Malaysia NGO Compliance, LHDN Tax & Annual Reporting 2026

Registering a Malaysian NGO is a one-off sprint; staying compliant is the decade-long marathon. Unlike Australia's single ACNC regime or Singapore's Charities Act, a Malaysian NGO answers to two or three regulators in parallel: the Registrar of Societies (ROS) under the Societies Act 1966 for societies; Suruhanjaya Syarikat Malaysia (SSM) for Companies Limited by Guarantee (CLGs); and Lembaga Hasil Dalam Negeri (LHDN) for tax-exempt status under Section 44(6) of the Income Tax Act 1967. Fundraising licences, foreign funding disclosures to Bank Negara Malaysia (BNM), and state-level religious compliance for zakat and wakaf add further layers. This guide walks through annual returns, the s 44(6) application, religious fundraising, fundraising licences, foreign funding, AGMs, record-keeping, and the compliance mistakes that actually cost Malaysian NGOs their tax status. Founders still at registration stage should start with How to Start an NGO in Malaysia: 2026 Founder's Guide and the ROS society registration walkthrough before returning here.

A note on this guide: Thresholds, fees, and procedural steps reflect ROS, SSM, LHDN, and BNM guidance as at early 2026. Verify current figures on each regulator's website before filing. Zakat and wakaf rules vary by state, each state Majlis Agama Islam applies its own rules. This is not legal, tax, or shariah advice. Engage a Malaysian chartered accountant and, where relevant, a qualified shariah adviser.

Table of Contents

1. The three compliance tracks: ROS, SSM, LHDN
2. Annual ROS reporting
3. Applying for LHDN tax exemption, Section 44(6)
4. Zakat, wakaf, and sadaqah compliance
5. Fundraising licence requirements
6. Foreign funding reporting (BNM and related rules)
7. AGM and committee election compliance
8. Record-keeping obligations
9. Common compliance mistakes
10. Frequently Asked Questions
11. Next Steps

The three compliance tracks: ROS, SSM, LHDN

Malaysian NGO compliance is often misunderstood as a single "register and you're done" event. In practice, every registered nonprofit sits on at least two tracks and most operating NGOs juggle three. Missing any one can trigger deregistration, tax reassessment, or, for CLGs, director disqualification by SSM.

Track 1, ROS (societies / pertubuhan). Societies registered under the Societies Act 1966 lodge an annual return (Form 9) with audited or committee-approved accounts and an updated list of office-bearers. The deadline is 60 days after the AGM, and the AGM must be held within the period set by the perlembagaan, typically within 18 months of registration for the first AGM and annually thereafter. Late filing draws penalties; two consecutive defaults make the society liable to cancellation under section 13 of the Act.

Track 2, SSM (CLGs and trust companies). A CLG files an Annual Return within 30 days of the AGM, audited financial statements under the Companies Act 2016, and a director resolution confirming continued not-for-profit operation. Filings go through the MyCoID / e-Lodgement portal. CLGs must also keep statutory registers current, members, directors, secretaries, and meeting minutes.

Track 3, LHDN. Even an NGO with no business income and no paid employees has LHDN touchpoints: it files Form C (CLGs) or Form TF (trust bodies), runs payroll withholding (PCB / MTD), and, if s 44(6) approved, maintains a donor-receipt register. Societies without s 44(6) approval risk having operating surpluses treated as chargeable income.

How the tracks interact. An operating society easily sits on all three simultaneously. A CLG pays for a company secretary retainer on top of audit fees; see the Malaysia NGO cost breakdown for first-year budget planning. Treating the three as one calendar, with one owner per filing, is the operational shift that separates compliant NGOs from those that scramble every April.

Annual ROS reporting: audited accounts, committee changes

For societies, the core annual obligation is straightforward in scope but unforgiving in enforcement. Form 9 is due within 60 days of the AGM. It asks for membership numbers, a summary of activities, the updated committee, and attached financial statements.

Financial statement threshold. Societies with annual gross income or expenditure above RM 300,000 must submit audited accounts prepared by a Malaysian Institute of Accountants (MIA) approved auditor. Below that threshold, committee-certified accounts signed by the treasurer and one other committee member are acceptable, though many AGMs vote for voluntary audit for donor confidence. Small-society audit fees typically run RM 3,000 to RM 8,000.

Committee changes. Any mid-year change, resignation, appointment, or role change, is notified to ROS via Form 11 within 60 days. ROS uses this list to confirm the society still meets the seven-member Societies Act minimum and that no disqualified persons hold office.

