Equity Crowdfunding Compliance in Malaysia

Closing an equity crowdfunding (ECF) round in Malaysia does not end your compliance obligations — it starts a new set of them. Once shares are allotted to your ECF investors, the Companies Act 2016 gives you 14 days to update your register of members and lodge a return of allotment with the Companies Commission of Malaysia, the Securities Commission’s Guidelines on Recognized Markets expect ongoing communication with your new shareholders, and every ringgit you raise counts against a lifetime cap on how much you can take through ECF platforms. This is what a compliant issuer does after the campaign closes, not before it opens.

Most founders treat the funding page hitting its target as the finish line. It isn’t. The businesses that raise well and then get the paperwork wrong are the ones that show up in a later due diligence exercise with a shareholder register nobody updated and a cap table nobody can reconcile — a problem more common than the rest of our guide to raising capital in Malaysia might suggest.

What actually changes once the shares are allotted?

An ECF raise is, in company law terms, an allotment of new shares to a group of investors who were previously strangers to your company — the same underlying event covered from the fundraising side in our guide to what equity fundraising involves. That triggers three separate sets of statutory duties: updating your own internal records, telling the Registrar what happened, and — because a private company is generally not allowed to offer shares to the public at all — relying correctly on the narrow exemption that let the platform raise happen in the first place.

Section 43 of the Companies Act 2016 prohibits a private company (an Sdn Bhd) from offering shares to the public, allotting shares with a view to a public offer, or inviting the public to deposit money with it. Breach carries a penalty of up to five years’ imprisonment or a fine of up to RM3 million, or both — this is not a filing formality. Your ECF raise is lawful only because section 43(3)(c) carves out offers made in accordance with the arrangements prescribed by the Securities Commission on a market that is approved, registered or regulated under the Capital Markets and Services Act 2007, and a registered ECF operator is exactly that market. Get the platform’s registration status wrong, or structure the raise outside its approved process, and you lose the exemption that makes the whole round legal.

What does the Companies Act require in the first 14 days?

Two clocks start running the moment shares are allotted to your ECF investors, and both run out in 14 days.

Two adjacent questions usually come up at the same point in this process: see bursa leap market listing for malaysian smes and investor readiness legal audit for how each is handled.

In practice this means your company secretary needs the final allottee list — full names, addresses, and the number and class of shares each investor received — within days of the platform confirming the raise closed, not weeks. A crowdfunding round with 60 or 200 individual investors makes this materially heavier than a normal share issue, and it is usually where the 14-day window gets missed.

How many shareholders can a private company actually carry?

Section 42 caps a private company at 50 shareholders. Joint holders of the same shares count as one person, and a shareholder who is or was an employee of the company or its subsidiary when they became a shareholder is not counted — an investor who joins the payroll only later still counts. A wave of individual ECF investors is exactly the kind of allotment that pushes a company past the limit. If the Registrar determines a company has more than 50 shareholders, the Registrar serves a notice, the company is a public company from the date specified in that notice, its name changes (the “Sdn.” comes off), and within 14 days from the date of the notice it must lodge a statement in lieu of prospectus and a statutory declaration verifying that paragraph 190(1)(b) has been complied with — and it cannot convert back to a private company without the leave of the Court. Check the post-raise shareholder count against the section 42 threshold as part of closing the round, not after SSM raises it with you.

What must you keep telling your ECF shareholders after the raise?

Paragraph 13.28 of the Securities Commission’s Guidelines on Recognized Markets (the framework covering ECF, P2P, and related platforms) imposes an ongoing duty on an issuer that has successfully completed its fundraising exercise: it must ensure there is effective, transparent and regular communication with its shareholders, including regular updates on the progress of the business and the issuer’s financial position. The Guidelines do not prescribe a fixed reporting frequency or format for this — the obligation is to keep communicating, not to hit a specific quarterly deadline — so building a simple, consistent update cadence for your ECF shareholder base is a defensible way to discharge it, and worth setting up before the goodwill from a successful raise starts to fade.

How much more can you raise through ECF, and what counts against the cap?

