For Malaysian insurance & takaful brokers · Re-read from the document on

Bank Negara just made your website
a disclosure channel.

On 1 January 2026, a new policy document for approved brokers came into force. Buried in paragraph 16.1 is a line most of the sector has not noticed: your latest audited financial statements must be publicly available, and your website is one of the two places the regulator will accept. Here is what the rule says, what it does not say, and what it means for a site that corporate clients read before they call you.

In force 1 January 2026 Quotes the policy document directly Sources listed and dated

The short version

Must a Malaysian insurance broker publish its accounts on its website? Either channel satisfies it. Paragraph 16.1 gives you two ways to meet the duty: make the latest audited financial statements available for public inspection, at no cost, either at every branch in Malaysia, or on your website in a publicly accessible electronic form. A broker with a copy at every branch counter has met the rule in full. So the news here is quieter than an emergency, and worth noticing: the regulator has put your website alongside your branch as a legitimate channel for statutory disclosure, and one of those two channels is the one your clients actually use.

Paragraph 16.1 Limb (a)Every branch in Malaysia Limb (b)Your own website
Satisfies the rule Yes, in full. Yes, in full.
What it takes A current audited set free to inspect at every branch, on any day someone walks in. One stable public address, replaced after each audit closes.
Who reads it Someone who drives to your office and asks the front desk. Every corporate buyer who looks you up before deciding you are worth a meeting.
In a tender Produced when procurement asks for it. Already published when procurement asks for it.
Found on eight brokers’ sites, 24 Jul 2026 Outside what a check of websites can see. Zero of the eight.
Both limbs are compliant, and the regulator treats them as equals. The market picks one, and it is the channel your clients already use.
A

What the rule actually says

Bank Negara Malaysia issued the Policy Document on Prudent and Professional Conduct of Insurance and Takaful Brokers on 29 August 2025. It came into effect on 1 January 2026, with one exception: paragraph 11.2, requiring at least one independent director on the board, takes effect on 1 January 2027.

It applies to approved brokers, meaning an approved insurance broker under the Financial Services Act 2013 and an approved takaful broker under the Islamic Financial Services Act 2013. If your firm is on Bank Negara's register of approved insurance and takaful brokers, it applies to you. Brokers licensed instead under the Labuan regime sit under a separate framework and are outside this document.

The document is broad. It covers minimum capital funds, professional indemnity cover, the appointment and responsibilities of the board and senior management, auditors, business conduct, the professionalism of broking staff, and notifications to the Bank. Most of it is prudential and internal. One paragraph is not.

Paragraph 16.1 · Publication of financial statements

"For purposes of section 66 of the FSA and section 75 of the IFSA, an approved broker's latest audited financial statements shall be made available for access and inspection by members of the public, at no cost whatsoever: (a) at every branch of the approved broker in Malaysia; or (b) on the approved broker's website in an electronic form that is publicly accessible."
Policy Document on Prudent and Professional Conduct of Insurance and Takaful Brokers, paragraph 16.1. Read from the policy document itself, re-checked 18 September 2026.

Two details in that paragraph are easy to skim past. The first is "or". It is a genuine either/or, so the branch counter satisfies the rule on its own, and anyone reading the paragraph as a website mandate has misread it. The second is the opening clause: the paragraph is expressed to be for the purposes of section 66 of the FSA and section 75 of the IFSA. The obligation is anchored in statute, which gives it more weight than a policy preference.

B

What the paragraph actually asks for

Read closely, the paragraph is narrower than the reaction it tends to produce, and more specific than it first appears.

01
One current set, which is all it asks
The wording is "latest audited financial statements." One current set, rather than a library of past years. Whichever channel you choose, the obligation is to keep the current set available.
02
At no cost whatsoever
The phrase is emphatic in the rule itself. A copy is free, access is free, and the document reaches a member of the public with no price in the way.
03
Every branch, if you take the branch route
The branch option is not "your head office." It is every branch in Malaysia. For a broker with several offices, that is a standing operational duty at each one.
04
"Publicly accessible" is doing real work
If you take the website route, a document behind a login, a contact form, an email request or a members' area is hard to describe as publicly accessible. Findable and openable by anyone is the safer reading.
05
It reaches the audited accounts, and stops there
This paragraph is about audited financial statements. Commissions, client lists and internal policies sit outside it entirely.
06
The branch counter satisfies it in full
Worth stating plainly, because it will be misrepresented. A broker who satisfies the branch limb has met the duty in full. Choosing the website is a business decision on top of that.

What we found when we looked

Eight broker websites, and none of them used the second option

8

Bank Negara-approved brokers whose websites we checked on 24 July 2026, homepage plus every page linked from it.

0

publishing audited financial statements, annual reports or any equivalent on the website limb.

2

further firms held out of the count: one blocked automated access, one was unreachable that day.

Every one of the eight may be satisfying paragraph 16.1 perfectly well at the branch counter, which is exactly what the rule permits. What the count shows is that the website limb sits almost entirely unused across the sector.

On 24 July 2026 we checked the websites of eight Bank Negara-approved Malaysian insurance brokers to see whether any had taken the website route. We looked at each firm's homepage and every page linked from it, searching for audited financial statements, annual reports or any equivalent disclosure. We found none. The single document that came closest was an anti-bribery and corruption policy statement, which is a different thing entirely.

To be clear about what that measures: it is a reading of eight websites, and compliance is a separate question those firms may already answer at the branch counter, which is exactly what the rule permits. What it does suggest is that six months after the rule commenced, the website limb is sitting almost entirely unused across the sector.

