Best Forex Brokers in Malaysia 2026: What BNM and SC Rules Allow, and Why Alert Lists Matter

In Malaysia, the central bank itself describes forex dealing outside licensed onshore banks as an illegal scheme. Two rulebooks matter: Bank Negara Malaysia (BNM) controls who may deal in foreign currency with residents, and the Securities Commission Malaysia (SC) controls who may deal in derivatives such as CFDs. This guide explains both, shows what the official alert lists say about well-known brand names, and ends with a checklist you can use on any provider.

The broker box above this article draws on our licence database. It shows no broker with a locally licensed retail entity for Malaysia, and the reasons are set out below.

How BNM defines an illegal forex trading scheme#

Direct answer: if you are in Malaysia and you buy or sell foreign currency with anyone who is not a licensed onshore bank and has no BNM approval, BNM calls that an illegal foreign exchange trading scheme.

BNM's Financial Fraud Alert page defines the scheme as the buying or selling of foreign currency by an individual or company in Malaysia with any person who is not a licensed onshore bank or has not obtained BNM approval under the Financial Services Act 2013 (FSA) or the Islamic Financial Services Act 2013 (IFSA). It names the institutions allowed to conduct foreign currency trading in Malaysia (commercial banks, Islamic banks, investment banks and international Islamic banks) and advises the public to deal only with them.

The Foreign Exchange Policy (FEP) Notices, consolidated and in force since 1 October 2025, put this in rule form:

• Notice 1, paragraph 5: a resident may buy or sell one foreign currency against another, spot or forward, with a licensed onshore bank.
• Notice 4, paragraph 5(c): a resident may pay a non-resident in foreign currency for any purpose except an exchange rate derivative offered by that non-resident, unless BNM has approved it.
• Definitions: an exchange rate derivative is any derivative whose price, value or payment obligation is derived from, referenced to or based on an exchange rate.

A EUR/USD CFD from an overseas broker fits that definition. CIMB Bank's customer FAQ on the FEP Notices says a resident may not pay for an FX contract with a non-resident, and gives forex trading on an online platform run by a non-resident as its example. It also cites section 214(9) of the FSA: up to ten years' imprisonment, a fine of up to RM50 million, or both.

Worked example: a Penang engineer opens an account with a Seychelles-registered broker and buys 0.10 lots of GBP/USD. No ringgit appears in the pair, yet the trade is still an exchange rate derivative offered by a non-resident, and the deposit is a payment to that non-resident.

Common mistake: believing the rules cover only ringgit pairs. Notice 1 also covers one foreign currency against another, with licensed onshore banks as the counterparty.

Practical tip: if someone says an account is legal because the broker is licensed abroad, ask which BNM approval covers you as a resident. A foreign licence is not one.

What the SC's CFD framework does and does not cover#

Direct answer: the SC licenses CFD providers, but onshore CFDs may reference only shares and indices, and only sophisticated investors may trade them. There is no SC-licensed currency CFD for ordinary retail traders.

The SC's FAQ on its Guidelines on Contracts for Difference (revised 5 February 2024) sets out the framework:

• CFDs are derivatives under the Capital Markets and Services Act 2007 (CMSA). A provider needs a Capital Markets Services Licence (CMSL) for dealing in derivatives, or one restricted to CFDs.
• Onshore CFDs may only be based on shares and indices that meet the Guidelines' criteria.
• Minimum margins are 10% for CFDs on index shares, 20% for other shares and 5% for index CFDs, which means leverage of at most 10:1, 5:1 and 20:1.
• Only sophisticated investors may currently trade CFDs, and providers must run a suitability assessment for first-time CFD investors.
• Licensed providers contribute to the Capital Market Compensation Fund, a route to recourse if a licensed holder fails to pay what it owes.

Worked example: a sophisticated investor with a CMSL-licensed CFD provider can trade a qualifying index CFD at up to 20:1, but cannot trade USD/JPY through that framework, because currency is not an allowed underlying.

Common mistake: assuming a firm with any SC licence, such as fund management, may offer CFDs. Check the exact regulated activity in the SC register.

Four routes compared: who protects a Malaysian resident#

Why a Labuan licence is not an onshore licence#

Direct answer: Labuan has its own regulator, Labuan FSA, but a Labuan money-broking licence does not authorise dealing with onshore Malaysian residents.

Labuan FSA says Labuan money brokers may only transact in foreign currency, may not deal in ringgit except to pay administrative and statutory expenses, and are prohibited from dealing with residents other than authorised dealers. Its 2024 guidelines add that the licence covers arranging trades as an intermediary, not acting as principal, and its March 2025 FAQ says a Labuan money broker must follow Malaysia's foreign exchange rules and obtain domestic approvals before serving a market. The FEP Notices also treat Labuan entities as non-residents.

Worked example: a website says it is licensed in Labuan, Malaysia, and offers ringgit deposits to Kuala Lumpur clients. Labuan FSA's own guidance bars money brokers from ringgit dealing and from residents, so the offer contradicts the licence it cites.

Common mistake: reading the word Malaysia in a Labuan licence as permission to serve Malaysians.

What the SC and BNM alert lists say about XM and Exness names#

Direct answer: both brand names appear. We checked the live lists on 28 September 2026. An entry is not a finding of fraud; it means the regulator has identified the entry as not authorised by it.

How to read this fairly:

• The 2018 SC entry names the XM platform, a Belize address and xm.com itself, so it concerns the XM group's own offering to Malaysians, not only impersonators. XM's retail entities are supervised in Cyprus, Dubai, South Africa, Belize, Seychelles and Kenya; none of those licences is Malaysian.
• The SC labels its Exness entries as potential clones. BNM gives no detail on its two 2017 Exness entries, so we cannot say whether they refer to the Exness group. Exness's retail licences are in South Africa, Kenya, Seychelles, Mauritius and Curaçao and Sint Maarten; none is Malaysian.
• BNM's disclaimer says absence from its list does not mean an entity is licensed.