Paragraph 13.19 of the Guidelines caps what an issuer may raise across ECF platforms at RM20 million over its lifetime, excluding the issuer’s own capital contribution and any funding obtained through a private placement exercise. (The cap does not apply to a microfund hosted on an ECF platform — paragraph 13.20.) That cap is cumulative across platforms and across campaigns, not a per-round limit, so a company planning a second or third ECF round needs to know how much of the ceiling the first raise already used before it starts building the next campaign. Two provisions narrow the practical problem: paragraph 13.16 prohibits an issuer from being hosted concurrently on more than one ECF platform, or on a Bursa Malaysia stock market, and paragraph 13.04 puts the monitoring of fundraising and investment limits on the platform operator. What the Guidelines do not spell out is how a later operator establishes what an issuer already raised on an earlier one — so keep your own record of every ECF raise to date rather than assuming the next platform can see your history with a competitor.

What does it cost to get this wrong?

The exposure is not evenly spread. Missing the section 77 register deadline is a fixable filing lapse with a capped fine. Losing the section 43 exemption — by structuring a raise outside the platform’s approved process, or treating a second round as a private arrangement when it is really a public offer — carries a custodial sentence on top of a seven-figure fine, for the company’s officers personally, not just the company. And an uncontrolled shareholder count that tips past 50 converts your Sdn Bhd into a public company by operation of law, with governance and reporting consequences a founder who set out to raise RM2 million from a crowd rarely intends to take on. The Guidelines set no fine on an issuer for the paragraph 13.28 communication duty; the enforcement lever they contain runs through the platform — the SC may withdraw a recognized market operator’s registration for contravening an obligation under the Guidelines (paragraph 10.01), and operators carry their own monitoring duties. That does not make the duty optional: a shareholder base that stops hearing from you is also a shareholder base that stops being supportive at the next round, or the next due diligence.

Frequently Asked Questions

Do I need a lawyer after an ECF raise, or only to set it up?

The statutory deadlines — registering the allotment and lodging the return within 14 days, and confirming the company has not tipped over the 50-shareholder cap — fall immediately after the raise closes, which is exactly when many founders stop paying attention to compliance. Getting these filings and checks done correctly at closing is at least as important as the disclosure work done before the campaign opened.

Does every ECF investor count toward the 50-shareholder limit?

Most do. Section 42 counts joint holders once and excludes a shareholder who is or was an employee of the company or its subsidiary when they became a shareholder. Ordinary individual ECF investors are counted individually, and someone who becomes an employee only after taking shares still counts — so a raise with a large number of small tickets can use up the private company headroom quickly.

Can I run a second ECF campaign straight after the first one closes?

Nothing in the Guidelines stops sequential campaigns outright, but paragraph 13.16 does prohibit an issuer from being hosted on more than one ECF platform at the same time, or on a Bursa Malaysia stock market while hosted. Every raise also counts against the same RM20 million lifetime cap under paragraph 13.19, and each new round still has to fit within the section 43 exemption and the section 42 shareholder limit. Map the numbers before you commit to a second campaign rather than after.

What happens if I miss the 14-day filing deadline?

Both the company and every officer who contravenes are exposed to a fine — up to RM50,000 under section 77(2) for failing to register the allotment in the register of members, and up to RM10,000 under section 78(9) for failing to lodge the return of allotment — with a further fine of up to RM500 for each day either failure continues after conviction. Treat it as a hard deadline your company secretary tracks from the date of allotment, not from when the funds land in your account.

Getting your post-raise obligations documented properly

A successful ECF round changes your shareholder register, your cap table, and your reporting obligations in the same week — and the statutory deadlines do not wait for you to catch up. Legal That Works advises Malaysian businesses on Equity Crowdfunding and P2P Platform Compliance, including the post-raise shareholder and reporting obligations and the register and cap table updates a completed raise actually requires. If your campaign has closed or is about to, get the closing paperwork right before SSM or the Securities Commission ask why it isn’t.

This article is for general information only and does not constitute legal advice. Every transaction and every set of facts is different. Obtain specific advice from a qualified adviser before acting on any part of it.

Related guides

• Bursa LEAP Market Listing for Malaysian SMEs

• Investor Readiness Legal Audit

• Legal Due Diligence for Institutional Investors

• Cap Table Structuring for Malaysian Startups

• Share Allotment vs Share Transfer in Malaysia

• Asset Purchase Agreements in Malaysia