Method and limits, so you can judge the finding: eight firms, homepage plus all homepage-linked pages, automated retrieval on 24 July 2026. The method reaches only pages the homepage links to, so a statement on an unlinked deep page would have been missed. Two further firms were excluded rather than counted, because one blocked automated access and one failed to resolve at the time of checking. Every firm stays anonymous. The check stands as at that date, and websites change.

C

Why which channel you pick matters

Both options are compliant. They are not equally useful, and the difference is about who is actually looking.

07
Corporate buyers check you before they call
A risk manager comparing brokers looks you up first. What your website shows is the whole of their impression at the point where they are deciding whether you are worth a meeting.
08
Financial standing is what they're screening for
A broker holds client money and places risk. Counterparty solidity is not a nice-to-have in that assessment. Audited accounts speak directly to the question being asked.
09
Right now it distinguishes you
On the evidence above, very few brokers have taken the website route. Being early on something the regulator has already blessed is an unusually cheap way to stand apart.
D

If you take the website route, do it properly

Publishing a PDF badly creates new problems. This is the practical side, and it is the part a studio that builds websites for insurance brokers actually handles.

10
Give it a permanent, sensible address
A stable URL that does not change each year, linked from somewhere a person would think to look. A file buried in an uploads folder with no link is published in name only.
11
Reachable without asking anyone
Anything that makes a member of the public identify themselves or ask permission works against the words "publicly accessible" and "at no cost whatsoever."
12
Have an owner and a date for replacing it
"Latest" is a moving target. A named person and a calendar date each year after the audit closes is the difference between a live disclosure and a stale one.
13
Check the file before it goes up
Signed accounts are a formal document. Confirm you are publishing the audited set, complete, correctly dated, and that nothing was pulled into it by accident.
14
Mind the personal data in what you upload
Signature blocks, directors' details and correspondence addresses travel with these documents. Publishing is a disclosure, and Malaysia's PDPA still applies to what rides along.
15
Make the document readable, not just present
A scanned image that no reader or search engine can parse technically sits on the site. A properly generated file can actually be read, found and used.

Three questions for your own site

Worth putting to whoever looks after your website, before someone outside the firm asks first.

Which limb are we relying on? If the answer is the branch counter, is a current copy genuinely available at every branch in Malaysia, today, to anyone who walks in?
If it's on the site, can a stranger reach it? Open it in a private browser window with no login. If it needs a form, an email or an account, reconsider.
Who replaces it next year? A named person and a date after the audit closes. Without both, "latest" quietly stops being true.

If a question here has no clear answer, that is worth settling internally rather than discovering during a tender. The rule is undemanding. Being visibly organised about it is the part that earns anything.

Q

Questions brokers are asking

Must a Malaysian insurance broker publish its financial statements on its website?

Either channel satisfies it. Paragraph 16.1 of Bank Negara Malaysia's Policy Document on Prudent and Professional Conduct of Insurance and Takaful Brokers requires an approved broker's latest audited financial statements to be available for public access and inspection at no cost, either at every branch of the broker in Malaysia, or on the broker's website in an electronic form that is publicly accessible. It is an either/or, so a broker that keeps copies available at every branch has met the rule in full, with the website left as a business decision.

When did the new BNM insurance broker rules take effect?

The Policy Document on Prudent and Professional Conduct of Insurance and Takaful Brokers was issued on 29 August 2025 and came into effect on 1 January 2026. One provision, paragraph 11.2 requiring at least one independent director on the board, takes effect later, on 1 January 2027.

Which firms does the BNM broker policy document apply to?

It applies to approved brokers, meaning an approved insurance broker under the Financial Services Act 2013 and an approved takaful broker under the Islamic Financial Services Act 2013. Bank Negara Malaysia publishes the current register of approved insurance and takaful brokers on its website. Brokers licensed instead under the Labuan regime are governed by a separate framework.

Is the financial statement disclosure duty statutory or just policy?

Paragraph 16.1 is expressed to be for the purposes of section 66 of the Financial Services Act 2013 and section 75 of the Islamic Financial Services Act 2013, so the disclosure obligation is anchored in statute rather than resting on policy preference alone.

What does "publicly accessible" mean for a broker's website?

The rule specifies an electronic form that is publicly accessible, at no cost. Read plainly, that points away from anything sitting behind a login, a contact form, an email request or a paywall. A document a member of the public can find and open without asking anyone's permission is the safer reading.

S

Sources

Everything above traces to one of these. Read the policy document yourself if any of it matters to a decision.

A note on what this is

This is a website-practice resource, not legal or compliance advice. We build and maintain websites for regulated sectors; we do not advise on prudential compliance, and we are not your compliance function. The authority here is the policy document itself, quoted above and linked in full. If a specific question turns on interpretation, put it to Bank Negara Malaysia or your own compliance counsel rather than relying on our reading. Everything on this page reflects the position as at 24 July 2026 and has not been re-verified since; policy documents are amended, and the instrument governs, not our summary of it.

Before you commission a ringgit

Send me your firm’s name and I will design your homepage, free, before anything is signed.

You see a working version of your own homepage on your own screen, and you decide after that. It takes about a week and it costs nothing, because a written brief and a finished page are different things and this is how we make sure what you get is what you had in mind. Built so the disclosures above sit where a corporate buyer looks for them. The websites we build for brokers, and what they cost.

Request your concept →

Prefer to talk? WhatsApp me or book 30 minutes in my calendar.