Bank Negara Malaysia (BNM) has accelerated its work on central bank digital currency (CBDC) and payments modernization over the past two years. Its late-2023 discussion paper made clear that Malaysia is in no rush to issue a retail CBDC, but will continue piloting wholesale and cross-border settlement. Project mBridge and Project Dunbar entered minimum-viable-product stages in 2024, and the Digital Ringgit proof-of-concept report arrived in 2025, with the 2026 budget naming wholesale e-MYR as a financial-infrastructure priority. For the Web3 and digital-asset industry, a CBDC is not simply a "state cryptocurrency." It touches DuitNow real-time retail payments, the reusable payment credential, stablecoin boundaries, Islamic finance and Shariah compliance, anti-money-laundering data sharing, and cross-border liquidity. This article walks through BNM's overall stance, technical paths, pilots, and implications for digital asset exchanges and white-label platforms operating in or entering Malaysia.

1. BNM's Core Position on CBDC

Unlike the retail-first paths of the Bahamas Sand Dollar, Nigeria's eNaira, or China's digital yuan, BNM has remained deliberately cautious. Its December 2023 paper made three judgments. First, retail payments in Malaysia are already efficient: DuitNow QR covers more than 80 percent of retail merchants, and DuitNow Instant Transfer settles person-to-person transfers in seconds at near-zero cost, so a retail CBDC offers limited marginal benefit. Second, wholesale and cross-border payments are more promising: delivery-versus-payment, payment-versus-payment in foreign exchange, and the correspondent-banking cost of cross-border remittances can be meaningfully improved with a wholesale CBDC. Third, BNM will not ban private stablecoins but will regulate them, leaving private-sector innovation to serve cross-border payments while the central bank focuses on wholesale settlement finality.

These judgments shape Malaysia's sequence: wholesale before retail, cross-border before domestic, proof-of-concept before legislation. As of 2026, Malaysia has not formally issued a CBDC, but the wholesale e-MYR trial has run multiple rounds of real transactions on Project mBridge, and retail technical research continues in the sandbox.

BNM repeatedly stresses that the Digital Ringgit is not a crypto-asset. It is a direct central-bank liability with the same standing as cash and reserves; it does not use a permissionless public chain but runs on a permissioned ledger or conventional account infrastructure; and its anonymity is lower than cash but higher than commercial-bank deposits, following a "controllable anonymity" principle. This matters for exchanges: listing e-MYR pairs will require a payment-institution license on top of any Registered Digital Asset Service Provider (RDA) approval.

2. Wholesale CBDC: Project Dunbar and Project mBridge

Wholesale CBDC solves settlement between financial institutions. Traditional cross-border settlement relies on correspondent banking, with a single payment passing through three or four banks, each with its own time zone, compliance checks, and liquidity costs. Average settlement takes two to three days at around 6.5 percent of the transfer amount. A wholesale CBDC lets multiple central banks issue their digital currencies on a shared ledger, with commercial banks performing payment-versus-payment FX trades that settle in seconds.

Malaysia participates in two flagship pilots.

Project Dunbar, led by the BIS Innovation Hub Singapore Centre with BNM, the South African Reserve Bank, the Monetary Authority of Singapore, and the Reserve Bank of Australia, ran from 2021 and published its prototype report in 2022. It proved that cross-border settlement on a multi-currency shared platform is technically feasible: commercial banks from different countries receive tiered permissions and can hold foreign wCBDC directly for PvP trades. Dunbar resolved who can hold wCBDC, how regulators share a compliance view across jurisdictions, and how settlement finality is legally recognized across countries.

Project mBridge, led by the BIS Innovation Hub Hong Kong Centre with the Hong Kong Monetary Authority, the Bank of Thailand, the People's Bank of China's Digital Currency Institute, and the Central Bank of the UAE, added BNM as an observer in 2022 and a full participant in 2023. Built on the mBridge Ledger using HotStuff-style consensus, the platform supports multiple central-bank currencies. Its 2024 MVP phase processed more than 1,600 real transactions worth over 23 billion dollars across more than 20 participating banks. Malaysian use cases include rubber exporters receiving Chinese-buyer payments directly in MYR versus CNY PvP on mBridge, replacing a two-day dollar-correspondent route with sub-ten-second settlement at roughly 60 percent lower cost.

The Web3 impact is indirect but real. Wholesale CBDC will partially erode stablecoins' B2B cross-border advantage, but stablecoins remain irreplaceable in person-to-person remittance, on-chain settlement, and DeFi collateral. White-label platforms focused on retail stablecoin transfers are largely unaffected; those positioning as merchant cross-border settlement rails should track mBridge access requirements over time.

