Ready to Raise?
Fundraising & STO Readiness in Malaysia
From what it is — to how you’ll fund it.
What tokenisation is
- The asset, the token, the legal wrapper
- Global RWA momentum & the BNM roadmap
- Standards, custody, the technology stack
How you’ll fund your company
- Equity, debt or token — what are you selling?
- The real issuer journey: eligibility → campaign → liquidity
- Whether a token belongs in the plan at all
One rule for the room: ask anytime. The checkpoints are your micro-breaks.
Nicholas Chong
Securities Commission Malaysia
pitchIN VP of Commercial & Product
Four forks. One route — yours.
Your phone answers each fork as we go — and builds your Raise Route card by the end.
A quick map of the next two hours.
- Five checkpoints — one after each section. Answer 2–3 quick questions on your phone; it helps me read the room live.
- You’re building a scorecard. Your answers assemble a personal Raise Route card by the end — instrument, perimeter verdict, weakest layers, worth-it.
- Ask anytime, in the app. Tap “Ask a question” whenever — I’ll pick them up and answer as we go.
Phones out and kept out — this session runs on them.
Register — and tell us: what are you raising in the next 12 months?
What are you raising in the next 12 months?
One tap on your phone — sizes your raise, and opens your Raise Route card.
Name · company · email.
Your answers across five checkpoints build your Raise Route — a personal card at the end.
The Funding Landscape
The whole map at speed — then the one question that decides everything else.
Every company rides the same escalator.
Bootstrapping
Grants
Angels
VC
ECF · TCF · P2P
Private equity
LEAP · ACE · Main
Most of this room is on steps 3–4 — today is about the rails that take you up the next one.
What each funder actually wants.
Our own VC round: 7 VCs pitched, 3 ghosted us, 2+ years offer-to-close — know your judge before you queue.
What are you actually selling to funders?
A share of the business
Equity. Investors own a slice of the upside — and you take on shareholders.
A promise to repay
Debt. Notes, financing, P2P. Cheaper if you have cash flow — brutal if you don’t.
A product, or access
A token, membership or pre-sale. Buyers want the thing — not your cap table.
Everything else is packaging — and each of the three can be traditional or tokenised. Hold that thought.
This market is real.
A pizza shop out-raised the startups.
- Not a tech startup — a pizza brand, raising for a new-outlet expansion vehicle.
- The founder ran the raise openly on Threads & Instagram — performance updates, webinars, real numbers.
- Hundreds of the investors were customers first — the crowd was already his.
Ordinary companies raise here. Your customers become your investors.
The escalator, ridden.
Started with the crowd on pitchIN in 2020 — now closing a sovereign-backed Series C. Each figure below is money raised that round — not valuation.
Profitable today, two sovereign backers, 10M+ customers — started with the crowd on pitchIN.
What you sell decides the rail.
You give up ownership
- Angels · MBAN — private, early, relationship-led
- VC — institutional, 10× story, board seats
- ECF — the crowd · RM20M lifetime cap · SC-registered platforms
You keep ownership, owe money
- Banks — cash flow + collateral, no dilution
- P2P — SC-registered financing platforms
- Private notes · licensed moneylenders
Buyers want the thing
- TCF onshore — 2 IEO operators (pitchIN + KLDX) · 20× shareholders’ funds · RM100M cap
- Offshore — Labuan/Fusang · Dubai/EU
- Wherever you go, AMLA still follows you
And when holders want out: PSTX for private shares, DAX listings for tokens. The rail you pick decides your regulator, your investors and your timeline.
What are you selling — and which rails are you considering?
Pick your instrument, then tick every rail you’re weighing. Today’s instinct is a fine answer.
Fork 1 of your Raise Route.
Part two on your phone: tick every rail you’re considering — ECF · TCF · debt · VC · grants · Labuan/offshore. Answer with today’s instinct; the next segment pressure-tests it.
Raising Capital with Tokens
Two very different things get called a “token raise” — this segment splits them, then walks each route end to end.
Two different things get called a “token raise.”
You’re selling future access
- Buyers pre-pay for use of your platform or product
- Route: TCF — the SC’s Guidelines on Digital Assets
- Eligibility bites: RM500k paid-up, MY-incorporated, 20× shareholders’ funds, RM100M ceiling
The token IS the instrument
- A share, bond or note — in digital form
- Route: the instrument’s own rules — ECF / P2P / bond frameworks
- The digital twin. There is no separate “STO law”
Get this fork wrong and you’ve planned the wrong 12 months.
Tokenised equity is still equity.
Regulation follows the instrument — not the technology.
