ASEAN Access | Via Malaysia as regional gateway |
| Foreign Companies | Eligible via locally incorporated Sdn Bhd |
| QR Standard | DuitNow QR — national standard for QR payment acceptance |
Why Malaysia for Merchant Acquiring?
Malaysia is one of Southeast Asia's most advanced digital payment markets — and one of the most strategically positioned for ASEAN regional expansion.
Government-Backed Digital Payments Push
Bank Negara Malaysia's Financial Sector Blueprint and e-payments roadmap explicitly targets a high cashless transaction economy. BNM actively encourages regulated payment infrastructure development — creating a supportive regulatory environment for licensed merchant acquirers.
34 Million Consumers
Malaysia's population of 34 million with one of Southeast Asia's highest smartphone penetration rates (over 95%) and growing e-commerce adoption provides a substantial addressable market for licensed merchant acquirers.
DuitNow — National QR Standard
DuitNow QR is Malaysia's national QR payment standard — interoperable across all Malaysian banks and e-wallets. MAS-licensed acquirers can integrate DuitNow QR, giving merchants a single acceptance point for all Malaysian digital payment methods.
ASEAN Regional Gateway
Malaysia's position as an ASEAN founding member, combined with regional payment interoperability initiatives (Project Nexus, ASEAN QR interoperability), positions MAS-licensed entities for cross-border payment expansion across Indonesia, Thailand, Singapore, Philippines, and Vietnam.
Mature Banking Ecosystem
Malaysia hosts a sophisticated banking sector with major domestic banks (Maybank, CIMB, Public Bank, RHB) and international institutions providing settlement, banking, and payment infrastructure relationships for licensed acquirers.
Full Licensing Requirements (BNM April 2023 Policy Document)
The requirements for the Malaysia Merchant Acquiring License are governed by BNM's Policy Document on Merchant Acquiring Services (April 2023). The following covers all key requirements for 2026 applicants.
Corporate and Regulatory Structure
- •Must be a locally incorporated company in Malaysia — Sdn Bhd (Sendirian Berhad / private limited company)
- •Foreign-controlled companies are eligible but must incorporate a Malaysian Sdn Bhd entity
- •Detailed business plan and corporate governance framework required
- •Strong AML/CFT controls and compliance systems
- •Policies covering merchant onboarding, transaction monitoring, and fraud prevention
Capital Adequacy
BNM has not published a fixed minimum statutory capital for the MAS license. Instead, applicants must demonstrate sufficient paid-up capital and financial resources to ensure operational resilience and the capacity to meet settlement obligations.
| Capital Consideration | Approach |
|---|---|
| Fixed statutory minimum | None published by BNM |
| Basis of assessment | Operational resilience + settlement capacity |
| Key factors | Expected transaction volumes, merchant portfolio risk, operational costs |
| Demonstration method | Business plan with financial projections + audited financials |
| Ongoing requirement | Adequate capitalization maintained throughout the license period |
Capital Advisory Note
While BNM has not set a fixed minimum, undercapitalized applicants face rejection or extended review. Zitadelle AG advises on appropriate capital positioning based on projected transaction volumes, merchant portfolio size, and settlement cycle requirements. For most MAS applicants targeting meaningful scale, a minimum of MYR 5–10M (~USD $1.1–$2.2M) in paid-up capital is advisable — though exact requirements depend on the business model.
Management and Staffing
- •Directors and senior management must pass BNM's fit and proper assessment — clean background, financial integrity, relevant experience
- •Clearly defined organizational structure with appropriate reporting lines
- •Adequate internal control systems, independent audit function, and risk management framework
- •Designated compliance officer with AML/CFT responsibilities
- •IT security and operational risk management personnel
Technology and Infrastructure
- •Secure and scalable payment systems capable of handling projected transaction volumes
- •Interoperability with national payment rails — DuitNow QR, MyDebit network, and card scheme infrastructure
- •Strong data protection and cybersecurity measures aligned with BNM's Risk Management in Technology (RMiT) Policy Document
- •Business continuity and disaster recovery planning
- •Fraud detection and prevention systems
- •PCI DSS compliance for card payment processing
Merchant Management Procedures
- •Formal merchant onboarding procedures with documented risk classification
- •Ongoing merchant transaction monitoring systems
- •Policies for identifying, suspending, and terminating high-risk merchants
- •Merchant agreements containing clear disclosure obligations
- •Chargeback management and dispute resolution procedures
- •Prohibited merchant category controls
MAS License vs. Labuan Payment System Operator: Key Distinction
Two Malaysian payment licenses are frequently confused: the Malaysia MAS (Bank Negara Malaysia, onshore) and the Labuan Payment System Operator License (LFSA, offshore). These serve fundamentally different purposes.