3. Retail CBDC: The Digital Ringgit Proof-of-Concept

A retail CBDC serves the general public and merchants, with much higher technical and policy complexity. BNM launched the Digital Ringgit proof-of-concept in 2024 and published an interim report in 2025. The PoC focuses on three questions.

The holding model. Three architectures are possible: a single-tier model where the central bank directly opens accounts for the public, a two-tier model where the central bank issues and commercial banks plus licensed e-wallet operators handle onboarding and KYC, and a hybrid model where the central bank records all transactions but intermediaries handle customer service. BNM favors the two-tier model: it preserves the existing banking system and keeps the central bank out of mass retail operations.

Privacy and data. A CBDC is inherently digital, leaving traces everywhere. BNM proposes controllable anonymity: small transactions (for example, below 200 ringgit per transaction and 3,000 ringgit per month) are anonymous at the front end to merchants and intermediaries, but the central bank can access records through judicial process for AML investigations; large transactions require full disclosure. The PoC tested zero-knowledge proofs that let intermediaries verify "transaction is under the limit and parties are not sanctioned" without learning the amount or counterparty.

Offline payments. Eastern Malaysian states such as Sabah and Sarawak have patchy network coverage, so a CBDC must support Bluetooth or NFC offline payments with double-spend protection. The PoC tested secure-hardware-based offline payments using phone secure elements or dedicated NFC cards, with devices syncing to the ledger when reconnected.

BNM has stated that even if issued, the Digital Ringgit will not replace cash or DuitNow but will coexist as a third payment method. Whether and when to issue depends on payment-market demand and private-stablecoin evolution over the next three to five years.

4. Interoperability with DuitNow and the RPP

DuitNow is the real-time retail payments backbone operated by PayNet, comprising DuitNow QR, DuitNow Instant Transfer, and DuitNow Request-to-Collect. In 2024 it processed more than 60 million transactions per day and is the de facto Malaysian retail rail.

Any CBDC that cannot interoperate with DuitNow becomes a payment island with poor user experience and duplicated merchant onboarding. The PoC requires the Digital Ringgit to interoperate with DuitNow through PayNet's Reusable Payment Credential (RPP), introduced in 2023. The RPP lets users send money using a mobile number, ID, or unified merchant code across payment instruments without bank-account numbers.

For the CBDC, the RPP enables transfers across e-MYR wallets, DuitNow banking apps, Touch 'n Go eWallet, GrabPay, and MAE. A user sending from an e-MYR wallet to a mobile number reaches a recipient with no e-MYR wallet by landing automatically in their linked DuitNow bank account, and vice versa. This "front-end agnostic, back-end interoperable" design removes the cognitive burden of choosing which money to use.

For digital asset exchanges, the RPP also means Malaysian-ringgit on-ramps may eventually consolidate. Currently a white-label exchange must sign with multiple banks and e-wallets; with full RPP rollout, one interface could in principle cover all ringgit payment instruments. Accessing the RPP still requires becoming a PayNet participant or going through a licensed payment institution, which is a compliance hurdle for non-bank platforms.

5. Stablecoin Framework and the CBDC Boundary

BNM's late-2023 Regulatory Framework for Stablecoin is the companion policy to its CBDC work. Its key points are as follows.

First, regulated stablecoins must be pegged one-to-one to a single fiat currency. Algorithmic stablecoins and multi-collateral synthetic stablecoins are out of scope and cannot be issued or promoted to the Malaysian public. Second, stablecoin issuers must be BNM-licensed institutions, and single-currency reserve assets must be 100 percent cash, short-term government bonds, or central-bank deposits, with monthly reserve reports and annual independent audits. Third, when stablecoins are used for payments, issuers and major wallet providers must also comply with e-money or payment-system rules under the Financial Services Act or Islamic Financial Services Act. Even foreign-issued stablecoins such as USDC and USDT face local operating requirements if widely used for payments in Malaysia.

Fourth, BNM is explicit that stablecoins are not substitutes for e-MYR. A stablecoin is a private liability whose holder bears issuer risk; e-MYR is central-bank money with legal-tender status. The two can coexist: stablecoins suit cross-border payments, on-chain settlement, and DeFi collateral, while e-MYR suits domestic retail payments, final settlement, and tax payments.

