Post-Incorporation Compliance Checklist for New Companies in Malaysia: What Most Founders Miss in the First 90 Days

After the incorporation of your company in Malaysia, it is natural to feel a sense of relief. The SSM registration is done, the company name is secured, and the business can finally move from planning to action. But while founders are busy chasing clients, hiring staff, and setting up operations, the compliance clock has already started ticking. Quietly, of course. Compliance rarely announces itself with confetti.

For a newly incorporated Malaysian company, the first 90 days are more important than many founders realise. This is when key statutory and operational obligations should be properly handled, from appointing a licensed company secretary to setting up tax, payroll, and accounting records. Some deadlines are legally fixed. Others are practical necessities that can affect bank account opening, payroll processing, and future tax filings.

This article focuses on what happens after incorporation, not the formation process itself. It covers the statutory and practical obligations that new companies should address within the first 30, 60, and 90 days of incorporation, especially for founders who want to avoid LHDN penalties, SSM fines, payroll complications, and unnecessary administrative clean-up later.

Week 1 to 2: Immediate Post-Incorporation Actions

The first two weeks after incorporation are not just for celebrating, printing name cards or announcing the company on LinkedIn. This is the time to properly set the company’s compliance foundation.

Appoint a licensed company secretary within 30 days

Every Malaysian company must appoint a company secretary within 30 days of incorporation. The company secretary must be registered with SSM and hold a valid practising certificate issued by SSM. This requirement is set out clearly in SSM’s post-incorporation guidance for local companies.

This is one of the first obligations founders should prioritise. A qualified company secretary in Malaysia does more than maintain records. They help ensure that the company’s statutory registers, filings, board resolutions and compliance deadlines are properly managed from the start.

For many new founders, the mistake is assuming that the company secretary is only needed when there is an annual return to file. In reality, the company secretary becomes relevant immediately after incorporation because early board decisions must be properly documented.

Prepare the first board resolutions

Once the company is incorporated, the directors should prepare and approve the first board resolutions. These typically cover matters such as:

• Appointment of directors and officers
• Opening of the company’s corporate bank account
• Allotment or issuance of shares, where applicable
• Appointment of the company secretary
• Approval of the registered office address
• Adoption of the company constitution, if the company chooses to have one

These documents are not just internal paperwork. Banks may ask for board resolutions before opening a corporate account. Investors may also request them during due diligence. In short, proper documentation helps the company prove that decisions were validly made.

This is where a reliable company secretary in Malaysia can help founders avoid messy backdating, missing approvals, or unclear records later. Nobody enjoys reconstructing board decisions six months after they happened, especially when the bank is waiting.

Obtain and organise incorporation documents

In Malaysia, a certificate of incorporation is issued by SSM upon request and payment of the prescribed fee. SSM also notes that a company constitution is optional for a company limited by shares.

In practical terms, new companies should organise the following documents early:

• Notice of registration or incorporation details
• Certificate of incorporation, if requested
• Company constitution, if adopted
• Director and shareholder information
• Registered address details
• Board resolutions
• Statutory registers

These documents will be used repeatedly for bank account opening, tax registration, business licensing, supplier onboarding and future compliance checks.

Within 30 Days: LHDN and EPF Registration

Once the company begins operations, tax and employer obligations come into play. This is where some founders get caught off guard because incorporation and business commencement are not always treated the same way.

Income Tax File Registration

Once your company starts operating, LHDN compliance should move onto your immediate checklist. As of 1 January 2024, companies must register for a Tax Identification Number online through the e-Daftar application on the MyTax Portal.

A simple way to think about it is this:

1. When operations begin, register the company with LHDN and obtain the corporate tax file number. This should not wait until the first tax filing season because the tax filing affects future filings, employer tax matters, tax estimates and official correspondence with LHDN.
2. Within 3 months of commencing business, review whether the company needs to submit its e-CP204 tax estimate. LHDN’s tax estimation guidance states that a company commencing operations must submit its e-CP204 within three months from the date business operations begin, where applicable.
3. From the sixth month of the basis period, be prepared for monthly tax instalments, if applicable. For new companies, these payments generally begin in the sixth month of the basis period.