| Feature | Malaysia MAS (BNM) | Labuan PSO (LFSA) |
|---|---|---|
| Regulator | Bank Negara Malaysia | Labuan Financial Services Authority |
| Market | Malaysia domestic (onshore) | Offshore / international |
| MYR transactions | Yes — full MYR capability | No (without BNM approval) |
| DuitNow QR | Yes | No |
| Malaysian card schemes | Yes (MyDebit etc.) | Limited |
| Corporate tax | 24% (standard Malaysia) | 15% on net profits |
| Target clients | Malaysian residents and merchants | International clients |
| Min. capital | BNM assessed (no fixed minimum) | MYR 500,000 (~USD $110,000) |
| Foreign ownership | Via Sdn Bhd incorporation | 100% |
| Best for | Malaysian domestic payment operations | ASEAN offshore payment hub |
Decision Guidance
If your primary objective is to process MYR payments for Malaysian merchants, accept DuitNow QR, and operate within Malaysia's domestic payment system, the Malaysia MAS (BNM) is the required license. If your objective is to operate an offshore payment hub serving international clients from Malaysia, transacting in USD/EUR/other currencies without MYR, the Labuan Payment System Operator License (LFSA) is appropriate. Many payment groups hold both — Malaysian domestic operations under MAS and international operations under the Labuan PSO. Zitadelle AG advises on which structure, or which combination, is right for your specific payment model.
Malaysia's Digital Payment Ecosystem in 2026
Understanding Malaysia's payment ecosystem is essential context for MAS license applicants. The market has evolved significantly and continues to develop rapidly.
- •DuitNow QR — Malaysia's national QR payment standard, interoperable across all Malaysian banks and e-wallets, mandatory integration for MAS-licensed acquirers targeting full merchant market coverage
- •MyDebit — Malaysia's national debit network operated by Payments Network Malaysia (PayNet), accepted at all Malaysian bank-issued debit cards
- •Project Nexus (BIS) — Malaysia participates in the BIS's Project Nexus initiative connecting ASEAN national payment systems — creating cross-border ASEAN instant payment capability for MAS-licensed entities
- •ASEAN QR interoperability — Malaysia's DuitNow QR is connected to Singapore's PayNow, Thailand's PromptPay, and other ASEAN national QR standards — enabling cross-border QR payment acceptance
- •E-wallet proliferation — Touch 'n Go eWallet, GrabPay, Boost, MAE, and BigPay are among Malaysia's leading e-wallets; MAS-licensed acquirers can integrate these for merchant acceptance
- •BNM Financial Sector Blueprint 2022–2026 — BNM's active roadmap targeting Malaysia's digital payment transformation provides regulatory tailwind for licensed payment operators
Step-by-Step Application Process
Business Model Assessment and Pre-Application Structuring (2–4 weeks)
Zitadelle AG reviews the specific merchant acquiring services to be offered — payment gateway, POS, QR, card acquiring, or combinations — and assesses capital adequacy relative to projected volumes. We advise on whether a standalone MAS application or a combined MAS + Labuan PSO strategy is appropriate for the business model.
Malaysian Sdn Bhd Incorporation (2–4 weeks)
Incorporate a Malaysian Sdn Bhd with the appropriate corporate purpose covering merchant acquiring services. Appoint directors with relevant payment industry experience — all subject to BNM fit-and-proper assessment.
Documentation Preparation (4–8 weeks)
Compile the complete BNM MAS application package — detailed business plan and financial projections, corporate governance framework, AML/CFT policies, merchant onboarding and risk management procedures, technology infrastructure documentation (RMiT-aligned), cybersecurity and data protection framework, fraud prevention policies, and fit-and-proper documentation for all directors and key personnel.
BNM Submission and Review (4–8 months)
Submit the complete application to BNM using the official MAS License Application Form (2023 version). BNM reviews for regulatory compliance, capital adequacy, technology readiness, and management fitness. BNM may request additional information — Zitadelle AG manages all BNM correspondence throughout the review process.
License Issuance and Operational Launch
Upon BNM approval, the MAS license is issued. Establish payment infrastructure, complete card scheme certifications (PCI DSS), integrate DuitNow QR and MyDebit networks, and onboard initial merchant portfolio under the licensed framework.