Traditional shares
- Companies Act
- SC fundraising frameworks
- Shareholder rights
instrument
Tokenised shares
- Companies Act
- SC fundraising frameworks
- Shareholder rights
- A token wrapper Only addition
Written into law: the Prescription Amendment Order 2025 (in force 9 Jan 2025) — tokenised shares and bonds are securities, full stop.
Five acronyms. One question: who vets the deal?
“STO” isn’t a legal category here — the underlying instrument is.
The twin — or the native.
The digital twin
- Token mirrors a registered share or bond
- The register / trust stays the legal truth
- Pilot-first: Khazanah sukuk ran exactly this way
Native issuance
- The token IS the security — ledger as register
- Needs law that recognises an on-chain register
- Live in a few EU states — not here, not yet
Status: detailed tokenised-CMP framework consulted May 2025 — final guidelines still pending. Until then: twin, pilot-first, consult the SC.
How the twin is actually built.
1 · Raise normally — no tokens
Via the instrument’s own SC rail — ECF / bond / sukuk framework (CMSRL / RMO). Shares, notes, bonds, funds.
2 · Tokenise after the raise closes
The token is issued as a digital certificate / receipt of the security — a 1:1 mirror. The register / depository stays the legal truth.
3 · Plan asset servicing up front
Investor list, disbursements, listing, redemption — under capital-markets rules + AMLA + reporting.
No separate “STO law” — you tokenise a security you already raised, the legal way.
The grown-ups are already tokenising.
Your utility token: raising, or selling?
You’re fundraising
- Buyers’ money is pooled to build or grow the project
- That’s fundraising → a security → the TCF route (or the instrument’s own rules)
- A “utility-token pre-sale to fund development” is a securities offering
You’re selling access
- Pure access to something that already works — no pooled fundraising
- Product territory — likely outside the securities perimeter
- Consumer & contract law — plus AMLA, always
Same token, two different laws. Answer this before you pick a venue.
Four doors. No “best” one — trade-offs.
TCF
Public promo OK · foreign investors OK · SC-reviewed. Cost: the eligibility bar + a 3–6-month review.
Placement / SAFT
Sophisticated investors only, no public promo. Fast and cheap — but no retail crowd.
Labuan
The LFSA regime — Fusang exchange; Fasset is a live member. Different regulator, offshore investor base.
Dubai · EU
Outside the SC’s perimeter — but AMLA still follows you, and no active promotion to Malaysians.
The door decides your investors, your promo rules and your timeline. Pick it before the tokenomics deck.
Tokenised raise? Here’s who you talk to.
You can do this yourselves — with counsel
- Issue tokenised shares as a corporate exercise — no platform required
- Check the SSM / Companies Act requirements — the register of members stays the legal truth
- Instrument terms live in the constitution & agreements
- Sophisticated investors only — no public promotion
You need a registered rail
- SC-registered crowdfunding platforms that support tokenisation — pitchIN — for equity twins
- The IEO operators (pitchIN · KLDX) for utility tokens
- The rail brings the trustee, the KYC crowd and the compliance rails with it
The moment you invite the public, the rail stops being optional.
TCF issuer eligibility
“I want to launch a token” — your options.
What is the token’s main job?
Substance, not the whitepaper’s label — the same question the regulator asks.
It raises money to build or grow the project
Buyers’ money is pooled to fund the business
Utility token → TCF · instrument in token form → the instrument’s own rules (the digital twin)
It carries rights over an asset
Gold, property, shares, debt — asset-linked
Structure the wrapper first — the asset’s own regime + AMLA govern
It’s pure access to something that already works
No fundraising — buyers just use the product
Likely outside the securities perimeter — consumer & contract law, plus AMLA
This map is the segment in one picture — your phone runs the same test at the perimeter checkpoint.
Same word, two very different timelines.
Tokenised equity — the digital twin
Disclosure document
ECF disclosure — tokenised certs flagged upfront
Platform DD
Legal · financial · structure
Campaign
4–12 wks, funds in trust
Close + allotment
All-or-nothing, shares allotted
Tokenise after close
Cert issued as a token — a corporate exercise
Asset servicing
Registry, dividends, transfers
Utility token — TCF
Whitepaper
10-section outline
Platform DD
Legal · financial · token design
SC review
3–6 months — plan for it
Campaign
4–12 wks, funds in trust
Issuance
Audit → mint → allocate
DAX listing
Optional — local or global
The twin adds tokenisation after the raise. TCF adds months before it. Budget accordingly.
Protection is why the crowd shows up.
- Trustee-held funds — investor money never touches you until the raise succeeds.
- Full refund if it fails — all-or-nothing campaigns, by design.
