Workflow checklist
- Identify the registry. www.ssm.com.my
- Check access requirements. Account required: Yes. Local ID required: No.
- Plan budget. Price range: USD 2.25-4.50. Payment methods: Credit card, Debit card, FPX online banking.
- Anticipate friction. Captcha / 2FA: Captcha. English UI: Yes.
- Plan turnaround. Expected: Unknown.
- Verify recency. Last verified: 2 Sept 2026. Confirm current pricing at the official registry before submitting.
TL;DR. Malaysia’s official business registry is SSM (Suruhanjaya Syarikat Malaysia / Companies Commission of Malaysia). The agency site https://www.ssm.com.my is HTTP 200 (title Suruhanjaya Syarikat Malaysia (SSM)). The old host mydata.ssm.com.my is NXDOMAIN. Live portals: https://www.mydata-ssm.com.my and https://www.ssm-einfo.my (HTTP 200 login; title SSM e-Info - Official and Authorised Service Portal). SSM product page company profile is RM 10 (plus service charge and 8% SST); digital CTC is RM 20. Do not keep MYR 5-25. Instant is not live-cited. The interface is in English. There is no public API.
What is the official Malaysia business registry?
The Companies Commission Malaysia, known by its Malay name Suruhanjaya Syarikat Malaysia (SSM), maintains the central registry for all companies and businesses incorporated or registered in Malaysia. SSM operates under the Companies Act 2016 (which replaced the Companies Act 1965) and the Registration of Businesses Act 1956 (for business names and sole proprietors). The live agency site is https://www.ssm.com.my (HTTP 200, title Suruhanjaya Syarikat Malaysia (SSM)). The old MyData host mydata.ssm.com.my is NXDOMAIN. Current search/purchase portals are https://www.mydata-ssm.com.my and https://www.ssm-einfo.my (HTTP 200 login).
SSM covers Sendirian Berhad (Sdn Bhd, the private limited company), Berhad (Bhd, the public company), limited liability partnerships (LLP, or Perkongsian Liabiliti Terhad), sole proprietors registered under a business name, and branch offices of foreign companies registered in Malaysia. Foreign company registrations are held on the same registry. SSM also maintains the central register of charges (security interests) against company assets.
Records in SSM MyData date back to the early 1990s for most entity types. Digitization of older paper records is ongoing; pre-1990 filings may require a counter visit at an SSM branch office.
What can you search?
SSM MyDATA / e-Info supports searches by:
- Company name (partial match supported)
- Company number (the primary registration identifier, formatted as a 12-digit number post-2016, or legacy format for older companies)
- Business name (for sole proprietors and partnerships)
- Director or officer name (within certain record types)
Data available per entity record includes: registered name, company number, entity type, registered office address, date of incorporation, status (active, struck off, wound up, dissolved), primary business activity (Malaysia Standard Industrial Classification code), paid-up capital, list of directors and company secretaries, list of shareholders, and details of any registered charges.
Data freshness is tied to filing events. SSM processes lodgments filed through its e-portal and updates the registry within 1-3 business days of acceptance. Annual return data is current to the date of the last filed return, which for Sdn Bhd companies may be up to 30 months prior depending on financial year end.
How much does it cost?
| Item | Cost (MYR) | Cost (USD, approx.) |
|---|---|---|
| Company profile (non-CTC) | RM 10.00 plus service charge and 8% SST | ~USD 2.25 plus extras |
| Digital CTC company profile | RM 20.00 plus service charge and 8% SST | ~USD 4.50 plus extras |
Fees are from the live SSM Company Information product page at https://www.ssm.com.my/Pages/Product/Company-Information.aspx: company profile RM 10.00; digital certified true copy is company profile RM 10.00 plus digital CTC RM 10.00 (Total RM 20.00). Those rates do not include the service charge; a service tax of 8% is imposed on the service charge. MYR 5-25 is dropped. MYR/USD conversion used: 0.225 (approximate). Instant is not live-cited. Payment is accepted by credit card, debit card, and FPX (Malaysia’s interbank online banking network), which requires a Malaysian bank account.
