Most accounting problems found during a Malaysian SME audit are not technical failures. They are control failures that were inexpensive to prevent and expensive to unwind a year later.
The statutory baseline is lower than most owners assume and more demanding than it sounds. Section 245 of the Companies Act 2016 requires accounting records that "sufficiently explain the transactions and financial position of the company" and that can be "conveniently and properly audited", with entries made within sixty days of the completion of the transaction and records retained for seven years. Seven of the areas below are where that standard usually breaks first.
1. Director and shareholder accounts kept as a single balance
The most common finding in owner-managed companies. Amounts move between the company and its directors without documentation, and the director's account becomes a balancing figure containing personal expenditure, undrawn remuneration, genuine loans, reimbursements and funds introduced, all in one undifferentiated total.
Each element behaves differently. Remuneration carries monthly tax deduction and, where applicable, statutory contributions. Personal expenditure is not deductible. Funds introduced are a liability of the company. And a genuine loan raises a question the balance itself cannot answer: section 224 of the Companies Act 2016 prohibits a company from making a loan to its director, subject to exceptions that include an exempt private company and specified purposes approved by resolution.
Related-party disclosure depends on the same analysis. MFRS 124 and, for private entities, Section 33 of MPERS require related-party transactions and balances, including key management personnel compensation, to be disclosed. None of that can be prepared reliably from an unanalysed account.
What to check: classify each transaction when it occurs rather than at year end; hold documentation for the reason and the terms; reconcile the account monthly; and establish whether the balance is receivable or payable, and on what terms.
2. Revenue recognised by invoice date rather than performance
Recording revenue when the invoice is raised, rather than when the performance obligation is satisfied, produces misstatement in both directions across a year end. It is also the area auditors test most closely, because the test is cheap and the error is common.
The risk concentrates in a predictable set of transactions: deposits and advance payments, deliveries in the days either side of year end, work in progress on service contracts, goods held on consignment, and arrangements where goods are invoiced but not yet despatched.
Private entities should note that the basis itself is changing. Under MPERS (2016), which remains in force, Section 23 recognises revenue on a transfer-of-risks-and-rewards basis for goods and by stage of completion for services. MPERS (2025), issued by the Malaysian Accounting Standards Board in October 2025, applies to annual periods beginning on or after 1 January 2027, with early application permitted, and aligns Section 23 with the contract-based model already used in MFRS 15. Entities with long-running or multi-element contracts have time to assess the effect, but not indefinitely.
What to check: trace the last despatches before year end and the first after it to the revenue recorded; review credit notes issued after year end for evidence of pre-year-end invoicing; and apply the same cut-off discipline to purchases and accruals, not only to sales.
3. Statutory deductions treated as a source of working capital
Employees' Provident Fund, SOCSO, the Employment Insurance System and monthly tax deduction are held on behalf of employees and the authorities. Deferring remittance to manage cash is not a working capital decision.
The deadlines cluster. Section 43(1) of the Employees Provident Fund Act 1991 requires contributions to be paid monthly, and KWSP states they must be paid on or before the fifteenth day of the following month. PERKESO states that SOCSO and EIS contributions are payable by the fifteenth day of the succeeding month, with interest on late payment charged at six per cent a year. Monthly tax deduction is remitted by the fifteenth of the subsequent month under rule 10(1) of the Income Tax (Deduction from Remuneration) Rules 1994.
One distinction in the EPF Act deserves particular attention. Simple failure to pay contributions within the prescribed period is an offence under section 43(2), carrying imprisonment of up to three years or a fine of up to RM10,000, or both. But where the employer has deducted the employee's share from wages and failed to remit it, section 48(3) raises that to imprisonment of up to six years or a fine of up to RM20,000, or both. The heavier provision applies to money that was never the company's.
The annual obligations run on their own dates. Section 83(1A) of the Income Tax Act 1967 requires Form EA to be rendered to each employee on or before the last day of February following the year of remuneration, and section 83(1) requires Form E, with C.P.8D, by 31 March. Failure on either is an offence under paragraph 120(1)(b).