For white-label exchanges in Malaysia, the immediate implication is that listing a stablecoin requires confirming BNM recognition or pending recognition rather than relying on mainstream status; stablecoin reserve reports must be prominently linked; and when stablecoins are used for payments, KYC must follow payment-institution standards rather than lighter crypto-asset standards.

6. E-Money, Stablecoin, CBDC: The Boundary

Malaysia has many licensed e-wallets: Touch 'n Go eWallet, GrabPay, Maybank's MAE, Boost, and BigPay. Their balances are pre-paid liabilities (e-money) fully backed by issuer funds held in segregated bank trust accounts. They look like digital balances, stablecoins, and CBDCs in an app, but their legal natures differ.

E-money balances are private issuer debts to users, regulated under the FSA, with equivalent funds segregated in bank trust accounts; balances are not on the central bank's books. Stablecoins are on-chain tokens whose holders have redemption claims against issuers and are regulated under both BNM's stablecoin framework and payment-system law. CBDCs are direct central-bank liabilities equivalent in legal status to cash.

Users barely notice the difference at the front end, but risk bearing, settlement finality, privacy, and cross-border mobility diverge sharply. The PoC studied how a single app can hold e-money, stablecoin, and e-MYR, with users choosing instruments by use case: e-money for small daily payments given its mature merchant base, stablecoins for cross-border remittances and on-chain settlement, and e-MYR for government disbursements and large tax payments given strongest finality.

The lesson for Web3 platforms is not to treat e-money, stablecoin, and CBDC as one product. A white-label crypto wallet in Malaysia that simultaneously supports e-money on-ramps, stablecoin trading, and future e-MYR must separately obtain e-money, digital-asset service provider, and stablecoin-related approvals rather than relying on one license.

7. Islamic Finance and Shariah Compliance

Malaysia is a global Islamic-finance center, and any payment or digital-currency solution must pass Shariah scrutiny. BNM's Shariah Advisory Council (SAC) published its preliminary Shariah view on CBDC and stablecoin in 2024.

The SAC's core position is that the Digital Ringgit, as central-bank money, is fundamentally identical to paper ringgit and is Shariah-compliant money (thaman haqiqi or urf nuqud). Muslims may use it as long as the underlying technology avoids riba (interest), gharar (excessive uncertainty), and maysir (gambling). Wholesale wCBDC for interbank settlement is similarly compliant, but balances cannot earn interest.

Stablecoins require more nuance. The SAC considers single-fiat, fully reserved, at-par redeemable stablecoins whose reserve assets are themselves Shariah-compliant to be permissible. Algorithmic stablecoins with uncertain prices and derivative-like mechanisms are not treated as compliant money. That is why Malaysian Islamic stablecoin projects back MYR-pegged tokens strictly with cash, short-term sukuk, and central-bank wadi'ah custody accounts rather than interest-bearing treasuries.

For prediction markets, derivatives, and leveraged trading, the SAC has long been cautious. Binary options and high-leverage contracts are explicitly maysir; prediction markets that are pure bets on future events without genuine economic hedging also fall under maysir. White-label prediction markets or derivatives exchanges in Malaysia must design Shariah-compliant variants or clearly exclude Muslim users, or SAC rulings become a material compliance obstacle.

8. AML/CFT and Data Privacy

Both CBDCs and stablecoins make fund flows more traceable, which is good for anti-money-laundering but challenging for data privacy. BNM balances the two.

On the AML side, in the two-tier e-MYR model commercial banks and e-wallets are the front-line KYC parties and must perform customer due diligence, suspicious-transaction reports, and Travel Rule compliance under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act. E-MYR transactions above 5,000 ringgit require full identity capture; cross-border e-MYR transfers automatically sync with BNM's financial-intelligence unit. For stablecoins, BNM requires all Malaysian operators to enforce the FATF Travel Rule, transmitting originator and beneficiary information for transfers above 1,000 U.S. dollars or euros, consistent with Singapore's MAS and Hong Kong's HKMA.

On the privacy side, the PoC tested two technologies. Zero-knowledge proofs let intermediaries verify limits, sanctions screening, and KYC tier without learning amounts or counterparties. Data minimization means the central bank stores only the minimum data required for settlement finality; merchants do not receive user identity from e-MYR payments, and advertising or credit scoring cannot draw on e-MYR transaction data. This is close to the privacy approach in the EU digital euro draft.

Digital-asset exchanges must upgrade Travel Rule capability by integrating message carriers such as Sygna, Notabene, or TRP, maintaining a counterparty VASP name-and-public-key directory, and risk-rating unregistered VASPs. From 2026 BNM requires all Malaysian RDAs to transmit Travel Rule information for stablecoin transfers at any amount, well below the FATF 1,000-dollar threshold.