Note: FPX is only available to buyers with Malaysian bank accounts. Foreign buyers should use an international credit or debit card.
Do you need a local account or ID?
Registration on MyDATA-SSM / SSM e-Info requires an account. https://www.ssm-einfo.my is HTTP 200 with Login or Register. Foreign buyers can create an account using a passport number and an international email address. No Malaysian identity card (MyKad) or local bank account is mandatory for the registration process itself. The platform does require account creation before purchase; there is no guest checkout.
Once registered, foreign buyers can purchase documents using an international Visa or Mastercard. The captcha step during account creation and login is a standard image-based challenge. There is no government ID verification step beyond providing passport details in the account form.
Is the website in English?
Yes. SSM and e-Info are in English across search, purchase, and account management interfaces. The underlying entity data, including company names and officer names, reflects how those entries were originally filed. Some older entries may have company names recorded only in Romanized Malay or with abbreviations consistent with Malay-language filing conventions.
What’s the turnaround time?
Turnaround was not live-cited as Instant on ssm.com.my, mydata-ssm.com.my, or ssm-einfo.my and is Unknown. Do not treat older “instant download” claims as a live path.
For certified copies intended for cross-border legal proceedings, some counterparties may require an apostille or notarization on top of the SSM-issued certified copy. That additional step is handled outside SSM’s systems.
Is there an API?
No public API is available for MyDATA-SSM. SSM does not offer a developer portal, API key program, or bulk data license for third-party integration as of this check. All access is via the MyDATA-SSM / e-Info web portals.
For compliance platform teams that need structured Malaysia entity data at volume, options are limited to licensed commercial data resellers (see below) or coordinated screen-based retrieval, subject to SSM’s terms of use.
What you legally cannot do
SSM’s Terms of Use for MyDATA / e-Info prohibit automated scraping of the portal, bulk harvesting of company records without written authorization, and redistribution of documents for commercial resale without SSM’s consent. These prohibitions are consistent with Malaysian law governing government data and copyright in official publications.
The Personal Data Protection Act 2010 (PDPA) governs how personal data of Malaysian individuals, including director names and addresses obtained from SSM records, may be processed. Compliance buyers using SSM data for KYC or AML purposes should document the lawful basis under PDPA, typically legitimate interests or legal obligation, as part of their data governance records. For FATF context, see the FAQ below.
For an overview of how registry data fits into a global due diligence framework, see the Global Business Due Diligence Guide.
Practical tips for foreign compliance buyers
- The company number is the anchor identifier. Malaysia transitioned from a shorter legacy company number format to a 12-digit format under the Companies Act 2016. Many existing companies have both a legacy and a new number; search by either, but record both. The 12-digit number is the authoritative identifier going forward.
- Sdn Bhd vs Bhd. Private companies (Sdn Bhd) are the dominant form and have lower disclosure obligations than public companies (Bhd). Shareholding structures for Sdn Bhd are available in SSM records, but financial statements are not publicly accessible unless the company is listed.
- Bumiputera status is not visible in SSM records. Equity distribution by Bumiputera classification is tracked by other government bodies, not SSM. Do not assume ownership structure from the company profile alone.
- Branch offices of foreign companies. Foreign companies registered in Malaysia appear in SSM with a separate company number and a “Foreign Company” entity type. They file separately from the parent entity; the parent’s financial standing requires a separate search in the parent’s home jurisdiction.
- Status field meanings. “Active” means the entity is registered and in good standing. “Struck off” means SSM has removed the company from the register for non-compliance. A company may also be “In Liquidation” or “Dissolved”; each carries different implications for counterparty risk.
- Malaysia is not on the FATF grey list (see FAQ). Standard CDD applies; no enhanced due diligence is mandated solely by jurisdiction.
Alternatives if you cannot access SSM MyDATA / e-Info directly
- Aggregator search (free, indicative only): OpenCorporates indexes some Malaysia company filings but lags official data. Useful for a quick name check; not for compliance-grade verification.