Perlembagaan amendments. Constitutional changes require a special resolution at a general meeting and separate ROS approval via Form 10 within 60 days. ROS will reject amendments that conflict with the model constitution.

Practical workflow. The AGM pack, accounts, activities report, committee list, attendance register, is the single source for Form 9, Form 10, and Form 11. Societies that compile this pack as part of a disciplined AGM close the cycle in about a week. Those reconstructing records ex-post often miss the 60-day window. For running the AGM itself, the online AGM guide translates directly to a Malaysian society meeting.

Applying for LHDN tax exemption, Section 44(6)

Section 44(6) of the Income Tax Act 1967 is Malaysia's equivalent to Australian DGR status: it makes donations to an approved institution tax-deductible in the donor's hands (up to 10% of aggregate income for companies, similar for individuals). Approval typically lifts donation volumes by 20–40% because corporate donors will only give where a tax-deductible receipt can be issued. Approval is discretionary and not automatic, LHDN's Charitable and Religious Bodies Unit assesses each application against published guidelines, and the process runs 6 to 12 months.

Eligibility, the four tests.

1. Legal form. A society registered with ROS, a CLG with SSM, or a trust with an approved trust deed. Unregistered community groups do not qualify.
2. Charitable purpose. Objects must fall within LHDN guidelines: poverty relief, advancement of education, advancement of religion, or other purposes beneficial to the community. The perlembagaan or M&A must match this language closely.
3. Public benefit. Activities must benefit the Malaysian public or a sufficiently wide section, not a closed membership club.
4. Financial track record. LHDN expects at least one to two full years of audited accounts showing actual charitable activity.

Documentation required.

Timeline and process. Lodge at the nearest LHDN Cawangan or via the Charitable and Religious Bodies Unit in Cyberjaya. An initial completeness check runs in weeks; substantive assessment runs in months and typically includes at least one clarification round. Approval is granted by letter valid for five years, renewable on continued-compliance evidence. Approved bodies receive a unique LHDN reference that must appear on every donor receipt.

Ongoing obligations. Approved NGOs issue s 44(6) receipts in the LHDN-prescribed format, maintain a register of receipts, file the register annually, and undergo periodic LHDN inspection. Exemption can be withdrawn where income is applied outside the stated purpose, where more than 25% of annual income accumulates rather than being applied, or where the annual return is not filed. Receipting software that generates s 44(6)-compliant receipts with sequential numbering and the LHDN reference automatically, integrated into Memberlytic's Malaysian NGO platform, removes the manual risk.

Common rejection reasons. Objects drafted too narrowly (benefiting only members), insufficient track record, asset-lock missing from the perlembagaan, and activity reports that read as generic rather than programme-specific.

Zakat, wakaf, and sadaqah, religious fundraising compliance

Malaysian NGOs operating in the Muslim community navigate a parallel religious-compliance regime. Zakat, wakaf, and sadaqah are governed by state-level Majlis Agama Islam under each state's Administration of Islamic Law Enactment, not by federal law. JAKIM (Jabatan Kemajuan Islam Malaysia) issues national-level fatwa guidance but enforcement is state-by-state.

Zakat. The obligatory alms. In most states, only the Majlis Agama Islam or its designated subsidiary (e.g. Lembaga Zakat Selangor, Pusat Pungutan Zakat MAIWP) is authorised to collect. Private NGOs generally cannot collect zakat directly without specific written authorisation (tauliah). Operating a zakat channel without tauliah is a shariah offence in most states.

Wakaf. Charitable endowment held in perpetuity. Wakaf assets are administered through the state Majlis or registered wakaf trustees. A Muslim NGO accepting wakaf contributions typically partners with the Majlis rather than operating an independent wakaf fund. Several states run cash-wakaf platforms NGOs can plug into.

Sadaqah. Voluntary charity, the category most Malaysian Muslim NGOs operate in. Sadaqah is not subject to tauliah and can be collected freely, though a fundraising licence is still required for public solicitation. Muslim NGOs should not conflate sadaqah and zakat in donor-facing communications, obtain written Majlis authorisation before using the word "zakat," and structure wakaf programmes through formal partnership. Zakat paid to an approved collector is independently deductible under the separate zakat relief provisions, alongside s 44(6).

Fundraising licence requirements

Public fundraising, soliciting donations from non-members, requires a licence under the Houses to Houses and Street Collections Act 1947 and related state regulations.