9. Direct Implications for Digital Asset Exchanges

For white-label exchanges, wallets, and prediction markets operating in or entering Malaysia, CBDC and payments modernization have six concrete implications.

First, ringgit on-ramps may consolidate around the RPP. Where exchanges currently integrate CIMB, Maybank, and Hong Leong FPX alongside Touch 'n Go and GrabPay, a mature RPP could cover all with one interface. White-label platforms should reserve an RPP adapter in their back ends.

Second, e-MYR pairs require a separate payment license. When e-MYR launches, exchanges listing MYR/e-MYR need e-money or payment-system approval on top of RDA status. Early engagement with BNM on licensing, or indirect access through a licensed payment institution, is prudent.

Third, stablecoin listing whitelists will tighten. BNM's recognized-stablecoin list will update dynamically; exchanges need continuous compliance review covering reserve reports, audit opinions, and issuer regulatory status, with delisting or restriction for unrecognized tokens.

Fourth, Travel Rule becomes foundational. Both stablecoins and future e-MYR require originator and beneficiary information for cross-border and domestic transfers. White-label platforms must build Travel Rule messaging as an internal module, not bolt it on under regulatory pressure.

Fifth, Shariah-compliant variants are a differentiator. Malaysian Muslims make up roughly 60 percent of the population, and Shariah-compliant spot trading, interest-free averaging-in, and non-interest custody have real demand. White-label platforms can offer an Islamic Account toggle that disables leverage, derivatives, and interest products while retaining spot and Shariah-compliant stablecoins.

Sixth, prediction markets and derivatives must revisit their models. The SAC defines maysir broadly, so binary prediction, high-leverage contracts, and speculation without hedging may fail compliance. Prediction products should be designed as information markets tied to genuine economic activity, where conditional tokens on elections, sports, or macro outcomes serve explicit hedging purposes rather than pure gambling.

10. Recommendations for Web3 Startups and White-Label Platforms

Web3 startups should read BNM's CBDC and payments modernization as infrastructure upgrading rather than existential disruption. Five recommendations follow.

First, treat wholesale CBDC as a long-term settlement option. Projects in B2B cross-border payments, trade finance, and corporate treasury should reserve wCBDC interfaces so they can later settle on Project mBridge across participating central banks, reducing reliance on correspondents and stablecoins.

Second, build stablecoin operations deeply and compliantly. BNM will not ban stablecoins but will require compliance. White-label platforms should help clients issuing MYR-pegged stablecoins meet 100 percent reserves, independent audits, and Shariah compliance rather than exploiting gray areas.

Third, view retail CBDC as a supplement, not a replacement. Until e-MYR launches, retail payments remain dominated by DuitNow and e-wallets; Web3 on-ramps should prioritize DuitNow QR and FPX, then layer stablecoins and future e-MYR.

Fourth, invest early in zero-knowledge and privacy technology. The PoC explicitly tests ZK proofs, and future e-MYR wallets will require ZK capability. Malaysian teams building ZK proofs, private payments, and compliant anonymous transfers have an opportunity to become technology vendors to BNM and licensed institutions.

Fifth, keep engaging through the sandbox. BNM's Financial Technology Enabler Group is open to CBDC-related experimentation. White-label platforms and stablecoin issuers can use sandbox approvals to test e-MYR interactions, Shariah-compliant mechanisms, and Travel Rule implementations in controlled environments before full market launch.

11. Regional Coordination: Singapore, Thailand, Indonesia

CBDC is not a one-country project, and Malaysia's pace must be read within ASEAN.

Singapore's Project Orchid focuses on retail CBDC and government use cases such as programmable vouchers and grants, but similarly states there is no urgent need for full issuance; Singapore is more active on wholesale and cross-border settlement through Project Dunbar and Project Guardian. The Bank of Thailand's retail CBDC has moved into a pilot phase, with limited public use planned for 2026 focused on welfare and tourism. Bank Indonesia published its Rupiah Digital white paper in 2024, prioritizing wholesale and targeting retail pilots in 2026-2027. The Philippines and Vietnam are at various earlier stages.

The shared ASEAN direction is wholesale first, retail cautiously, and cross-border coordination. Project mBridge is the most important vehicle and may evolve into an ASEAN central-bank settlement alliance. Web3 platforms that understand this can anticipate that Southeast Asian CBDCs will not remain isolated but will interconnect through mBridge and regional QR linkages such as QRIS, DuitNow, PromptPay, and QR Ph. Onboarding one country's fiat rail may eventually extend naturally across several.

