Data and Compliance Report (DCR) is an annual submission to Bank Negara Malaysia (BNM) by reporting institutions (RI) to report and self-assess their compliance with AMLA, Anti-Money Laundering (AML), Countering Financing of Terrorism (CFT), Countering Proliferation Financing (CPF), and Targeted Financial Sanctions (TFS) and identify their exposure to the AML/CFT/CPF and TFS risks.
Quick Links to DCR 2026: |
WHO needs to submit DCR 2026?
The following sectors are required to submit DCR 2026.
- Accountants
- Company secretaries (CoSec)
- Registered estate agents (REA)
- Lawyers
- Dealers in precious metals /stones (DPMS)
- Licensed Gaming Outlets (Gaming) – NEW
- Moneylenders – NEW
- Pawnbrokers – NEW
- Trust Companies (Trust Co) – NEW
- Factoring Companies – NEW
- Leasing Companies – NEW
WHAT should be prepared for DCR submission 2026?
1. Check which type of DCR submission your firm needs to make
Before starting the submission process, firms should first determine which type of DCR submission they are required to make, whether that is the DCR Form 2026, the Declaration Form 2026, or no submission at all if the firm falls within an exempted category.
A. A firm should assess whether it fulfils any of the following criteria
- It is no longer in operation, dormant, in the process of striking off, winding up, or liquidation in 2024, 2025, and 2026.
- It has no new and existing transactions/clients for the entirety of 2024 and 2025, including inactive firms and newly incorporated or registered firms in 2026.
- For Lawyers, Accountants, and Trust Companies, it did not provide Gazetted Activities in 2024 and 2025.
- For a Registered Estate Agent, it holds an Estate Agency licence issued by BOVAEP and carries out activities as defined under the Valuers, Appraisers, Estate Agents and Property Managers Act 1981, but did not perform any estate agency activities in 2024 and 2025.
If the answer is yes, the firm falls under Category A and should submit the Declaration Form 2026.
If the answer is no, the firm falls under Category B and must submit the DCR Form 2026, as submission is mandatory for firms that remain applicable under the reporting framework.
B. The following are generally not required to submit DCR 2026:
- An internal company secretary, lawyer (for example, an in-house legal officer), or accountant.
- A firm that has been selected and informed of a 2025 or 2026 on-site examination or off-premise examination.
2. Appoint a Compliance Officer and notify BNM
Category B reporting institutions need to appoint a Compliance Officer (CO) and notify your appointed CO to BNM through the link http://amlcft.bnm.gov.my/co/, and ensure to receive the CO number issued by BNM via the firm’s registered email upon successful notification.
If the CO has been notified BNM before and you still have the DCR 2022 account, you can log in with the existing credentials. If you do not have a DCR 2022 account, the “invitation code” will be sent to the registered email of the CO.
3. Prepare relevant data for submission
Prepare relevant information for 2024 and 2025, including:
Part A – Information on reporting institutions (RI)
RI information (including name, type/nature of business, registration/license number), contact information, compliance officer information, branch information, firm size, and membership of associations (if any).
Part B – Business information and structure
Transaction information, payment method by clients, delivery channel (face-to-face and non-face-to-face)
Part C – AML/CFT/CPF risk assessment
- Process or guidance of money laundering, terrorism financing and proliferation financing (ML/TF/PF) risk assessments, such as internal policy, procedure and control (IPPC) or standard operating procedure (SOP)
- Frequency of review, Risk ratings and Risk drivers / risk issues identified
Part D – AML/CFT/CPF programme
- Total number and Breakdown by type and nationality of customers
- AML/CFT/CPF standard operating procedures (SOP) or manual, including the policy, processes or procedures for:
i. Customer Due Diligence (CDD) or Know Your Customer (KYC)
ii. Record keeping
iii. Screening of customers against sanctioned persons/ entities lists
iv. Risk profiling / risk rating for customers
v. Enhanced Due Diligence for higher risk customers
vi. Ongoing Due Diligence
vii. Reporting suspicious transaction (STR)
viii. Storing customers’ information and transactions records - AML/CFT/CPF compliance programme (only for large-sized firms) including AML/CFT/CPF policy & procedures, screening and training of employees, competency and certification/ training attended by Compliance Officer, and independent AML/CFT/CPF audit
AML/CFT Solutions for meeting BNM regulatory requirements
📌 If you do not have internal AML/CFT policy, procedure and control (IPPC), you can now fast-track your development on IPPC by purchasing a proprietary customizable IPPC document template with 90% complete.
Learn more about IPPC Template
📌 If you need an AML/CFT solution for preparing Part C, D & E of DRC, check out SentroWeb anti-money laundering software now.
Learn more about SentroWeb AML Software
HOW to submit DCR 2026
Follow the step-by-step guide for DCR submission:
Step 1 – Notify the Compliance Officer to BNM
Reporting institutions are required to notify BNM of the appointed Compliance Officer to receive the “invitation code”.
Step 2 – Log in to DCR
Access to the Dynamic Submission Portal (DSP). Access to the portal will be provided by the regulator when the submission period starts.
Step 3 – Complete and submit DCR form
Click “New Submission” on DCR Dashboard to start DCR form and then key in details as requested. Click “Submit Application” after completing the form, and the “completed submission message” will be displayed upon submission. You can view the completed submission by clicking “View details” on DCR Dashboard.
Step 4 – Receive DCR report card
A report card will be sent to the firm email and copied to the notified CO email within 72 hours after the submission.
WHEN to submit DCR 2026?
Submission will be from 1 July 2026 to 30 September 2026 through the Dynamic Submission Portal (DSP).
WHAT IF reporting institutions fail to submit DCR?
If reporting institutions fail to submit DCR before the deadline, enforcement action under the AMLA/FSA can be taken.
Learn more:
Recent Posts:
