This is an independent educational platform. We do not provide financial advice, broker recommendations, or investment services. All content is for educational purposes only.

Educational content only — not financial advice

Step-by-Step: How to Check If a Broker Is Licensed in Malaysia

Published · Free guide

Anyone can type "SC regulated" on a website footer. Verifying that claim takes about five minutes and uses free public tools. This guide walks you through the SC Investment Adviser Register step by step, explains what each field means, shows how to spot clone licence fraud, and covers quick checks on UK and Cyprus registers when you see foreign licence badges.

Do this check before you share identity documents or transfer money — not after something feels wrong. Pair it with our warning lists guide and scam checklist for a complete picture.

Before You Search: Find the Legal Entity Name

Marketing brands rarely match register entries. Scroll to the website footer, terms of use, or product disclosure document and locate:

  • The full legal company name (often ending in Sdn. Bhd. or Bhd);
  • The Capital Markets Services (CMS) licence number, if displayed;
  • The company registration number (SSM), if shown.

Write these down exactly as printed. You will search both name and number.

Step-by-Step SC Investment Adviser Register Search

Step 1 — Open the Official Register

Go directly to sc.com.my by typing the address yourself or using a trusted bookmark. Avoid clicking register links in unsolicited emails — they may lead to fake pages.

Navigate to the Investment Adviser Register or Digital section (the SC occasionally reorganises menus; look for CMS licence and investment adviser searches).

Step 2 — Choose the Right Search Type

For brokers and trading platforms, you typically want:

  • CMS licensees — for companies holding a Capital Markets Services licence under CMSA 2007;
  • Registered investment advisers — for individuals or firms authorised to provide investment advice.

Start with the CMS licensee search using the legal entity name from the website.

Step 3 — Enter Name or Licence Number

Type the legal name first. If multiple results appear, use the CMS licence number or SSM registration number to narrow the match. Select the entry whose details align with the website's disclosures.

Step 4 — Read the Licence Details Page

Do not stop at "found a match." Read the full entry carefully.

Step 5 — Cross-Check Warning Lists

Even with a register hit, search the name on the BNM Financial Consumer Alert List and SC investor alerts. Clone firms steal real licence numbers. Our warning lists guide explains why both checks matter.

What Each Field Means

Register pages contain formal language. Here is a plain-English map:

SC register fields — plain English
Field What it means for you
CMS licence number Unique identifier for the licensed entity. Must match what the website displays if they cite Malaysian regulation.
Licence status Should be current. Suspended, revoked, or surrendered statuses mean the entity cannot operate as authorised — treat as a stop sign.
Licensee name The legal entity responsible. Must match the company contracting with you in terms of use.
Principal place of business Registered address. Unusual mismatches with claimed "Kuala Lumpur office" photos may warrant questions — though many legitimate firms use serviced offices.
Authorisations / permitted activities The activities the licence covers — e.g., dealing in derivatives, fund management, advising on securities. The platform's products must fit inside these authorisations.
Representatives Individuals allowed to provide services on behalf of the licensee. If a person claims to represent the firm, you can search their name here.
Start date / licence history Shows how long the entity has held the licence. Very new licences are not automatically bad — but combine with other due diligence.

A licence is like a menu: it lists what a company is allowed to serve. If they offer something not on the menu, that is a conversation — or a reason to walk away.

Clone Licence Recognition

Clone fraud is when scammers display a real company's CMS licence number on a fake website. The number is genuine; the website is not.

Clone Red Flags

  • Website domain does not match the domain listed on the SC register or the licensee's official corporate site;
  • Contact email uses Gmail, Outlook, or a look-alike domain (e.g., extra hyphen, wrong TLD);
  • Phone numbers differ from official register contacts;
  • Entity appears on the BNM Financial Consumer Alert List despite showing a licence number;
  • Cold outreach — legitimate licensees rarely acquire clients through aggressive cold calls.

Clone Verification Protocol

  1. Find the licence number on the soliciting website;
  2. Search that number on the SC register — note the legal name and official contact details on the register entry;
  3. Compare domain, email, and phone against those official details — not against the soliciting page;
  4. If they differ, treat the soliciting site as unverified and report concerns to the SC.

FCA and CySEC in Three Steps Each

Many platforms Malaysians encounter cite overseas regulators. Overseas licensing may be valid in those countries but does not replace Malaysian requirements for services directed here. Still, checking foreign claims helps you spot lies.

FCA (United Kingdom) — Three Steps

  1. Open the FCA Financial Services Register via fca.org.uk;
  2. Search firm name and Firm Reference Number (FRN) if shown — confirm the legal name matches exactly;
  3. Check the FCA warning list for unauthorised firms with similar names (clone check).

CySEC (Cyprus) — Three Steps

  1. Visit cysec.gov.cy and open the regulated entities / investment firms search;
  2. Search company name or CIF licence number cited on the website;
  3. Review CySEC warning notices for unauthorised entities using similar branding.

Foreign authorisation is informational for Malaysian residents — not a substitute for a CMS licence when Malaysian law applies. Discuss cross-border rules with a qualified professional if you are unsure.

Broker Not Found — What That Means

If SC register search returns no matching CMS licensee for the entity claiming to serve you in Malaysia, treat that as a serious unresolved issue — not a minor paperwork gap.

Possible Explanations (All Require Caution)

  • Unlicensed operation: The entity may be operating illegally for the services offered.
  • Name mismatch: You searched the brand instead of the legal name — try again with footer details.
  • Representative only: Some individuals are representatives of a licensed parent; services may be provided under the parent's licence — verify the parent entity and appointment.
  • Offshore-only model: The firm may disclaim Malaysian clients in fine print while still marketing to Malaysians — a regulatory grey area that favours extreme caution.

Default stance when verification fails: do not proceed. Read choosing your first broker for questions to ask if a company insists they are "regulated elsewhere."

How to Report Concerns to the SC

If you identify unlicensed activity, misleading licence claims, or clone impersonation, the SC accepts consumer reports. Visit sc.com.my and navigate to the complaints or contact section for the current online reporting process.

Include when reporting:

  • Entity name, website URLs, and claimed licence numbers;
  • Screenshots of register searches showing mismatch or no result;
  • Copies of promotional materials and communications;
  • Transaction records if money moved;
  • Dates and names of representatives who contacted you.

For disputes with legitimately licensed entities, you may also use the firm's internal complaints process and any approved dispute resolution scheme — separate from misconduct reporting.

Documentation Habit

Save a dated screenshot every time you verify a licence. If circumstances change later, you have proof of what you saw at decision time. Keep a simple folder:

  1. Register search results;
  2. Warning list search results;
  3. Archived homepage and terms PDF;
  4. Written answers to fee and complaint-process questions from our other guides.

When sharing personal data with any platform, confirm how it will be handled under the Personal Data Protection Act 2010 (PDPA). Legitimate firms publish privacy notices explaining data use and your rights.

Limitations — What Licences Do Not Promise

A current CMS licence confirms regulatory authorisation and oversight — not that a platform is right for your goals, that costs are low, or that you will have a smooth experience. Licences are the entry gate, not the finish line. Review hidden fees and conduct checklists before any commitment.

Summary

Checking a broker licence in Malaysia is straightforward: find the legal name, search the SC Investment Adviser Register, read authorisations and status, cross-check BNM and SC warning lists, and investigate clone indicators. Add FCA or CySEC steps when foreign badges appear. If nothing matches, stop. Official tools at sc.com.my and bnm.gov.my/financial-consumer-alert-list exist for your protection — use them every time.