What to check: reconcile payroll to the amounts actually remitted every month rather than annually, and agree the Form EA totals back to both the payroll ledger and the remittances.
4. Inventory counted once a year and called control
An annual count is a verification exercise, not inventory control. Where the count is the only check, a difference discovered at year end cannot be attributed to a period or a cause, which means it cannot be corrected at source and will probably recur.
Where inventory is material, maintain perpetual records, investigate variances when they arise rather than in aggregate at year end, and address obsolescence deliberately. Inventory carried at cost indefinitely is a measurement error as well as a control weakness, since it must be written down where the amount expected to be recovered on sale has fallen below cost.
What to check: written count instructions and cut-off at the count date; slow-moving and ageing analysis prepared before the count rather than after it; and evidence that identified adjustments were actually posted.
5. Fixed asset registers that no longer describe the assets
Registers commonly contain assets that were disposed of or scrapped, omit additions posted directly to expenses, and carry depreciation policies that no longer reflect how the assets are used.
There is now a further consequence. The capital allowance claim under Schedule 3 of the Income Tax Act 1967 is built from the register, and the complete schedule of capital allowances and charges must be furnished to HASiL through the Malaysian Income Tax Reporting System where a claim is made. A register that has drifted no longer supports only the accounts; it supports a document filed with the tax authority.
What to check: reconcile the register to the ledger; verify existence on a rolling cycle rather than all at once; record disposals when they happen; and review residual values and useful lives where usage has changed.
6. Bank reconciliations prepared but never reviewed
Reconciliations that are prepared and filed without review, or that carry long-standing unexplained items, provide little assurance. A reconciling item that has been carried forward for months is a control failure regardless of its size, because it means the difference has not been explained.
What to check: evidence of review by someone other than the preparer; an ageing of reconciling items with an expected clearance date for each; unpresented cheques beyond their validity period; and whether items said to have cleared after year end actually did.
7. Recording and approving performed by the same person
In a small finance team, complete segregation of duties is impractical. Compensating controls are not.
The practical set is short: owner review of bank statements independently of the person who posts them; approval of new suppliers and of any change to supplier bank details; dual authorisation of payments above a defined threshold; and periodic review of system user access and of manual journal entries, which are the entries least likely to have an external document behind them.
Changes to payment instructions deserve separate treatment, because that is the control most often targeted in payment fraud. Verify a change by contacting the supplier on a number already held in the company's records, never on the contact details supplied in the request itself.
Where to start
These seven do not carry equal urgency. Sequenced by consequence:
- Statutory deductions, because arrears attract personal liability for officers and are among the clearer early indicators of financial distress.
- Director and shareholder accounts, because the analysis becomes harder every month it is deferred, and it determines both a tax position and a disclosure.
- Revenue cut-off, because it is the misstatement most likely to change the reported result.
- The remaining four, which belong in standing monthly routines rather than in a year-end exercise.
Two retention rules sit underneath all of them. Section 245(3) of the Companies Act 2016 requires accounting records to be kept for seven years after the completion of the transactions to which they relate. Sections 82 and 82A of the Income Tax Act 1967 impose a matching seven-year period for tax records and documents, and require documents relating to income in Malaysia to be kept in Malaysia.
The wider point is that these controls determine whether management information is reliable enough to act on, whether the audit can be completed inside the statutory timetable, and whether the company can answer a tax enquiry with evidence rather than reconstruction.
General-information limitation
This article is general information, not accounting, audit or tax advice for a particular organisation, and it does not determine the appropriate treatment of any transaction or the adequacy of any control environment. Requirements, contribution rates and filing dates change, and the applicable reporting framework depends on the entity. Confirm the current position against the relevant authority and obtain advice on the facts where a matter is material.
To discuss how these areas apply to your organisation, see Saifudin & Co's accounting and financial reporting services.