LHDN e-Invoicing for Malaysian SMEs: A Practical Compliance Guide

On 1 January 2026, the LHDN (Lembaga Hasil Dalam Negeri Malaysia, the Inland Revenue Board) brought Malaysian small and medium businesses into mandatory e-Invoicing. If your company's annual turnover is up to RM5 million, you are now in scope, and the legal duty to issue validated e-invoices through the MyInvois system has already started.

This guide gives you the current e-invoicing Malaysia SME rules as they actually stand in 2026: the live rollout phases, the RM1 million exemption, the penalty-free relaxation window, and a clear action list to get compliant without panic.

It also connects e-invoicing to something most compliance checklists ignore: your wider business risk. Tighter digital record-keeping changes your exposure, and that has implications for how you protect the business.

This guide covers:

• The current LHDN e-Invoicing rollout phases and turnover thresholds
• The RM1 million exemption and the cancelled final phase
• The relaxation period (now extended to end-2027) and when real enforcement begins
• The RM10,000 rule and consolidated invoices
• A step-by-step SME compliance checklist
• Penalties for getting it wrong
• How e-invoicing reshapes your business risk profile

What is LHDN e-Invoicing, in plain terms

An e-Invoice is a digital invoice that LHDN validates in near real time before it becomes a legally valid tax document. It is not a PDF emailed to a customer. It is a structured data file submitted to LHDN's MyInvois system, validated, and returned with a unique identifier and a QR code.

The model is sometimes called a "clearance" model. The tax authority sits in the middle of the transaction, checking each invoice against its rules engine at the point of issue. Malaysia's programme is run by LHDN under the Income Tax Act 1967.

You can issue e-invoices two ways: manually through the free MyInvois Portal, or automatically through accounting or billing software connected to MyInvois via API.

Term	What it means for your SME
MyInvois Portal	LHDN's free web portal for creating and submitting e-invoices manually. Suits low invoice volumes.
API integration	Your billing or accounting software talks directly to MyInvois. Suits higher volumes and automated workflows.
Validation	LHDN checks each invoice against its schema in near real time and either accepts or rejects it.
TIN	Tax Identification Number. Both your TIN and the buyer's TIN are required fields on most e-invoices.
Consolidated e-Invoice	A single batched e-invoice covering many small transactions over a period, allowed in certain situations.

The current e-Invoicing Malaysia rollout phases (2026)

LHDN rolled out e-invoicing in phases based on annual turnover or revenue. The thresholds use a business's FY2022 figures as the reference point. As of 2026, the timeline below reflects LHDN's official position, last updated on 7 December 2025.

Phase	Annual turnover / revenue	Mandatory from
Phase 1	More than RM100 million	1 August 2024
Phase 2	More than RM25 million and up to RM100 million	1 January 2025
Phase 3	More than RM5 million and up to RM25 million	1 July 2025
Phase 4	Up to RM5 million	1 January 2026
Exempt	Less than RM1,000,000	Not required

If you run a typical Malaysian SME, professional services firm, agency, retailer, or F&B group, you almost certainly fall into Phase 4 or the exemption band. The dividing line is RM1 million in annual turnover.

The RM1 million exemption and the cancelled final phase

Here's the part that changed late in 2025. The government raised the permanent exemption threshold from RM500,000 to RM1,000,000 in annual turnover, effective 1 January 2026. Businesses below RM1 million are now exempt from the e-invoicing mandate.

At the same time, the previously planned final implementation phase for the smallest businesses, those below RM1 million, was effectively removed. So if your turnover sits under RM1 million, there is currently no obligation for you to issue e-invoices.

That exemption is a relief, but it is not a reason to ignore the system. Buyers can still request an e-invoice, and your turnover can grow past the line. More on that below.

The relaxation period: when enforcement actually bites

Phase 4 is mandatory from 1 January 2026. But LHDN built in a transition cushion, and in April 2026 it extended that cushion by a further year. For Phase 4 businesses, the interim relaxation period now runs from 1 January 2026 to 31 December 2027. It was originally due to end on 31 December 2026.

During the relaxation period, LHDN has confirmed it will not impose penalties under Section 120 of the Income Tax Act 1967 for non-compliance, provided you make a reasonable effort. You also get flexibility, such as the ability to issue consolidated e-invoices for most transactions and more relaxed product or service descriptions.