Common mistake: dismissing an entry because the brand is regulated elsewhere. The listing tells you the Malaysian regulator gives you no protection with that entity. See also Is XM safe? and our brand versus legal entity checklist.

Clone channels and patuh syariah pitches#

Direct answer: many Malaysian alert entries using the XM and Exness names are Telegram channels and look-alike domains, and several call themselves Shariah-compliant.

The 2022 SC entry for Pelaburan XM Malaysia lists dozens of Telegram channels, some named around patuh syariah (Shariah-compliant), and describes promised returns such as RM7,000 in six hours on RM500. BNM's fraud guidance describes the same pattern: free seminars, recruiting young graduates to sign up family and friends, deposits into third-party accounts and margin calls to recover paper losses.

Worked example: a WhatsApp group shares a patuh syariah XM channel asking for RM500 to a personal account with a fixed return. The guaranteed return, the personal account and the Shariah label used as bait all match the regulators' warnings. Read our forex scam warning signs.

The 2012 National Fatwa Council ruling on online forex#

Direct answer: Malaysia's National Fatwa Council decided in 2012 that individual spot forex through electronic platforms, as then offered, is haram.

The 98th discourse of the Council's Fatwa Committee (13 to 15 February 2012), as quoted by the Federal Territory Mufti Office, found riba through rollover interest, a loan condition through leverage, unclear possession (qabd), sale of currency not held and speculation resembling gambling, and noted that the trading is not valid under Malaysian law. The Mufti Office says using a platform only to study analysis, without transacting, is permissible. We found no published ruling by the SC's or BNM's Shariah Advisory Council on retail margin forex, so we attribute none to them.

Common mistake: assuming a swap-free account answers the fatwa. Removing an overnight charge addresses only one of the grounds listed. A swap-free account is a fee arrangement, not a ruling; see is forex halal? for the wider debate.

Tax: what LHDN has and has not said#

Direct answer: we found no Inland Revenue Board of Malaysia (LHDN) guidance that specifically addresses individuals' gains from retail forex or CFDs.

Tax treatment depends on your circumstances, and a trade BNM regards as unlawful raises questions a general article cannot answer. Keep statements and payment records and consult a Malaysian tax adviser.

Ringgit funding: why banks ask about the purpose#

Direct answer: foreign exchange for residents runs through licensed onshore banks, and those banks must record why you are buying currency.

On 21 July 2005 BNM ended the fixed rate of RM3.80 per US dollar and moved the ringgit (MYR) to a managed float, monitored against a currency basket. BNM's Minimum Due Diligence Guide requires a licensed onshore bank to obtain the purpose of every foreign exchange transaction at the outset, for reporting to BNM. Card, FPX or e-wallet icons on a broker's cashier show that a payment processor exists, not that the payment is permitted.

Common mistake: funding an account through a stranger's personal account or a relative's card. BNM names third-party deposits as a feature of illegal schemes.

Trading hours from Kuala Lumpur (MYT, UTC+8)#

Direct answer: Malaysia Time is UTC+8 all year with no daylight saving, so the main sessions fall in the afternoon and night and shift by an hour when Europe and the US change clocks.

The UK changes back on 25 October 2026 and the US on 1 November 2026, so for one week the two opens sit an hour closer. The market typically opens around 05:00 to 06:00 MYT on Monday and closes around the same time on Saturday. See our market hours, liquidity and slippage guide.

Verification checklist for Malaysian residents#

• Decide what you want to trade. Currency derivatives have no SC-licensed retail route.
• For foreign exchange itself, use a licensed onshore bank.
• For CFDs, confirm you qualify as a sophisticated investor and find the provider's dealing in derivatives licence in the SC register.
• Search the exact company, domain and social channel on the SC Investor Alert List and the BNM Financial Consumer Alert List.
• Note the legal entity in the client agreement and its home regulator.
• Treat a Labuan licence as irrelevant to onshore residents unless the firm shows domestic approval.
• Reject guaranteed returns, personal bank accounts, recruitment incentives and Shariah labels used as selling points.
• Keep dated screenshots of every register search, and size any position with the lot size calculator and our risk management guide.

Key takeaways#

• BNM treats foreign currency dealing with anyone other than a licensed onshore bank or a BNM-approved person as an illegal scheme.
• The FEP Notices bar payments to non-residents for exchange rate derivatives without BNM approval.
• SC-licensed CFDs cover only shares and indices, and only for sophisticated investors.
• A Labuan money-broking licence does not permit dealing with residents or in ringgit.
• The SC lists the XM platform (2018) and BNM lists XM Forex Malaysia (2017); Exness-named entries appear as SC-labelled clones and as undetailed BNM entries.
• The National Fatwa Council ruled online individual spot forex haram in 2012.

Glossary#

• Licensed onshore bank: a commercial, Islamic, investment or international Islamic bank licensed in Malaysia.
• FEP Notices: BNM's Foreign Exchange Policy rules issued under the FSA and IFSA.
• Exchange rate derivative: any derivative whose value or payment is based on an exchange rate, including a forex CFD.
• CMSL: Capital Markets Services Licence issued by the SC under the CMSA.
• Sophisticated investor: an investor within the SC's defined categories; currently the only group allowed to trade CFDs.
• Potential clone entity: a regulator's label for a scheme imitating a real firm's name or branding.

Related reading#

Read our worldwide legality guide, and the Singapore broker guide, where MAS licensing works very differently.