Chapter 8: Costs, Timeline & Full Checklist
8.1 Cost structure (order-of-magnitude, not a quote)
Figures below are order-of-magnitude estimates for planning; actuals vary by approach. Get a precise budget from local advisors.
| Cost item | Note | Magnitude |
|---|---|---|
| Shareholders’ funds (hard threshold) | SC-required, continuously maintained | RM 5M (not “spend”, but must be locked) |
| Working capital | Cover 12–24 months of early burn | Several RM million |
| Legal / compliance advisors | Application prep, SC liaison | High six to seven figures (RM) |
| Technology systems | Build or buy matching/wallet/risk | Substantial, approach-dependent |
| Security audit / pen-test | Third-party, often multiple rounds | Mid-high six figures |
| Personnel | Compliance, AML, tech, ops team | Ongoing payroll |
| Insurance | Cyber/crime/professional | By coverage |
| Licence/application fees | SC fees | Per latest SC schedule |
| Audit / company secretary / ongoing compliance | Annual recurring | Recurring |
Bottom line: this is not a low-cost business. “Ticket + truly robust operations” typically needs tens of millions of RM.
8.2 Timeline expectation
gantt
title Rough timeline (depends on readiness)
dateFormat X
axisFormat %s
section Prep
Company/team/capital :0, 3
Tech & compliance build :1, 5
section Application
SC pre-engagement :3, 1
Submission :4, 1
SC review & queries :5, 8
section Launch
Conditions/bank/audit :10, 4
Go live :14, 2
- Total cycle commonly 6–18 months+.
- Main variables: shareholder complexity, tech/compliance depth, SC query rounds, banking progress.
8.3 One-page execution checklist
Phase A: Setup & entity
- Read the SC Guidelines on Recognized Markets (DAX chapter), latest version
- Confirm DAX model (not IEO / pure custody)
- Lock RM 5M + working capital, with proof of lawful source
- Incorporate Sdn Bhd (SSM), appoint local director + company secretary
- Design clear ownership (UBO traceable)
- Establish local office and core team
Phase B: Team & advisors
- Confirm director/CEO/CTO/CFO (fit-and-proper materials)
- Appoint dedicated Compliance Officer + AMLCO (local)
- Appoint auditor, legal counsel, tax advisor
Phase C: Compliance & tech
- Write AML/CFT manual + risk-assessment methodology
- Integrate e-KYC, sanctions screening, blockchain analytics
- Design transaction monitoring, STR reporting, record keeping (≥6y)
- Implement PDPA data protection
- Design hot/cold wallets (multisig/MPC + HSM)
- Implement client-asset segregation (fiat trust account + separate client wallets)
- Build risk/market surveillance + audit logging (SIEM)
- Arrange third-party pen-test + vulnerability management
- Build and drill BCP/DR + incident response
Phase D: Application
- SC pre-engagement
- Assemble full document pack (company/financial/personnel/business/compliance/tech/ops/listing)
- Submit RMO-DAX registration + fees
- Respond rapidly to SC queries; support due diligence
- Meet conditional-approval prerequisites
- Obtain RMO registration (on SC list)
Phase E: Launch & ongoing compliance
- Open local bank accounts (operating + client trust)
- Produce listing assessment for first assets
- Arrange insurance (cyber/crime/liability)
- Stand up ongoing reporting, material-change notice, annual audit
- Maintain RM 5M shareholders’ funds
- Final readiness check → go live
8.4 Common failure points
- Underfunding: thinking RM 5M is enough; the operating-capital gap is fatal.
- Shell-company mindset: lacking local substance, you won’t pass the SC.
- AML box-ticking: weak compliance — neither banks nor the SC will accept it.
- Security gaps: pen-test/wallet architecture below bar, endless rework.
- Banking delays: waiting until after the licence — then can’t operate.
- Careless listing: listing high-risk assets without assessment crosses red lines.
8.5 Next steps
- Do a feasibility + budget assessment first; confirm funds and commitment.
- Hire a local firm fluent in CMSA/SC to lead the compliance path.
- Pre-engage the SC to calibrate expectations.
- Advance technology, compliance and banking in parallel.
➡️ Want a more granular resource list and itemized pricing? See Chapter 9