Full enforcement for Phase 4 begins on 1 January 2028. That is the date the penalty-free grace ends. The extension was confirmed in LHDN's e-Invoice Specific Guideline version 4.7, issued on 20 April 2026.

The RM10,000 rule you can't relax your way around

One rule sits outside the relaxation flexibility, and SMEs miss it constantly. Since 1 January 2026, any single transaction of RM10,000 or more requires its own individual validated e-invoice. It cannot be bundled into a monthly consolidated e-invoice.

The threshold applies to the value of a single transaction, not your monthly total with a customer and not several smaller invoices added together. If one invoice hits RM10,000, it needs to be issued individually.

There is also a buyer-request rule. If a buyer asks for an e-invoice, you must issue one regardless of the transaction value, even if it sits below RM10,000.

Situation	Individual e-invoice required?
Single transaction of RM10,000 or more	Yes, always. Cannot be consolidated.
Buyer specifically requests an e-invoice	Yes, regardless of value.
Many small consumer sales, no buyer request	Can be batched into a consolidated e-invoice.

Who needs to act now

You should be moving on e-invoicing if any of these describe your business.

• Your turnover is RM1 million to RM5 million. You are in Phase 4. The mandate already applies to you.
• You're close to RM1 million and growing. Crossing the line pulls you into scope. Build the capability before you're forced to.
• Your customers are larger companies. Phase 1 to 3 businesses already need e-invoices, and they will request them from you as a supplier.
• You issue high-value invoices. If single transactions regularly exceed RM10,000, the individual e-invoice rule applies even during relaxation.
• You're a professional services firm or agency. Consultants, accountants, legal firms, IT companies, and marketing agencies routinely issue invoices above RM10,000.

If your turnover is genuinely below RM1 million and no buyer requests an e-invoice, you can wait. But keep an eye on growth and on what your customers ask for.

Your SME e-invoicing compliance checklist

Getting compliant is a project, not a switch you flip. The data preparation usually takes the longest. Work through these steps in order.

Step	What to do
1. Confirm your phase	Check your annual turnover against the thresholds. Confirm whether you are in Phase 4 or exempt.
2. Register on MyInvois	Set up your company profile on the MyInvois Portal and confirm your TIN details are correct.
3. Clean your customer data	Collect and verify buyer TINs. Use LHDN's TIN verification tool to cut rejections.
4. Map your MSIC codes	Assign the correct industry classification codes to your products and services.
5. Choose portal or API	Low volume can use the portal. Higher volume needs accounting software integrated with MyInvois.
6. Run a test batch	Issue test e-invoices, fix rejections, and confirm validation works before going live for real.
7. Train your team	Make sure finance and sales staff know the RM10,000 rule and the buyer-request rule.
8. Document your process	Write down who issues, who checks, and how rejections are handled. This protects you at enforcement.

What happens if you don't comply

Once the relaxation period ends, failure to issue an e-invoice is an offence under Section 120(1)(d) of the Income Tax Act 1967. The penalty on conviction is a fine of not less than RM200 and not more than RM20,000, or imprisonment not exceeding 6 months, or both, for each instance of non-compliance.

The phrase that matters is "for each instance." The law treats each non-compliant invoice as a separate offence, so exposure scales with your invoice volume. In practice, LHDN has signalled it will enforce proportionately, but the legal exposure is real.

Beyond fines, there is a commercial cost. If a customer in an earlier phase needs an e-invoice to claim a tax deduction and you can't provide one, you become the supplier who creates friction. That is a quiet way to lose business.

Where e-invoicing meets your business risk

E-invoicing is a tax compliance change, but it reshapes your risk profile in ways that overlap directly with insurance. The shift to structured digital records and API connections is worth thinking through.

You now hold more sensitive data in more systems

Validated e-invoices, TINs, and customer details flow through your accounting software and, in many cases, third-party integrators. That widens your digital footprint and your cyber exposure. A breach of your billing system now touches verified tax data, not just contact details.

It also intersects with data protection law. If your e-invoicing systems are compromised and personal data is exposed, Malaysia's PDPA breach-notification duties can be triggered, with a 72-hour clock to notify the regulator. Our PDPA Malaysia amendments guide explains how those obligations work.