- A KYC’d crowd & regulated custody — everyone in the room is identified; tokens sit with a regulated custodian.
- KYT-gated withdrawals — tokens leave the platform only through screened routes.
Regulation is a distribution feature, not a tax — it’s what lets strangers fund you.
The full arc: raise → utility → listing.
A working auction platform, a real user base, real token utility — then the raise.
Same rail. Thirteen investors.
Same platform, same regulator, same framework. Hold that thought — Segment 5 explains the gap.
Your journey doesn’t end at a successful raise.
Hundreds of investors
- Investor comms — updates, semi-annual reports
- Corporate actions — dividends, votes, buybacks
- Registry & transfers — who owns what, always current
Where holders eventually exit
- PSTX — secondary trading for private shares
- DAX listings — the token exit route
- LEAP 2.0 — Bursa proposal removes the delisting trap
- PKS@Bursa — the Bursa path: RM50M fund, 200 SMEs to Bursa by 2030
You’re not choosing a raise — you’re choosing a runway.
The Regulator’s Lens
Your token can be your product — instead of a security. How that line actually gets drawn, from the desk that drew it.
The SC doesn’t regulate Web3. It regulates activities.
You need a licence — or a licensed rail
- Public fundraising — TCF / ECF / P2P
- Operating a market — an exchange, a DAX
- Custody — holding assets for others
- Fund management — pooling money to invest
- Payments — that one’s BNM’s turf
Build freely
- Building a Web3 project or protocol
- Free airdrops
- Token sales not used for fundraising
- Blockchain record-keeping
Ask what you’re doing, not what you’re building.
If the token is used for fundraising, it is a security.
The test is use — not the whitepaper’s label. A “utility token pre-sale to fund development” is a securities offering. It always was.
Investors aren’t liable. Operators are.
- Investors may buy anything, anywhere. Even scam victims aren’t “at fault” — their only duties are tax and AML.
- Accountability sits with the business. If an activity should be licensed and isn’t, it’s the operator who answers for it.
- The tripwire: active promotion. Unregulated players may not actively market to Malaysians — that’s the line cases actually turned on.
First question on the regulator’s desk was never who bought it — it was who sold it, and how.
Four questions decide the perimeter.
The bright line: a token sold to BUILD the thing = fundraising = security · access to a thing that ALREADY WORKS = product. The label is irrelevant — substance wins.
Then regulation follows the asset.
Companies Act
The wrapper is a company or trust — corporate law governs the rights, the SC governs any public offer.
Gold Exemption Order 1986
Direct gold sales sit outside the SC entirely — KPDN consumer-protection rules only.
BNM territory
Anything that behaves like money — stablecoins, payment tokens — belongs to the central bank.
The morning session called this the legal wrapper. This is its regulatory face: the wrapper picks your regulator.
The token never holds the asset — the wrapper does.
The thing
Shares, gold, property, debt — off-chain, real
Holds title
SPV / Sdn Bhd / LLP / trustee / licensed trust — the legal owner of record
What it issues
Income, voting, redemption — the rights bundle
Carries the rights
Bound programmatically + contractually — code and contract together
Holds the token
Owns rights against the wrapper — not the asset itself
Structure the wrapper first — the token only ever carries what the wrapper gives it.
Gold is a different claim.
A claim to grams
- Physical gold vaulted with a dealer / custodian
- The token = a digital certificate = a contractual claim to grams
- Governed by consumer + contract law (Gold Exemption Order 1986) — not the SC
A share of the company
- The token carries beneficial interest in the company
- Held through a legal wrapper — trustee / SPV
- That’s a security → SC-governed
Same “asset-backed token” label — but a claim on grams is not a share. The wrapper decides which law you’re in.
Gold, walked through the test.
Compliant — and gone
- 60,000+ users, RM25M+ invested — a Shariah gold token, from RM1
- Did the right things, in the right lane
- Closed anyway: “no longer commercially viable”
Never licensed
- Digital gold with MLM-style distribution
- BNM, publicly: claims of approval are false
- AMLA reporting duty ≠ a licence
Outside the SC doesn’t mean easy — it means a different regulator, and no capital-markets distribution.
Grey areas are normal.
- MYRC — Malaysia’s first ringgit stablecoin, live in public beta. There is no licensing regime for it yet. That’s not a loophole; it’s a frontier.
- BNM’s DAIH pilots are running — StanChart + Capital A on a ringgit stablecoin; Maybank + CIMB on tokenised deposits. Policy clarity promised end-2026.
- PeerHive — SC sandbox cohort Nov 2025, shut down Jun 2026. First-hand: the settlement rail its model needed didn’t exist yet.First-hand
The rail PeerHive needed is being built right now — under supervision, with clarity due end-2026.
