
Data and Compliance Report (DCR) is an annual submission to Bank Negara Malaysia (BNM) by reporting institutions (RI) to report and self-assess their compliance with AMLA, Anti-Money Laundering (AML), Countering Financing of Terrorism (CFT), Countering Proliferation Financing (CPF), and Targeted Financial Sanctions (TFS) and identify their exposure to the AML/CFT/CPF and TFS risks.
Quick Links to DCR 2026: |
WHO needs to submit DCR 2026?
The following sectors are required to submit DCR 2026.
- Accountants
- Company secretaries (CoSec)
- Registered estate agents (REA)
- Lawyers
- Dealers in precious metals /stones (DPMS)
- Licensed Gaming Outlets (Gaming) – NEW
- Moneylenders – NEW
- Pawnbrokers – NEW
- Trust Companies (Trust Co) – NEW
- Factoring Companies – NEW
- Leasing Companies – NEW
WHAT should be prepared for DCR submission 2026?
1. Check which type of DCR submission your firm needs to make
Before starting the submission process, firms should first determine which type of DCR submission they are required to make, whether that is the DCR Form 2026, the Declaration Form 2026, or no submission at all if the firm falls within an exempted category.
A. A firm should assess whether it fulfils any of the following criteria
- It is no longer in operation, dormant, in the process of striking off, winding up, or liquidation in 2024, 2025, and 2026.
- It has no new and existing transactions/clients for the entirety of 2024 and 2025, including inactive firms and newly incorporated or registered firms in 2026.
- For Lawyers, Accountants, and Trust Companies, it did not provide Gazetted Activities in 2024 and 2025.
- For a Registered Estate Agent, it holds an Estate Agency licence issued by BOVAEP and carries out activities as defined under the Valuers, Appraisers, Estate Agents and Property Managers Act 1981, but did not perform any estate agency activities in 2024 and 2025.
If the answer is yes, the firm falls under Category A and should submit the Declaration Form 2026.
If the answer is no, the firm falls under Category B and must submit the DCR Form 2026, as submission is mandatory for firms that remain applicable under the reporting framework.
B. The following are generally not required to submit DCR 2026:
- An internal company secretary, lawyer (for example, an in-house legal officer), or accountant.
- A firm that has been selected and informed of a 2025 or 2026 on-site examination or off-premise examination.
2. Appoint a Compliance Officer and notify BNM
Category B reporting institutions need to appoint a Compliance Officer (CO) and notify your appointed CO to BNM through the link http://amlcft.bnm.gov.my/co/, and ensure to receive the CO number issued by BNM via the firm’s registered email upon successful notification.
If the CO has been notified BNM before and you still have the DCR 2022 account, you can log in with the existing credentials. If you do not have a DCR 2022 account, the “invitation code” will be sent to the registered email of the CO.
3. Prepare relevant data for submission
Prepare relevant information for 2024 and 2025, including:
Part A – Information on reporting institutions (RI)
RI information (including name, type/nature of business, registration/license number), contact information, compliance officer information, branch information, firm size, and membership of associations (if any).
Part B – Business information and structure
Transaction information, payment method by clients, delivery channel (face-to-face and non-face-to-face)
Part C – Institutional Risk Assessment
- Process or guidance of money laundering, terrorism financing and proliferation financing (ML/TF/PF) risk assessments, such as internal policy, procedure and control (IPPC) or standard operating procedure (SOP)
- Frequency of review, Risk ratings and Risk drivers / risk issues identified
Part D – Mandatory AML/CFT/CPF requirement
- Total number and Breakdown by type and nationality of customers
- AML/CFT/CPF standard operating procedures (SOP) or manual, including the policy, processes or procedures for:
i. Customer Due Diligence (CDD) or Know Your Customer (KYC)
ii. Record keeping
iii. Screening of customers against sanctioned persons/ entities lists
iv. Risk profiling / risk rating for customers
v. Enhanced Due Diligence for higher risk customers
vi. Ongoing Due Diligence
vii. Reporting suspicious transaction (STR)
viii. Storing customers’ information and transactions records
Part D – AML/CFT/CPF programme
- AML/CFT/CPF compliance programme (only for large-sized firms) including AML/CFT/CPF policy & procedures, screening and training of employees, competency and independent AML/CFT/CPF audit
AML/CFT Solutions for meeting BNM regulatory requirements
📌 If you do not have internal AML/CFT policy, procedure and control (IPPC), you can now fast-track your development on IPPC by purchasing a ready-to-use, customizable IPPC document template.
Existing SentroWeb clients can enjoy 30% discount, and new SentroWeb clients can enjoy 50% discount until 30 September 2026.
Learn more about IPPC Template
📌 If you need an AML/CFT solution for preparing Part C, D & E of DRC, check out SentroWeb anti-money laundering software now.
Learn more about SentroWeb AML Software
HOW to submit DCR 2026
Follow the step-by-step guide for DCR submission:
Step 1 – Notify the Compliance Officer to BNM
Reporting institutions are required to notify BNM of the appointed Compliance Officer to receive email from BNM for account creation and activation on the Dynamic Submission Portal (DSP).
Step 2 – Log in to Dynamic Submission Portal
Create and activate an account on the Dynamic Submission Portal (DSP), using the access information sent in the email by the BNM to the nominated CO. For the details, please refer to BNM’s DCR Submission Complete User Guide.
Step 3 – Complete and submit the DCR form / Declaration Form
- Add a new DCR report and proceed with submitting either (A) DCR Form or (B) Declaration Form.
- Key in all the required information and save the draft before submitting.
- Click “Submit to BNM” once completed the form
Step 4 – Receive DCR report card
A report card will be sent to the firm’s email upon DCR submission, highlighting identified gaps for firms to improve and strengthen their AML/CFT/CPF processes.
WHEN to submit DCR 2026?
Submissions will be from 1 July 2026 to 30 September 2026 through the Dynamic Submission Portal (DSP).
WHAT IF reporting institutions fail to submit DCR?
If reporting institutions fail to submit DCR before the deadline, enforcement action under the AMLA/FSA can be taken.
Learn more:
- BNM’s Data and Compliance Report (DCR) 2026 Infographic
- BNM’s Data & Compliance Report (DCR) Information Kit
Recent Posts:
- From Administrative Gatekeepers to Governance Leaders: Elevating AML/CFT/CPF Compliance for Malaysia’s Company Secretaries
- Ultimate Beneficial Ownership (UBO) Verification Failures: Lessons from Recent Hong Kong Enforcement Cases
- Singapore’s 2026 FATF Mutual Evaluation Report: Key AML/CFT/CPF Insights and Implications for Professional Firms


