Malaysia's Alert Lists, Reviewed: What BNM's and the SC's Warnings Actually Prove

This is not a review of a broker. It reviews two documents a reader in Kuala Lumpur is told to check, and asks what each answers. Both lists are fixtures; the only dated thing here is the check, run on 3 September 2026.

Two lists, two questions

The two warning lists reviewed here are kept by two authorities, each policing its own perimeter, and are not interchangeable; Labuan FSA keeps a third, with its own not-exhaustive caveat, not reviewed here. A brand can appear on one, both or neither, and each outcome means something different.

What a listing means, exactly

BNM’s wording is narrow, and worth reading twice. Consumers may use the FCA List “as one of several ways to check if an entity or a scheme has been identified as one that has not been authorised by BNM to offer financial products or services that are regulated by BNM.”

That is the whole of it. A listing records that the entity is not authorised by BNM for the products BNM regulates — not a finding of fraud, not a judgment, not a statement about any regulator elsewhere. The SC’s list is blunter and goes further: it advises the public “not to deal with or invest through” those on it and prints a remark on the conduct alleged — an illegal scheme, a misused logo, occasionally a fraudulent website — allegations about Malaysian regulated activity that say nothing of a firm’s standing elsewhere.

The sentence both keepers put in your way

Each prints its own limit at the top of the page. BNM: “The absence or subsequent removal of an entity or a scheme from the FCA List however should not be construed as confirmation that such entity or scheme is or has been licensed or regulated by BNM.” The SC: “This list is not exhaustive and is based on the information available to the SC at the time of publication.”

BNM’s own 3 August 2026 update notice goes further than its list page: the list “is not exhaustive and only serves as a guide to members of the public based on information and queries received by BNM.” Complaint-driven, in other words: the table grows when someone reports something and the assessment holds, not when a supervisor sweeps the market.

The lists also move. That notice announced forty additions, twelve of them variations on one American asset manager’s name, all flagged potential clones. Twenty-eight were in the table a month later; the twelve were not. Neither the notice nor the table says why.

Where the familiar names sit

BNM’s table records OctaFX, added 29 August 2022, with seven Malaysian collecting-agent companies named beneath it by registration number. It holds HotForex Malaysia and FBS Malaysia from 2017, XM Forex Malaysia from that December, and Exness Malaysia — brand names with a country suffix attached.

The SC’s list leans the other way, towards the impersonator: both entries carrying the Exness name are marked potential clones rather than the brand itself, while six carry XM — three flagged as clones, one from 2018 the SC describes as the “XM platform operated by Trading Point Holdings Ltd”. Plain brand entries sit there too — Valetax, dated 2023, remarked as “carrying on unlicensed capital market activities of dealing in securities”, and MiTrade, dated 2021, as “carrying on unregulated activities”, both firms this desk has reviewed, inside the postures we mapped in mid-2026.

One 2025 entry is a website the SC calls a “Fraudulent website /clone of SC’s Public Register of Licence Holders and Registered Persons.” The verification tool has itself been cloned.

The check that counts

Neither list answers the reader’s real question, which is positive: is this entity licensed, by whom, for what. For capital market activity that answer sits in the SC’s Public Register of Licence Holders and Registered Persons, published under sections 77 and 79 of the Capital Markets and Services Act 2007 so the public may “ascertain whether he is dealing with a licensed or registered person in relation to any regulated activity.” BNM keeps its own directory of the financial sector participants it licenses, and Labuan FSA a Financial Institutions Directory with a “Money Brokers” list. Those are registers; alert lists are warnings.

Bottom line

Run all three searches. They cost nothing, and a hit is worth knowing before you fund anything. Then discard the conclusion you wanted: a nil result says only that nothing has been listed under that spelling — at BNM, that nothing was reported and assessed.

Whether a broker is licensed anywhere that matters to you is a separate question, put to a register, one jurisdiction and one company at a time; licensing varies by country, and a Malaysian reader’s answer is not the one printed in an offshore footer. The leverage in the account is a third question again, and no alert list ever softened a losing position.