Get counsel to support your case. Then — innovate ahead.
Grey isn’t a stop sign. As long as you don’t break the law, the frontier is yours to build on — with a lawyer’s letter in the drawer.
Run your token through the perimeter test.
Four honest questions on your phone — build vs. already-works, pooling, asset link — and it returns your verdict.
Fork 2 of your Raise Route.
Whatever the verdict — AMLA applies. Always.
Launching a Token — what you must actually build
Utility token or tokenised security — the stack is the same. Layer by layer, and where each one bites in Malaysia.
Regulators care about outcomes — and how your tech delivers them.
- Transfer restrictions in the token contract → AMLA screening enforced at every hop — not just at onboarding.
- An on-chain registry → an audit trail the regulator can inspect, not request.
- Programmatic caps → investor limits that can’t be fat-fingered.
Compliance isn’t a PDF — it’s built into the stack. Show the regulator the outcome your tech guarantees, and the conversation changes.
Four layers — no skipping.
AssetLayer 01
The thing itself + its legal wrapper — what does the token-holder actually own?
IdentityLayer 02
KYC / AML on every holder — AMLA always applies, licensed or not.
SettlementLayer 03
The money leg — how ringgit actually moves against the token.
Custody & transfer complianceWoven through
Who holds the keys — custodian or self-custody — and who is allowed to receive a transfer.
What exactly does the holder own?
- 100% of the ordinary shares of a Malaysian-run commodities group — held by a Labuan trust as nominee since 2019.
- The token carries the beneficial interest: dividends and voting pass through to holders.
- The share register is the legal truth. The token is the mirror — lose the token model, the shares still exist.
Define the rights bundle first. The token only ever carries what the wrapper gives it.
Identity: more than one way to make it work.
In the contract (ERC-3643)
Whitelist enforced in the token — only vetted wallets ever receive it. Cap-table control survives · masses-ready · heaviest build. Enegra runs this.
Gate the benefits
Anyone may hold — but dividends / beneficial interest go only to KYC’d holders. Lighter build, plainer token · control at the register, not the token.
Inside your walls
Token moves only inside your own platform — KYC at the door, no external transfers. Simplest compliance · no outside liquidity by design.
Screen at the sale only
Plain ERC-20, screening only at the initial sale. Easiest to ship — but day two your token is with strangers you never screened. The gap.
Find the model your asset, your buyers and your regulator all accept — then write it into the design, not the FAQ.
The money leg is Malaysia’s real bottleneck.
- No licensed ringgit stablecoin exists. MYRC is in beta; BNM’s pilots are running; policy clarity is promised end-2026.
- This is the exact wall PeerHive hit — a sandboxed, SC-selected model that couldn’t settle on-chain in ringgit.First-hand
- Today’s workaround: fiat rails + a trustee for the money leg. Tomorrow: tokenised deposits (Maybank + CIMB pilots) are coming.
Design your model to survive on today’s rails — and upgrade when the ringgit goes on-chain.
Custody decides who’s allowed to buy.
Easier to market
- PRO — crypto-native buyers love it · no custodian fees or dependency · holders feel real ownership
- CON — lost keys = lost tokens · mainstream + institutional won’t touch it · KYT still needed on every withdrawal
Opens the masses
- PRO — unlocks the masses + traditional institutions (they require regulated custody) · recoverable access · SC segregation ring-fences client assets (it saved the KDX clients)
- CON — cost + counterparty ops risk · the own-licence route is slow & capital-heavy
Custody isn’t plumbing — it’s a distribution choice: it decides who’s ALLOWED to buy from you.
The collapse that proved the rules.
- 2025: the Singapore parent collapses. Founder arrested — roughly S$2.6M left against S$266M owed.
- The Malaysian entity survived. Client assets were ring-fenced under SC segregation rules — untouched by the parent’s implosion.
- The rebirth: rebranded Kinetic DAX; Kenanga upped its stake — Malaysia’s first bank-backed digital asset exchange.
Regulated custody isn’t bureaucracy. It’s what saved the Malaysian clients.
You don’t build these rails. You rent them.
Every layer has a licensed operator with a rate card. These are the SC’s registered lists — pick on fit, not fame.
Which layers are your weakest? Pick up to two.
Asset · identity · settlement · custody — flag the ones you’d need help with. Your weakest layers become your project plan.
Fork 3 of your Raise Route.
Your weakest layers are your project plan for the next two quarters.
Is It Actually Worth It?
The honest scorecard — when the token earns its keep, and when the traditional route simply wins.