Business interruption gets more digital

If your software goes down or MyInvois validation is disrupted, you may be unable to issue valid invoices, which means you may be unable to get paid on time. That is a continuity risk worth mapping into your broader business resilience planning.

e-Invoicing change	Risk it raises	Where insurance can help
More data in billing systems and integrators	Cyber breach exposing tax and customer data	Cyber insurance: breach response, data restoration, liability
Software dependency for issuing invoices	Downtime that stops you billing and collecting	Cyber business interruption cover where applicable
Personal data exposed in a system breach	PDPA breach-notification duty and potential penalties	Cyber insurance supporting breach notification and response

None of this means e-invoicing is dangerous. It means your business is becoming more digital and more data-rich, and your protection should keep pace. Our SME insurance guide walks through how the pieces fit together, and you can read more on the cybersecurity insurance page.

Common mistakes SMEs make with e-invoicing

• Treating relaxation as exemption. The mandate is live. Only the penalty is paused for Phase 4 through 2026.
• Ignoring buyer TIN data until go-live. Invalid or missing TINs are the most common rejection. Clean this early.
• Forgetting the RM10,000 rule. It applies during relaxation and cannot be bypassed with a consolidated invoice.
• Assuming the portal is enough. If you issue more than a couple of dozen invoices a month, manual portal entry becomes unsustainable.
• Overlooking the new data risk. More digital tax data means more cyber and PDPA exposure, not less.

FAQ

Do SMEs have to comply with e-invoicing in Malaysia?

Yes, if your annual turnover is RM1 million or more. Phase 4 of LHDN's e-Invoicing rollout, covering businesses with turnover up to RM5 million, became mandatory on 1 January 2026. Businesses with turnover below RM1 million are currently exempt, though they must still issue an e-invoice if a buyer requests one.

What is the turnover threshold for e-invoicing exemption in Malaysia?

Businesses with annual turnover or revenue of less than RM1,000,000 are exempt. The government raised this permanent exemption from RM500,000 to RM1 million effective 1 January 2026, and cancelled the previously planned Phase 5 for the RM150,000 to RM500,000 band.

When does e-invoicing enforcement start for SMEs?

The Phase 4 mandate started 1 January 2026, but the penalty-free relaxation period was extended to 31 December 2027. Full enforcement, including penalties under the Income Tax Act 1967, now begins 1 January 2028. Use the runway through 2027 to build and test your process.

What is the RM10,000 e-invoice rule?

Any single transaction of RM10,000 or more must be issued as its own individual validated e-invoice and cannot be bundled into a consolidated e-invoice. This rule has applied since 1 January 2026 and is not suspended by the relaxation period.

What are the penalties for not issuing an e-invoice?

Failure to issue an e-invoice is an offence under Section 120(1)(d) of the Income Tax Act 1967, carrying a fine of RM200 to RM20,000, imprisonment up to 6 months, or both, per instance of non-compliance. Penalties apply once the relaxation period ends.

Do I use the MyInvois Portal or API integration?

Use the free MyInvois Portal for low invoice volumes. For higher volumes, connect your accounting or billing software to MyInvois via API. Many SMEs that issue more than 20 to 30 invoices a month find manual portal entry impractical and move to integrated software.

How does e-invoicing affect my business risk?

E-invoicing concentrates more sensitive tax and customer data in your digital systems and third-party integrators, which raises your cyber and data-protection exposure. A breach of your billing system can trigger PDPA notification duties. Reviewing your cyber insurance and continuity planning alongside e-invoicing is sensible.

Contingent Conclusion

E-invoicing is now a live obligation for Malaysian SMEs above RM1 million in turnover, and you have until the end of 2027 to get the process right before penalties begin in 2028.

The same shift that digitises your invoicing also digitises your risk, putting more sensitive data into systems that can be breached and creating new continuity dependencies that deserve protection.

Contingent helps Malaysian businesses find the right coverage for their specific risks. Whether you're comparing options or need a second opinion on existing cover, our team can help.

Get a quote · or WhatsApp us directly

Disclaimer: This article provides general guidance based on publicly available regulatory information as of June 2026. Regulations may be amended. Always verify current requirements with the relevant authority, including LHDN's latest e-Invoice guidelines, or qualified professionals before making compliance decisions.