Education/ASEAN Regulatory/The SC and CMSA: When Malaysian Capital Markets Law Applies to Your Deal
asean-regulatoryintermediate

The SC and CMSA: When Malaysian Capital Markets Law Applies to Your Deal

Not every business transaction triggers Securities Commission oversight, but when it does, non-compliance carries serious penalties. Understanding the boundary between regulated advisory and unregulated commercial activity is essential for anyone involved in Malaysian M&A.

Farah Aishah binti Zulkifli·2025-09-01·9 min read

One of the questions I am asked most often by business owners, brokers, and advisors operating in Malaysia is: "Do I need a licence to help someone buy or sell a business?" The answer depends on what you are doing, not just what you call it. The Capital Markets and Services Act 2007 (CMSA) draws a specific line, and operating on the wrong side of it — even inadvertently — carries penalties of up to RM 10 million or imprisonment.

The Securities Commission and Its Mandate

The Securities Commission Malaysia (SC) is the statutory body established under the Securities Commission Act 1993. Its mandate is to regulate the capital markets — primarily securities (shares, bonds) and derivatives — and to protect investors in those markets. The SC is distinct from the Companies Commission (SSM), which handles corporate administration, and Bank Negara Malaysia (BNM), which regulates banking and insurance.

The SC's relevance to M&A flows from one fact: shares in Malaysian companies are securities. The advice, trading, dealing in, and underwriting of securities is a regulated activity under the CMSA.

What the CMSA Regulates

Schedule 2 of the CMSA sets out the regulated activities for which a Capital Markets Services Licence (CMSL) is required:

  • Dealing in securities
  • Trading in futures contracts
  • Fund management
  • Advising on corporate finance (this is the one most relevant to M&A)
  • Investment advice
  • Financial planning
  • Clearing

"Advising on corporate finance" is defined broadly. It includes advice on mergers, acquisitions, takeovers, restructurings, share issues, and related transactions. This is not limited to listed companies — the CMSA applies to private company transactions as well where capital markets instruments (shares, convertible instruments, debt securities) are involved.

The Critical Distinction: Advisory vs Commercial

Here is where the line is drawn, and why it matters for how Mergeance is structured.

Regulated advisory means providing advice or recommendations to a party on whether, how, or on what terms to proceed with a transaction involving securities. If you tell a client "you should sell your shares in ABC Sdn Bhd at RM 5 per share" or "this is how you should structure your acquisition of XYZ," you are advising on corporate finance and you need a CMSL.

Unregulated commercial activity means facilitating a commercial transaction between buyers and sellers without providing investment advice. Introducing parties, providing a deal platform, preparing information memorandums that describe a business factually (without recommending a course of action), and providing technology infrastructure for deal management are generally outside the scope of regulated activity.

Mergeance operates as technology infrastructure. The Mergeance platform facilitates introductions, manages document flow, and provides data and analytics tools for transactions. It does not provide investment advice, valuation opinions, or recommendations to buy or sell. All licensed advisory activity on transactions facilitated through the platform is conducted by FCA Capital Sdn. Bhd. (SC licence CMSL/A0264/2009), which holds a Capital Markets Services Licence covering corporate finance advisory. This distinction is not semantic — it is the legal boundary that defines what Mergeance is and is not.

Why Licensed Advisory Matters

A CMSL holder is subject to:

  • Fit and proper requirements for directors and key management
  • Minimum financial resources (paid-up capital and liquid capital requirements)
  • Mandatory disclosure obligations to clients (fees, conflicts of interest)
  • Compliance with SC's Guidelines on Market Conduct
  • Annual audit and reporting to the SC

These requirements exist to protect clients. When you engage a licensed advisor, you have recourse through the SC if the advisor acts improperly. When you engage an unlicensed person to provide advisory services, you have no such protection — and the advisor is breaking the law.

Important:

Providing corporate finance advisory without a CMSL is an offence under Section 58 of the CMSA. The maximum penalty is a fine of RM 10 million, imprisonment for up to 10 years, or both. This applies to individuals as well as companies. "I didn't know I needed a licence" is not a defence. Business brokers, consultants, and advisors who regularly facilitate M&A transactions should take legal advice on whether their activities require licensing.

When the CMSA Applies vs Does Not Apply

This question requires a case-by-case legal assessment, but as a general guide:

CMSA is likely engaged when:

  • You are advising a client on whether to accept or reject a takeover offer
  • You are providing a fairness opinion or valuation opinion in connection with a share transaction
  • You are recommending the structure of a deal involving the issuance or transfer of shares
  • You are acting as an intermediary in a share sale and being paid a commission that is contingent on the transaction completing

CMSA is generally not engaged when:

  • You are selling your own business (a shareholder selling their own shares is not providing advisory services)
  • You are a lawyer or accountant providing professional advice incidental to your primary role (legal or accounting advice, not corporate finance advice)
  • You are operating a platform that facilitates introductions and document management without providing recommendations

Working with a Licensed Firm

When engaging an advisor for an M&A transaction involving shares, verify their licence status. The SC maintains a public register of licensed capital markets intermediaries at sc.com.my. You can search by company name. For FCA Capital Sdn. Bhd., the licence CMSL/A0264/2009 covers corporate finance advisory.

The licensed advisor provides the regulated layer: valuation opinions, deal recommendations, fairness assessments, negotiation strategy. The technology layer — data room, analytics, communication tools — is what Mergeance provides. Together, these components create a compliant, efficient transaction process.

The Takeover Code Dimension

For transactions involving listed companies or companies with listed securities, the Malaysian Code on Take-Overs and Mergers 2016 (administered by the SC) adds an additional regulatory layer: mandatory offer thresholds, disclosure requirements, and independent advice requirements. Most SME transactions do not involve listed entities, but if your target has listed bonds or is a subsidiary of a listed company, this code may be triggered. Your licensed advisor will identify this early.

Practical Takeaway

For business owners, the practical implication is simple: if someone is giving you M&A advice and charging for it, ask to see their SC licence. If they cannot produce one, they should not be providing that advice — and you should not be paying for it, because the advice has no professional accountability framework behind it.

For advisors and intermediaries: if you are regularly involved in transactions involving the transfer of shares — particularly if you receive a success fee — take legal advice on your licensing position. The CMSA's application to private company M&A is not widely understood, and the penalties for non-compliance are severe.

Related reading

The Role of an M&A Advisor: What You Are Paying For

What a licensed advisor actually does across the full transaction lifecycle, and how to evaluate whether you are getting value from the engagement.

Related reading

PDPA and M&A: Managing Personal Data in Due Diligence

Personal data flows through every M&A transaction. Malaysia's Personal Data Protection Act 2010 creates obligations that advisors and parties need to understand.

Was this article helpful?