12. A Three-Year Roadmap

Drawing on BNM publications, PayNet announcements, and mBridge progress, a plausible 2026-2028 trajectory emerges.

In 2026, wholesale e-MYR enters steady-state operation on mBridge, with first-wave Malaysian banks using wCBDC for real cross-border trade settlement; DuitNow RPP fully rolls out; the stablecoin framework enters enforcement with the first licensed MYR stablecoin issuers; and retail Digital Ringgit concludes its PoC and enters policy consultation.

In 2027, if payment-market conditions warrant, BNM may launch a limited retail e-MYR pilot for civil-servant salaries, government benefits, or selected-state offline payments; e-wallet-to-e-MYR interoperability fully goes live; ASEAN QR linkage extends to all ten member states; and mBridge moves into commercial operation.

In 2028 and beyond, the Digital Ringgit formally issues to the public as a third payment method alongside cash and DuitNow; MYR stablecoins and e-MYR coexist under a compliance framework; and Malaysia becomes a dual hub for ASEAN wholesale CBDC and Islamic digital currency.

This path is not a committed plan, but BNM's policy language, pilot cadence, and legislative preparations all point in this direction. Web3 platforms should plan product roadmaps against this window rather than waiting passively.

Conclusion

Malaysia's CBDC path is not a dramatic "state cryptocurrency" narrative but a steady sequence of wholesale first, retail later, cross-border first, domestic later, coexisting with private stablecoins and compatible with Islamic finance. The Digital Ringgit will not replace cash or DuitNow overnight, nor will it eliminate the Web3 industry. It will become the third tier of payments infrastructure alongside DuitNow, stablecoins, and e-wallets, forming Malaysia's digital payment stack. For white-label digital asset exchanges, wallets, and prediction markets operating in Malaysia, the real opportunity is not to compete with the central bank in issuing money, but to build the invisible underlying capabilities: e-MYR on-ramps, compliant stablecoins, RPP interfaces, Travel Rule, Shariah compliance, and zero-knowledge privacy. These let end users enjoy cheaper, faster, and safer digital payments without friction. SoonTech's white-label exchange, prediction market, and MPC wallet products for Malaysia are architected with these extension points in mind, helping institutions maintain product continuity and compliance as regulation evolves.

FAQ

Q1: Will Malaysia formally issue the Digital Ringgit in 2026?

A: Based on BNM's public stance, 2026 is most likely to see steady-state wholesale e-MYR on Project mBridge. Retail Digital Ringgit remains in proof-of-concept and policy consultation, with full public issuance expected in 2027-2028.

Q2: Will digital asset exchanges in Malaysia be required to integrate e-MYR?

A: Not required. E-MYR will coexist with cash and DuitNow, and exchanges can continue onboarding through banks, e-wallets, and FPX. However, listing e-MYR pairs or directly holding e-MYR will require payment-institution approval beyond the RDA license.

Q3: Will BNM ban foreign stablecoins such as USDT and USDC?

A: Not outright, but stablecoins not recognized by BNM cannot be issued, promoted, or used for payments to the Malaysian public. Listed exchanges must track recognition status and delist or restrict unrecognized stablecoins.

Q4: How does Malaysian Islamic finance view cryptocurrency?

A: The SAC considers spot crypto-asset trading itself not to violate Shariah, but algorithmic stablecoins, high-leverage contracts, binary options, and gambling-style prediction markets involve riba, gharar, or maysir and are non-compliant. Platforms can use an Islamic Account toggle to restrict non-compliant products.

Q5: How does Project mBridge affect ordinary crypto users?

A: Ordinary users do not touch mBridge directly; it is a wholesale settlement system for banks and financial institutions. Indirectly, cross-border remittances become faster and cheaper, and MYR settlement against participating currencies gains finality, potentially reducing stablecoins' B2B cross-border advantage over time.

Q6: What technical preparations should white-label platforms make now?

A: Four areas matter: reserve an RPP and e-MYR adapter in the back end; build in Travel Rule messaging; integrate continuous compliance review before listing stablecoins; and provide a Shariah-compliant account toggle that disables leverage, interest, and gambling-style products.

🌐 Build secure and scalable Web3 platforms with SoonTech.

Explore our solutions for White Label Crypto Exchanges, Prediction Markets, MPC Wallets, Matching Engines, Liquidity Integration, and Compliance.