• House-to-house and street collections. Licence from the Royal Malaysia Police district office covering the intended area. Valid for a specified period (typically 1–3 months) and specified locations.
• Lottery-based fundraising. Separate gaming licence under the Common Gaming Houses Act 1953, coordinated through the Ministry of Finance.
• State welfare permits. Several states additionally require a permit from the state Jabatan Kebajikan Masyarakat (JKM) office.

Online donation platforms and payment-gateway collections sit in a lighter-touch zone, no street-collection licence required, but the NGO still needs clear donor disclosure, s 44(6) receipting where applicable, and proper accounting. Police routinely check for current licences at public events; operating without one is a prosecutable offence and LHDN may treat unlicensed fundraising as grounds to review s 44(6) compliance.

LHDN receipting + ROS annual returns eating your time? Malaysian NGOs use Memberlytic to auto-generate s 44(6) receipts, track committee changes, and keep audit-ready financial records, closing most of this article's compliance gaps at once.

Foreign funding reporting (BNM and related rules)

Malaysian NGOs receiving overseas funding navigate rules that have tightened materially since the early 2020s.

BNM foreign-exchange rules. Inbound foreign-currency receipts above specified thresholds must be reported through the receiving bank under BNM's Foreign Exchange Notices. Most banks complete this filing automatically but require documentation of the donation purpose, grant letter, MOU, or donor agreement. NGOs routinely receiving foreign grants should keep a standing folder of donor agreements ready for bank KYC refresh.

Income tax treatment. Foreign grants to an s 44(6) approved body continue to qualify for exempt treatment provided the funds are applied to the approved charitable purpose. Foreign grants to a non-approved NGO are assessable income under normal rules, a painful surprise for grass-roots groups not yet s 44(6) approved.

AML / CFT obligations. NGOs are classified as an elevated-risk sector. Core obligations:

• Know-your-donor (KYC) records for significant donors (typically over RM 25,000 per transaction or in aggregate)
• Suspicious transaction reporting to the Financial Intelligence Unit at BNM
• Board-approved AML policy and staff training
• Screening of donors against UN and domestic sanctions lists

Societies Act restrictions. Under section 2B, a society affiliated to a foreign body or receiving material overseas support may be classified as a "political society" requiring separate ministerial approval, an outdated provision but still live. Practical NGOs structure foreign partnerships as grant relationships rather than affiliations. International funders now routinely expect programme evaluations, donor audits, and grant-specific financial reporting; Malaysian NGOs receiving foreign funding typically spend 10–20% of that funding on compliance overhead. Integrated grant-tracking and restricted-fund accounting, common in nonprofit platforms for Malaysian charities, absorbs much of this into routine operations.

AGM and committee election compliance

The AGM is the single governance event where most compliance obligations converge. Every registered society and CLG must hold an AGM within the period set by its constitution, typically annually, with a maximum gap of 15 months between meetings.

Notice. The perlembagaan specifies the notice period, commonly 14 to 21 days, and the form of notice. Notice must reach all eligible members with the agenda, annual accounts, and any special resolutions attached. Quorum. Set by the constitution. Failing to achieve quorum invalidates decisions. Minutes. Signed by the chair and retained with statutory records. For office-bearer elections, minutes should record nomination, voting method, and result against each position.

Common AGM mistakes. Notice sent by WhatsApp but not in the form required by the perlembagaan; meeting held without quorum and decisions later challenged; elected committee members ineligible under the Societies Act (e.g. undischarged bankrupts); and failure to file Form 11 notifying ROS of the new committee. The ROS society registration walkthrough covers eligibility criteria in detail.

Record-keeping obligations

Malaysian NGOs sit under multiple overlapping retention regimes. The Societies Act requires registers and minutes "continuously"; the Companies Act 2016 prescribes 7-year retention for CLG records; the Income Tax Act requires 7 years for tax records; and the Personal Data Protection Act 2010 (PDPA) imposes retention limits for member and donor personal data. Seven years is the practical minimum.

Mandatory records. Committee and general-meeting minutes; register of members with contact details; register of office-bearers; financial records sufficient to prepare accounts; LHDN s 44(6) donor receipts; grant agreements and donor correspondence; employment records; volunteer records; fundraising licences; and bank statements.

PDPA intersection. Personal data of members, donors, and beneficiaries must be processed lawfully, with consent recorded, retained only as long as necessary, and deleted on request. See PDPA 2010 compliance for Malaysian membership data, the retention principles apply directly to NGO records. Format. Electronic records are acceptable provided they are secure, readable, and backed up. A lost laptop containing the sole copy of donor records is a PDPA breach; a record-management policy and multi-user access controls protect against both PDPA and Societies Act exposure.

