Forex: The Legal Reality

Illegal foreign exchange trading in Malaysia means buying or selling foreign currency, or doing any act connected to it, with any person who is not a licensed onshore bank and who has not obtained approval from Bank Negara Malaysia under the Financial Services Act 2013 (FSA) or the Islamic Financial Services Act 2013 (IFSA).

The prohibition sits in Section 214 of the FSA 2013 and Section 225 of the IFSA 2013. Dealing in foreign currency with an unauthorised party is an offence that carries a fine of up to RM50 million, imprisonment of up to 10 years, or both. BNM and licensed banks have repeatedly warned that leveraged retail 'forex trading' offered by online platforms, agents, and 'fund managers' who are not licensed onshore banks falls squarely inside this prohibition.

This is the point most retail marketing hides. A foreign licence does not make a platform legal in Malaysia. A platform can hold a licence in Cyprus, South Africa, or Australia and still be operating unlawfully when it solicits Malaysian residents for foreign currency dealing without BNM authorisation. Malaysia regulates the activity of dealing in currency with residents, so a foreign licence does not cure the local offence.

BNM maintains the Financial Consumer Alert List (FCA List), a public register of companies and websites that are not authorised or approved under the laws BNM administers, and which may be wrongly perceived as licensed. The list is updated from public reports after BNM assessment. BNM added the well-known retail platform OctaFX to the FCA List in August 2022, stating it is neither authorised nor approved under the relevant laws. Many other global forex brands appear on the list for the same reason: no local authorisation.

The Securities Commission Malaysia (SC) runs a parallel Investor Alert List for entities that may be carrying out a regulated capital-market activity without a licence, plus a public Investment Checker tool. The SC separately listed OctaFX for dealing in derivatives and operating a recognised market without SC authorisation. For currency dealing specifically, BNM is the primary authority; for capital-market products such as ETFs and shares, the SC is the licensing body.

Inclusion on an alert list is a warning that the operator holds no Malaysian licence. It does not by itself prove fraud. It does mean that any dispute, frozen withdrawal, or lost deposit falls outside Malaysian consumer protection and enforcement, leaving victims with almost no recourse.

Investment fraud is now the costliest scam category in Malaysia. Police recorded 9,603 investment scam cases in 2025 with losses of RM1.47 billion, up from 6,337 cases and RM848.62 million in 2024. Within the Home Ministry's online-fraud breakdown, losses to non-existent investment schemes rose from RM848.62 million in 2024 to RM1.46 billion in 2025, the largest single loss category.

Total online fraud losses climbed from RM851.12 million in 2022 to RM1.57 billion in 2024 and RM2.97 billion in 2025, according to Home Ministry figures. Recovery is minimal. Authorities told Parliament that of the billions lost since 2022, only about RM10.9 million had been returned to victims through the courts, out of roughly RM32.49 million seized from scam syndicates.

Police identify five dominant fraud methods: fake clone companies, promises of quick high returns, Ponzi structures, love scams, and bogus cryptocurrency platforms. Syndicate members frequently pose as foreign-exchange brokers offering 'packages' promising profit within hours or days. Most victims are aged 31 to 50.

Fraudulent forex schemes share a consistent pattern. The strongest single signal is a promise of guaranteed or unrealistically high returns. Genuine currency markets carry substantial risk, and no honest operator can guarantee profit.

Watch for these red flags:

• Guaranteed daily, weekly, or 'within hours' profit, or fixed monthly percentages.
• No BNM or SC licence, and often a name that appears on the FCA List or SC Investor Alert List.
• Recruitment and referral bonuses for bringing in new members, a hallmark of Ponzi and pyramid structures.
• High-pressure contact through WhatsApp, Telegram, or social media, with celebrity or 'expert' endorsements that are often faked.
• A dashboard showing rising 'profits' that you cannot actually withdraw. Withdrawals get blocked, delayed, or hit with sudden 'tax', 'commission', or 'unlock' fees.
• Payment into a personal or third-party mule bank account rather than a regulated institution.
• No verifiable company registration, physical address, audited accounts, or named management.

Before paying anyone, verify the bank account and phone number on the police 'Semak Mule' portal, and check the operator against BNM and SC lists. If you have been scammed, call the National Scam Response Centre (NSRC) hotline 997 as fast as possible, because early reporting is the only realistic chance of freezing funds.

Malaysians can get exposure to foreign currencies and global markets through fully legal, licensed channels. None of these involve leveraged 'forex trading' with an unlicensed platform.

Licensed onshore banks offer foreign currency accounts (FCA), telegraphic transfers, and spot conversion. Under BNM's Foreign Exchange Policy, a resident individual without domestic ringgit borrowing may invest any amount in foreign-currency assets onshore and abroad. A resident with domestic ringgit borrowing may invest up to RM1 million equivalent in aggregate per calendar year in foreign-currency assets, funded from ringgit conversion.

Multi-currency securities on Bursa Malaysia let investors hold and trade shares and ETFs denominated in foreign currency through a licensed Participating Organisation. A conversion limit of RM1 million for individuals and RM50 million for corporates applies to resident clients, after which the account is blocked from further non-ringgit trading.

Currency and global ETFs, US and Hong Kong shares, and unit trusts can be bought through brokers holding a Capital Markets Services Licence from the SC, such as Rakuten Trade and FSMOne. Businesses with genuine foreign-currency exposure can hedge through forward contracts and FX facilities offered by licensed banks. These routes give currency and international-market exposure while keeping you inside Malaysian regulatory protection. All of them still carry investment risk and can lose value.

Checking a provider takes minutes and should always come before any transfer of money.

For currency dealing and money services, use BNM. Confirm the entity is a licensed onshore bank or an approved party, and cross-check the name against the Financial Consumer Alert List at bnm.gov.my. For capital-market products such as shares, ETFs, unit trusts, and fund management, use the SC. Check the licensed-intermediaries register and run the name through the SC Investment Checker, then cross-check the Investor Alert List at sc.com.my.

For any bank account or phone number you are asked to pay, run it through the police 'Semak Mule' portal to see if it has been reported. Treat a match, or any listing on an alert list, as a stop signal.