Who Is Your Company's Beneficial Owner? Malaysia's SSM Register Duty Explained

Decision tree plus worked ownership map

Trace the beneficial owner without guessing

1. Start with each name in the share register. Mark whether it is an individual or another entity.
2. If it is an entity, trace ownership and control one level at a time until the relevant natural person or persons can be assessed under current SSM guidance.
3. Check separately who may exercise ultimate control. Do not assume the largest shareholder or a director automatically qualifies.
4. For each step, record the register or agreement checked, notice sent, delivery proof, reply, conclusion, decision date and responsible officer.
5. After confirming a change, record the internal update date and track the 14-day lodgement clock. Check the current SSM form and process before filing.
6. For a trust, nominee or unclear control arrangement, keep unanswered notices and ask the company secretary or a Malaysian company lawyer. Do not fill the field by guessing.

Why this matters

The practical problem often appears when a company prepares an annual return, opens a bank account, bids for work or updates its corporate records. The share register names another company, a nominee or several relatives, but nobody has documented the natural person who ultimately controls the decisions. A director may assume that listing the registered shareholder is enough. The 2024 amendments deliberately separate legal title from beneficial ownership, so that assumption can leave the company's internal register incomplete.

Act A1701 inserted Division 8A into the Companies Act 2016. Its definition looks through the ownership chain to a natural person. For shares, the amended definition refers to the ultimate owner and excludes a nominee. For the company itself, section 60A covers a natural person who ultimately owns or controls it and includes a person exercising ultimate effective control. The Registrar may issue identification guidelines, so a company should apply the current SSM material to its actual structure instead of inventing a percentage rule from an overseas form.

These beneficial-ownership duties have been in force since 1 April 2024.

What the law says

Section 60B requires every company to keep a beneficial-owner register. The recorded particulars include full name, addresses, nationality, identification and usual place of residence, the date the person became a beneficial owner, the date the person ceased to be one and other information the Registrar may require. The register must be kept at the registered office or another place in Malaysia notified to the Registrar. This is sensitive data, so access control and an audit trail should be part of the records process.

Changes have two clocks. The company first updates its own register when information is received or confirmed. It must then lodge notice of any change with the Registrar within 14 days from the date the change is recorded in the register. Information about a person who ceases to be a beneficial owner must be retained for seven years from the cessation date. A spreadsheet that overwrites the old name without a dated history does not meet that retention logic.

Who must the company ask? Section 60C requires written notices to members. The company must also write to a person who may be a beneficial owner, or may know that person’s identity, when the available facts give reasonable grounds for that view.

What should the notice request? Ask the recipient to confirm whether they are a beneficial owner and to provide the required details. If they know someone else’s identity, ask for that information through the statutory notice process.

What must be recorded? Keep the notice date, delivery proof, response and information received. When information arrives under these notices, record the notice date and information in the register within 14 days.

When must the register and SSM filing be updated? Ask for confirmation if recorded details may have changed or may be wrong. Once a confirmed change is recorded internally, lodge the change notice with the Registrar within 14 days.

The natural person has a direct role too. Section 60D requires a person who has reason to believe that he or she is a beneficial owner to notify the company and provide the prescribed information as soon as practicable. A beneficial owner must also notify changes and cessation information. Directors should not treat silence from a nominee, shareholder or group entity as proof that no beneficial owner exists; they should document the inquiries, responses and basis for the conclusion reached.

The statutory consequences are real but should be stated accurately. A company and every officer who contravenes section 60B commit an offence and, on conviction, may be fined up to RM20,000, with a further fine up to RM500 for each day a continuing offence remains after conviction. Other failures under sections 60C and 60D are also offences, including knowingly or recklessly making a false statement in purported compliance with a notice. This is not a basis to accuse a person of concealment; it is a reason to keep a careful inquiry file.

The register is not a public directory in the ordinary sense. The Companies (Access to the Register and Information relating to Beneficial Ownership) Regulations 2025 came into operation on 10 January 2025. They restrict access to specified persons and bodies, including a beneficial owner for that person's own information, a person authorised in writing by that owner, Bank Negara Malaysia and enforcement agencies, subject to proof. The regulations also govern access to information lodged with the Registrar for specified official and regulated purposes.

How does this impact me?

For a simple owner-managed Sdn Bhd, start by mapping every registered shareholder to a natural person and asking who can actually make or block the important decisions. For a layered group, partnership, trust or nominee arrangement, draw the chain on one page and attach the supporting registers, agreements and written confirmations. Do not publish identity numbers or residential addresses in an ordinary board pack; keep the statutory register in a controlled location.

Build a repeatable change trigger. Share transfers, allotments, deaths, trust or nominee changes, group restructurings, voting agreements and changes in practical control should prompt a beneficial-ownership review. The responsible officer should record the event date, notices sent, replies, decision, date entered in the internal register and date lodged with SSM. Calendar the 14-day lodgement period from the internal recording date rather than waiting for the next annual return.

If nobody can identify the natural person confidently, do not fill the field with a convenient director merely to finish a filing. Preserve the ownership chart and unanswered notices, escalate to the board and company secretary, and obtain Malaysian company-law advice where the structure is genuinely unclear. The statutory method depends on evidence and current SSM guidance, not on a guess about who seems influential.

Key lessons

The first lesson is that shareholder, director and beneficial owner are different labels. One person can hold all three roles, but that is a factual outcome, not a shortcut. The law looks beyond names on the register to ultimate ownership or control by a natural person. A corporate shareholder cannot itself be the final natural person in that inquiry.

The second lesson is that good compliance is chronological. A useful file shows what the company knew, which notice it sent, when a response arrived, how the conclusion was reached, when the internal register changed and when the Registrar was notified. That sequence protects accuracy better than a yearly scramble and makes the seven-year history possible.

Bottom line

Every Malaysian company should treat beneficial-ownership information as a live statutory register. Identify the natural person through the ownership and control chain, issue and retain the required notices, record changes promptly, lodge the change notice within 14 days of recording it and preserve former-owner information for seven years. Keep access restricted and use current SSM guidance or professional advice when the control chain is not clear.

Detailed steps

• Draw the complete ownership and control chain from every registered shareholder to the natural person or persons at the end of it.
• Check the current SSM identification guidelines with your company secretary and record why each person does or does not meet the test.
• Issue written statutory inquiries to members and other relevant persons, keeping the notice, delivery proof, response and follow-up together.
• Maintain the register at the registered office or another notified place in Malaysia with controlled access to identity and address data.
• Record each confirmed change with its date, then lodge the notice with the Registrar within 14 days from the internal recording date.
• Retain a dated history for anyone who ceases to be a beneficial owner for seven years instead of overwriting the old record.