This is why founders should clearly define the business commencement date from the start. If your company has started issuing invoices, signing contracts, hiring staff or delivering services, it may already be treated as having commenced operations. Waiting until “things feel more official” is not a tax strategy. It is usually just a future admin problem wearing a nicer shirt.

EPF Employer Registration

EPF registration becomes mandatory once the company hires employees. The Employees Provident Fund, or KWSP, guides employers through registration and issues an employer reference number and registration certificate upon completion.

New employers should complete EPF registration before the first payroll cycle. This ensures payroll is processed correctly, with employee and employer contributions calculated and paid on time.

Late registration may lead to back-contribution issues, late payment charges and unnecessary employee concerns. For a new company trying to build trust with its first hires, payroll compliance is not the place to improvise.

Within 60 Days: SST and EIS Registration

By the second month, the company should assess whether its activities trigger indirect tax or employment-related registration obligations. This is where many founders miss the details because they assume “small company” automatically means “not yet relevant”. That is not always true.

Assess SST registration requirements

Sales and Service Tax, or SST, applies depending on the nature of the business, taxable goods or services, and turnover threshold. The general SST registration threshold is often RM500,000 annual taxable turnover, although certain sectors and services may have different thresholds or rules. Malaysia’s SST framework was also expanded from 1 July 2025, making it important for companies to reassess whether their services fall within taxable categories.

For newly incorporated companies, SST registration may not be required immediately if the company has not yet reached the threshold. However, the company should still assess its business model early.

This is especially important for companies in consulting, digital services, leasing and rental, professional services, F&B, manufacturing, trading, and other taxable sectors. A founder may think the company is “too new” to worry about SST, but if contracts are already signed and projected revenue is strong, the threshold assessment should not be left until year-end.

Good SSM compliance practices in 2025 carried into 2026 should include early tax classification, not just annual filing. Although SSM and SST are separate compliance areas, founders often experience them together as part of the broader post-incorporation setup.

Register with SOCSO and EIS

When a company employs one or more employees, it must register and contribute to SOCSO and EIS under the relevant Malaysian social security and employment insurance laws administered by PERKESO. PERKESO states that principal and immediate employers with at least one employee are responsible for registration and contributions under the Employees’ Social Security Act 1969 and the Employment Insurance System Act 2017.

This registration should occur before payroll is processed, not after payroll issues arise. SOCSO and EIS affect employee protection, contribution reporting and monthly statutory compliance.

A practical approach is to register for EPF, SOCSO, EIS and employer tax matters together once hiring becomes certain. This prevents payroll from becoming a patchwork of delayed registrations, manual corrections and contribution adjustments.

Within 90 Days: Bank Account and Operational Readiness

The first 90 days are also about making the company operationally ready. Even if the company has met its basic statutory obligations, it still needs proper systems for banking, accounting and record-keeping.

Open a corporate bank account

Most Malaysian banks will require incorporation documents, board resolutions, director identification, shareholder information and business activity details before opening a corporate bank account.

Depending on the bank and the company’s ownership structure, additional documents may be requested. For example, companies with foreign shareholders, nominee structures, regulated activities or complex group ownership may face more detailed due diligence.

This is why early documentation matters. If board resolutions, registered address details or beneficial ownership information are incomplete, bank account opening can be delayed. For founders, this can create very real problems, such as being unable to receive customer payments or pay suppliers smoothly.

Finalise the registered address

The company’s registered office address should be properly maintained and updated with SSM if required. This is the official address for statutory communications and company records.

A common mistake is using an initial address at incorporation, then forgetting to update it after moving into a proper office, coworking space, or an outsourced registered office arrangement. If notices go to the wrong place, the company may miss important correspondence.

Again, this is part of Practical SSM Compliance 2025 that remains relevant in 2026. The issue is not just filing forms. It ensures the company can receive, respond to, and act on statutory communications.

Set the financial year-end and maintain accounting records

New companies should decide on their financial year-end early and begin maintaining accounting records from day one. Under Section 245 of the Companies Act 2016, Malaysian companies, directors and managers are required to keep and maintain accounting and other records. These records must be available for inspection by directors and should be properly maintained.