Almost anything can be tokenised. Not everything should be.
- Many small buyers you genuinely can’t reach through conventional channels.
- The asset gains something real from fractionalisation or programmability.
- A real secondary market can plausibly exist — not just be promised.
- Your counterparties will actually accept digital settlement.
If none of these apply — the traditional route is cheaper and faster. That’s not a failure; it’s an answer.
BidNow vs Frac: the community variable.
BidNow
Frac
The token doesn’t sell itself — your community does.
The plumbing works. Where’s the market?
Live since 2019, still running — and still barely trading. A price is not a market.
What tokenisation does not give you.
- Property tokens resell at ~2% globally (The Star, Jun 2026) — and a token is not a land title without a blockchain land registry.
- ASX abandoned its CHESS blockchain replacement — a national exchange, with national-exchange money: too early, too ambitious.
- Blockchain Capital’s fund token traded at ~50% below NAV — liquid in theory, discounted in practice.
Tokenisation promises liquidity. Liquidity comes from buyers — not from tokens.
What tokenisation does give you.
The real payoff is mostly at the asset-servicing layer — not liquidity.
Automated asset servicing
On-chain dividend / coupon payments, cap-table + ESOS management, corporate actions run by code instead of manual reconciliation.
Programmable & fractional
Programmed for escrow, purpose-bound funds, automated payouts — and fractionalised so smaller cheques and broader access become practical.
One shared source of truth
A single register, updated and verified in real time — issuers, investors and regulators read the same record, no parallel reconciliation.
But tokens are tools — the value is the underlying business and how you design them, not the token itself.
Row by row, no romance.
The token reliably wins one row. Make sure that row is real before paying for the other four.
Sometimes the answer is no token.
- Raising <RM5M from your own customers? Plain ECF. Cheaper, faster, proven.
- Selling gold? Sell gold. The Gold Exemption Order has worked fine since 1986.
- B2B with 10 customers? You don’t need 10,000 token holders — you need 11 customers.
Tokenise because it earns its keep — not because it’s 2026.
Is launching a token worth it — for the token itself?
Agree, neutral or disagree with five statements on your phone — utility, crowd, economics, stack, buyers — and your card completes.
Fork 4 — the last fork.
Verdicts: launch-worthy · borderline · the token adds nothing yet. Your card appears — keep it open for the reveal.
Fundraising is a sales process.
- Build the list — research and qualify funders like a sales pipeline. Warm intros convert; cold decks mostly don’t.
- Work the pipeline — meetings, follow-ups, momentum. Every no gets you closer to a yes.
- Prep is the hardest part — data room, financial model, projections, pitch deck. Budget 3–6 months before money moves.
Mark Suster’s rule — and true on every rail in this deck. The raise is a campaign, not an event.
Campaigns succeed on three multipliers.
Business fundamentals
Real traction, a believable model — the campaign can’t fix the business.
Investment terms
A fair valuation and a clean structure — priced so the next round works too.
Marketability
Your crowd is your distribution — the campaign is a distribution exercise.
Mokky’s ran its raise openly on Threads — 924 investors. BidNow walked in with 20,000 users. The crowd was the campaign.
Raise from strength — not from fumes.
- The runway rule — start raising while you still have 6–12 months of cash. Desperation prices badly.
- A realistic valuation — there is no formula. Price for the next round, not the ego.
- Know the dilution norms — seed 20–30%, Series A ~25%. Plan the whole journey, not one round.
Three to six months, start to money-in-bank — put it in the calendar before you need it.
Here’s what this cohort looks like.
Two or three volunteers: what route did you get — and do you agree with it?
The ready-to-raise checklist — two tiers.
Clean cap table + Sdn Bhd — no tangles a DD team trips on
Financials ready — audited statements, management accounts
A realistic valuation — priced for the next round, not the ego
A story + a crowd — the campaign is a distribution exercise
Founder time budget — 3–6 months for the process itself
The left column is the real gate — arrive with it done and you skip months.
All of this is recent.
Regulated is where the momentum is.
Whichever route lit up — talk to us.
pitchIN is the private fundraising platform — equity, token, debt, and the liquidity after. Bring your Raise Route card to the conversation.
Nicholas Chong·VP of Commercial & Product, pitchIN·pitchin.my·humancard.me/profile/nicholas
Card + slides + my contact card.
Whichever route lit up — start there.
That's the walk-through. Take your route, and build the piece it pointed at.
Nicholas Chong·formerly Securities Commission Malaysia·nicholaschong.xyz
Originally run as a founder workshop at pitchIN.
Questions — especially the grey-area ones.
Those are the fun ones. Ask anything — regulator stories included.