Timeline Note
Total project timeline from initial engagement to MAS license issuance typically ranges from 8–18 months — incorporating incorporation, documentation preparation, and BNM review. BNM's review timeline varies with application quality and BNM processing workload.
Card Schemes and Payment Network Integration
MAS-licensed acquirers in Malaysia access a comprehensive suite of payment networks and card schemes. Integration with the relevant networks is a technical and regulatory requirement embedded in the MAS licensing process.
- •Visa — principal or affiliate membership for Visa card acquiring
- •Mastercard — principal or affiliate membership for Mastercard acquiring
- •UnionPay International (UPI) — important for Chinese tourist and traveller merchant acceptance
- •MyDebit — Malaysia's national debit scheme operated by PayNet — required for comprehensive domestic coverage
- •DuitNow QR — national QR standard — interoperable across all Malaysian banks; essential for Malaysian merchant market
- •DuitNow Transfer — real-time bank transfer payment method for merchant acceptance
- •ASEAN QR — cross-border QR interoperability with Singapore PayNow, Thailand PromptPay, and other regional networks
- •E-wallet acceptance — integration with major Malaysian e-wallets for comprehensive merchant acceptance
Ongoing Compliance Obligations
- •Regular BNM reporting — operational and financial submissions per BNM requirements
- •AML/CFT programme maintenance — ongoing transaction monitoring, merchant risk reviews, suspicious transaction reporting to BNM/FIU
- •Technology compliance — BNM RMiT Policy Document compliance; cybersecurity updates and annual IT risk assessment
- •Merchant portfolio monitoring — ongoing risk classification, periodic merchant reviews, chargeback rate monitoring
- •PCI DSS compliance maintenance — annual assessment by Qualified Security Assessor (QSA)
- •Material change notifications — BNM approval required for changes in directors, shareholders, or material business activities
- •Fraud and chargeback management — BNM reporting thresholds for fraud incidents must be maintained
How Zitadelle AG Assists
- Business model assessment — determining whether Malaysia MAS, Labuan PSO, or a combined strategy is appropriate
- Malaysian Sdn Bhd incorporation with merchant acquiring corporate purpose
- Full BNM MAS application preparation — business plan, governance framework, AML/CFT policies, merchant management procedures, technology documentation
- BNM submission and regulatory liaison — all BNM correspondence managed by Zitadelle AG
- Capital adequacy planning — advising on appropriate paid-up capital relative to projected transaction volumes
- Card scheme membership advisory — Visa, Mastercard, UnionPay, MyDebit, and DuitNow integration requirements
- RMiT-aligned technology documentation — cybersecurity framework, IT risk management, disaster recovery plan
- Post-licensing compliance support — BNM reporting, PCI DSS maintenance, annual compliance reviews
- Labuan PSO parallel strategy — for payment groups seeking both Malaysian domestic (MAS) and ASEAN offshore (Labuan PSO) coverage
Frequently Asked Questions
The Malaysia Merchant Acquiring License (MAS) is issued by Bank Negara Malaysia (BNM) under the Financial Services Act 2013. It authorizes entities to provide merchant acquiring services — enabling merchants to accept card payments, QR codes (DuitNow), online payments, and digital wallets — and to handle settlement of funds between buyers and merchants within Malaysia's domestic payment system.
Ready to obtain your Malaysia Merchant Acquiring License?
Zitadelle AG provides end-to-end Malaysia MAS licensing support — from Sdn Bhd incorporation and business model assessment through BNM application preparation, card scheme advisory, DuitNow integration guidance, and ongoing annual compliance support.
Related Licenses
Labuan Payment System Operator
LFSA Payment System Operator — MYR 500,000 capital, 15% tax, ASEAN offshore payment hub. Offshore complement to Malaysia MAS.
Singapore MPI License
MAS Singapore Major Payment Institution — no transaction limits, crypto DPT permitted, SGD $250,000. ASEAN institutional benchmark.
Kazakhstan AIFC MSP
AFSA Money Service Provider — 0% tax, digital asset payment services, English common law. CIS and Eurasian market access.
Mauritius PIS License
FSC Mauritius PIS — USD $45,000 capital, ~3% effective tax, 6–9 months. Cost-efficient offshore payment for Africa/Asia markets.
Quick Facts
Get a Free Quote
Transparent pricing for your Malaysia MAS license.
Disclaimer: This page is provided for informational purposes only and does not constitute legal or regulatory advice. BNM requirements and the Malaysian payment regulatory framework may change. Always consult a qualified advisor before initiating a licensing process. Last updated: April 2026.