Common compliance mistakes

Five mistakes cover the majority of compliance problems Malaysian NGOs actually face. Each is avoidable.

Mistake 1, Missing the 60-day ROS filing window. Form 9 is due 60 days after AGM. Societies that hold the AGM in September and "do the filing after year-end" routinely breach the statutory deadline. Fix: file Form 9 within two weeks of the AGM while the data is fresh.

Mistake 2, LHDN s 44(6) receipt misuse. Issuing receipts for payments that are not genuine donations, sponsorship with advertising benefit, event tickets, auction items above fair value. Only gifts qualify. LHDN inspections now include receipt-register audits, and repeated misuse is grounds for exemption withdrawal.

Mistake 3, Using "zakat" without tauliah. Soliciting zakat without Majlis Agama Islam authorisation is a shariah offence in most states. Muslim NGOs should keep sadaqah and zakat strictly separate in donor-facing language.

Mistake 4, Unreported committee changes. Members resign mid-year and Form 11 is not filed within 60 days. By the next AGM, ROS records are out of date and the society is flagged. Small administrative matter, large reputational cost at audit time.

Mistake 5, Foreign funding through personal accounts. Grants deposited into a founder's or staff member's personal account rather than the NGO's dedicated bank account, often innocently, often at the donor's request for speed. This triggers BNM reporting issues and personal income-tax exposure, and can invalidate s 44(6) if detected.

For wider failure patterns, see Why NGOs Fail in Malaysia. For tooling that prevents several of these compliance slips by design, see The NGO Software Stack for Malaysian Charities. APAC founders comparing Malaysian obligations to a neighbour may find Nonprofit Tax, DGR & ACNC Reporting in Australia useful.

Frequently Asked Questions

Does a society with no income still need to file Form 9? Yes. Every registered society lodges Form 9 annually regardless of activity. A dormant society files a nil return declaring no operations, income, or expenditure, attaching committee-signed accounts. Two consecutive defaults make the society liable to cancellation under section 13 of the Societies Act. Dormant societies intending to revive within 12 months should still file; those with no prospect of revival should consider voluntary deregistration via a special resolution and final Form 9 rather than allowing administrative cancellation.

How long does s 44(6) approval take in practice? LHDN's published target is 6 months; realistic end-to-end time including queries is 6 to 12 months for well-prepared applications with 2+ years of audited accounts. Applications lodged with patchy records, unclear objects, or thin activity narratives extend to 18 months or are rejected and must be re-lodged. Engaging a Malaysian tax adviser experienced with the Charitable and Religious Bodies Unit materially reduces cycle time and is usually worth the RM 3,000–8,000 fee.

Can a CLG collect zakat? Generally no, not without specific tauliah from the relevant state Majlis Agama Islam. The legal form of the NGO does not grant zakat-collection rights, only the Majlis can authorise zakat collection, and authorisation is granted to specific bodies for specific purposes. CLGs with Muslim programmes typically partner with the state Majlis or its designated zakat agency rather than collecting directly.

Do online donations from overseas donors trigger BNM reporting? Yes, above the BNM Foreign Exchange Notice thresholds, typically RM 200,000 per single inward transaction or aggregate in a year. Below the threshold, the receiving bank still records the transaction for its own compliance but the NGO has no direct BNM filing. Irrespective of amount, the donation must be supported by documentation the bank can request during KYC refresh, donor agreement, receipt, or grant letter.

Can a society hold an online-only AGM? Only if the perlembagaan permits it. The Societies Act is silent on meeting format, but ROS expects AGMs in the manner specified by the constitution. A clause allowing "physical, virtual, or hybrid" meetings is compliant; a perlembagaan specifying physical-only must be amended via Form 10 before an online AGM is valid. Amendment is a routine special-resolution process and usually takes 2–3 months through ROS.

Next Steps

Malaysian NGO compliance is manageable when the annual calendar is designed once and owned operationally thereafter. NGOs that thrive treat Form 9, the LHDN receipt register, the zakat and fundraising-licence workflows, and foreign-funding paperwork as year-round operational systems rather than year-end projects. Integrated nonprofit membership software for Malaysian NGOs, combining member records, donor receipting, s 44(6) compliance, committee-change logs, and audit-ready financial exports, pays back materially once the first full compliance cycle has run.

Ready to operate? Book a 20-minute demo to see how Malaysian NGOs centralise LHDN s 44(6) receipting, ROS annual-return data, committee records, and foreign-funding paperwork in one workspace, and grab our free APAC Nonprofit Business Plan template to structure governance and compliance workflows before your next ROS annual return or s 44(6) renewal.