New founders often underestimate this obligation. Many assume accounting can be “sorted out later” once the business has more transactions. But the earlier the records are structured, the easier it is to manage tax filings, audit preparation, financial reporting and management decisions.

At a minimum, new companies should set up a basic accounting workflow for:

• Sales invoices and receipts
• Supplier bills and payments
• Bank transactions
• Director advances and reimbursements
• Payroll records
• Tax-related documents
• Fixed assets and subscriptions
• Shareholder or related-party transactions

This is also where Ledgen’s broader corporate services positioning becomes relevant. Post-incorporation compliance works best when company secretarial, tax, payroll and accounting are coordinated rather than handled in separate silos.

The Most Commonly Missed Obligation: e-Invoicing

In 2026, one of the most commonly missed post-incorporation considerations is e-Invoicing.

Malaysia’s e-Invoicing framework is being implemented in phases through LHDN’s MyInvois system. According to LHDN’s updated e-Invoice FAQ, taxpayers with annual turnover or revenue of at least RM1 million in YA2023, YA2024 or YA2025 are required to implement e-Invoicing from 1 July 2026.

This is important for new companies because e-Invoicing should be considered at the point of the finance system setup. Even if a newly incorporated company does not immediately meet the RM1 million threshold, it should still choose accounting software, invoicing workflows and customer data processes that can support future e-Invoicing requirements.

The real risk is not only missing the implementation date. The bigger problem is building a messy invoicing process in the first year, only to have to untangle it later as the company grows.

New companies should consider the following early:

• Whether the company is likely to cross the RM1 million turnover threshold
• Whether its accounting system can support e-Invoicing
• How customer and supplier information will be collected
• Who will validate invoices through MyInvois
• How credit notes, debit notes and self-billed invoices will be handled
• Whether internal finance staff or an outsourced provider will manage the process

The best time to think about e-Invoicing is not when the first compliance reminder appears. It is when the company is setting up its accounting and invoicing workflows in the first place.

Conclusion

The SSM certificate may mark the start of your company, but the first 90 days decide how ready it is to operate. Get the registrations, records, banking, payroll, accounting and e-Invoicing set up right early, and your company starts on solid ground. Leave them for later, and “later” usually arrives with penalties, delays and paperwork you wish you had handled sooner.

The incorporation of company in Malaysia is only the beginning. Staying compliant after incorporation is just as important to ensure your business operates smoothly and avoids unnecessary regulatory issues. Ledgen handles your entire post-incorporation setup, from company secretary appointment to LHDN, EPF and e-Invoicing registration. If you need support after the incorporation of your company in Malaysia, contact Ledgen to get started: malaysia@ledgengroup.com.

Frequently Asked Questions

What happens if I miss the LHDN registration deadline after incorporating in Malaysia?

If your company has commenced business operations, you should register for a corporate tax file with LHDN through the e-Daftar application at MyTax. Late or missed tax registration may affect future tax filings, CP204 tax estimates and communication with LHDN. Depending on the issue, the company may also face penalties or additional scrutiny if filings are delayed or incomplete.

The safest approach is to register early once business operations begin. Do not wait until the first tax season to sort out the company’s tax profile.

Do I need to register for SST immediately after incorporating an Sdn Bhd?

Not always. SST registration depends on the nature of your taxable goods or services and whether the company meets the applicable turnover threshold. The general SST threshold is commonly RM500,000 annual taxable turnover, but some sectors may be subject to different thresholds or treatment.

Even if registration is not immediately required, new companies should assess SST exposure early, especially if projected revenue is high or the business provides taxable services.

How quickly can Ledgen set up our company secretary and post-incorporation registrations?

Ledgen can support newly incorporated companies with company secretary appointment, statutory documentation, LHDN registration, EPF, SOCSO, EIS, accounting setup and e-Invoicing readiness as part of a coordinated post-incorporation compliance engagement.

This is especially useful for founders who want to avoid dealing with each agency and filing requirement separately. Compliance is much easier when the moving parts are handled together.