- No public API alternative exists. SSM has not published a bulk data feed or API program as of this check.
Local data suppliers
- CTOS Data Systems (ctosmy.com). Malaysia’s largest credit reporting agency, licensed under the Credit Reporting Agencies Act 2010. Provides commercial credit reports combining SSM registry data with trade payment history, court records, and CCRIS (Central Credit Reference Information System) data. Target audience: banks, trade creditors, leasing companies.
- RAM Credit Information (ramci.com.my). Part of the RAM group, which includes RAM Ratings. Provides commercial credit reports and company due diligence reports for Malaysian entities. Target audience: financial institutions and corporates performing supplier or counterparty checks.
Use SSM MyDATA / e-Info for the authoritative legal filing record. Use a credit bureau when you also need payment behavior or financial risk scoring.
FAQ
Can a foreign company access the Malaysia registry directly?
Yes. Foreign buyers can register on MyDATA-SSM or SSM e-Info using a passport and an international email address, then purchase company documents using an international credit or debit card. No Malaysian entity or local bank account is required for document purchase. The registration step adds a minor friction point compared to registries with guest checkout. Instant fulfilment is not live-cited.
What is the company number in Malaysia?
All companies incorporated under the Companies Act 2016 receive a 12-digit company registration number assigned by SSM at incorporation. Older companies also retain their legacy number (typically 6-7 digits followed by letter codes). Both numbers refer to the same entity; the 12-digit number is now the primary identifier used in all SSM filings and government systems.
What entity types are registered with SSM?
SSM registers Sendirian Berhad (Sdn Bhd, private limited companies), Berhad (Bhd, public companies), limited liability partnerships (PLT/LLP), sole proprietors registered under a business name, general partnerships, and foreign companies (branch offices of overseas entities). Statutory bodies, cooperatives, and societies are not registered with SSM; they fall under separate regulatory bodies.
Does Malaysia have a beneficial ownership (UBO) registry?
Malaysia introduced beneficial ownership disclosure requirements through amendments to the Companies Act 2016, effective from 2020. Companies are required to maintain a Register of Beneficial Owners internally and to report beneficial owners holding 20% or more of voting rights to SSM. However, as of this check, this beneficial ownership data is not treated as live-cited on the SSM e-Info login page. Do not invent UBO fields. Compliance buyers may request it during due diligence through the company itself or through SSM’s processes.
How current is the data in SSM MyDATA / e-Info?
Data is updated on a filing-event basis. Changes in directors, registered address, paid-up capital, and company status appear within 1-3 business days of SSM accepting the lodgment. Annual return data reflects the most recently filed return, which may be 12-30 months prior depending on the company’s financial year. For real-time status, the portal is the definitive source; no other public feed mirrors SSM data.
Is Malaysia on the FATF grey list?
No. Malaysia is not on the FATF Increased Monitoring list as of May 2026. Malaysia completed its FATF mutual evaluation process and has addressed its identified deficiencies. Standard customer due diligence (CDD) procedures apply for Malaysian counterparties. For the current FATF list, see fatf-gafi.org.
What’s the difference between the registry and tax filings?
SSM holds incorporation and filing data: company structure, directors, shareholders, registered address, and charges. Tax filings are held separately by the Inland Revenue Board of Malaysia (Lembaga Hasil Dalam Negeri, LHDN). Financial accounts filed by private companies with SSM are not publicly accessible; only listed companies file publicly accessible audited accounts. For financial risk assessment beyond registry data, use a commercial credit bureau such as CTOS or RAMCI.
Last verified: 2026-09-02. Sources: SSM (ssm.com.my HTTP 200), MyDATA-SSM (mydata-ssm.com.my; old mydata.ssm.com.my NXDOMAIN), SSM e-Info (ssm-einfo.my HTTP 200 login), Company Information product page (RM 10 / digital CTC RM 20 plus service charge and 8% SST), Companies Act 2016 (Malaysia), FATF (fatf-gafi.org). For the full global due diligence framework, see our Global Business Due Diligence Guide.