Muchen Corporate Services 沐宸企业服务
How CTPD obligations under Malaysia's TP Rules 2023 and MTPG 2024 expose SMEs with related-party transactions above RM1 million to penalties of up to RM100,000 per year of assessment — and how to fix it before LHDN asks.26 April 2026

Transfer Pricing Documentation for SMEs: The Silent Penalty Trap Hiding in Your Director Loans and Management Fees

If your Sdn Bhd pays a management fee to a related company, charges interest on a director loan, or buys goods and services from a sister entity — and the tota…

If your Sdn Bhd pays a management fee to a related company, charges interest on a director loan, or buys goods and services from a sister entity — and the total of those transactions tops RM1 million in a year — LHDN expects you to have a written file proving you priced it right. If you don't have that file, the penalty starts at RM20,000 per year of assessment. Over a standard six-year audit window, that is RM120,000 in penalties before LHDN even touches your tax figures.

Most SME directors have never heard of Contemporaneous Transfer Pricing Documentation. Many assume it is a multinational-corporation problem. It is not. It is a Sdn Bhd problem, and it has been a legal obligation since Year of Assessment 2023.


What "Transfer Pricing" Actually Means for Your Business

Transfer pricing is simply the price you charge when one related entity sells something to another related entity. A product, a service, a loan, a brand licence — anything that moves value between parties who have a relationship.

When unrelated parties trade, the market sets a fair price. When related parties trade, they can set whatever price they like — which creates an obvious opportunity to shift income or inflate deductions. Tax authorities everywhere have rules to prevent this. Malaysia's rule is Section 140A of the Income Tax Act 1967, which requires that all transactions between associated persons be priced at arm's length: the same price an independent party would have agreed under comparable circumstances.

This is not new. What changed from YA 2023 is the documentation obligation. Previously, LHDN could challenge pricing but proving you had done the analysis was loosely governed. Now, the Income Tax (Transfer Pricing) Rules 2023 (P.U.(A) 165/2023) require that a Contemporaneous Transfer Pricing Documentation pack be completed no later than the date your Form C is due. If LHDN asks for it, you have 14 days to hand it over. Not 14 weeks. Fourteen calendar days.

And the Malaysia Transfer Pricing Guidelines 2024 (MTPG 2024), issued on 24 December 2024 and applicable retrospectively from YA 2023, set the content standard that documentation must meet. A spreadsheet of intercompany invoices does not qualify.


Who Counts as "Related"?

Section 140A captures a wide net. Associated persons include:

  • A company and any shareholder who controls it (directly or indirectly)
  • A company and its directors
  • Two companies under common control (e.g. you own both)
  • A company and a family member of a controlling director or shareholder
  • A holding company and its subsidiaries
  • Any arrangement where one person has the power to direct the affairs of another

In practice, this means: if your operating Sdn Bhd pays a management fee to a holding company you also own, that is a controlled transaction. If you extend a loan to your own company as director, the interest rate (or lack of one) is a controlled transaction. If your manufacturing entity buys raw materials from your trading entity because you set it up that way — controlled transaction.

The question is not whether you intended to shift profits. The question is whether a fair market price was applied and whether you can prove it.


The RM1 Million Threshold: When CTPD Is Required

Here is the relief that most SMEs do not know about — and the trap that catches them anyway.

If the aggregate of all your controlled transactions in a YA is RM1 million or less, you are exempt from preparing CTPD. Note: aggregate, not per-transaction. If you pay RM600,000 in management fees and receive RM500,000 in intercompany services, your aggregate is RM1.1 million and the exemption is gone.

Domestic controlled transactions by individuals and partnerships also carry separate exemptions. But an operating Sdn Bhd with any meaningful intercompany activity — a management fee, shared office costs, a director loan above a few hundred thousand ringgit — will typically cross RM1 million without realising it.

If you are above the threshold and do not have CTPD: you are already exposed.


The Four Most Common SME Transfer Pricing Exposures

1. Director loans without arm's-length interest

A director advances RM500,000 to the company (or the company advances it to the director). No interest is charged, or a nominal 0% rate is set because "it is my own company." Under s.140A, LHDN can deem a market rate of interest and either add interest income to the lender or disallow the deduction on the borrower. No documentation means no defence.

2. Intercompany management fees

Holding company charges operating subsidiary a management fee for "strategic advisory services" or "shared management resources." Fee is set at a round number — RM10,000/month, say — with no benchmarking, no functional analysis, no service agreement that specifies what is actually delivered. LHDN's question: what would an independent party pay for the same services? If you cannot answer it with data, you cannot defend the deduction.

3. Group purchasing and shared services

One entity procures goods or services on behalf of the group and on-charges at cost-plus. The markup (or absence of one) is a transfer price. If the aggregate crosses RM1 million and there is no documentation of the cost allocation methodology, every recharge is at risk.

4. IP licensing and brand royalties

Less common in early-stage SMEs but increasingly present as brands mature — a holding company owns the trademark and charges a royalty to operating entities for brand use. Royalty rates need benchmarking. An arbitrary 2% or 5% without comparable data is a red flag in any TP audit.


The Legal Map

Four instruments govern your exposure. You do not need to memorise them, but you need to know they exist and what each one does:


The Penalty Math: A Worked Example

Let us make this concrete.

A Sdn Bhd pays RM200,000 per year in management fees to its holding company — a round number set five years ago, never benchmarked, documented only by a single-page service agreement. The company has been filing Form C without CTPD since YA 2023.

LHDN opens a TP audit covering YA 2023 to YA 2026 (four years). They issue a written request for CTPD. The company has no file. It cannot produce one within 14 days.

s.113B penalty: RM20,000 (minimum) x 4 YAs = RM80,000

LHDN determines arm's length for the management services is RM130,000/year (not RM200,000). Excess fee: RM70,000/year x 4 years = RM280,000 of disallowed deductions.

Additional tax liability: RM280,000 x 24% corporate tax rate = RM67,200

5% TP surcharge on adjustment: RM280,000 x 5% = RM14,000

s.113 understatement penalty (if LHDN pursues): up to 100% of tax shortfall = up to RM67,200

Total potential exposure: RM228,400+ on a management fee arrangement that did not look aggressive on its face. The director probably assumed the accountant handled it. The accountant prepared the tax return. Nobody prepared the CTPD.

Extend the audit window to six YAs — the standard limit. The s.113B component alone reaches RM120,000.


What CTPD Actually Looks Like

A compliant Contemporaneous Transfer Pricing Documentation pack under MTPG 2024 is not a form you fill in. It is a substantive analysis document. A local file for an SME typically covers:

  • Business overview — industry context, competitive environment, group structure
  • Functional analysis — who performs what functions, owns what assets, bears what risks in each controlled transaction
  • Controlled transaction details — description, quantum, contractual terms, payment flows
  • Transfer pricing method selection — why you chose CUP, TNMM, or another OECD method for each transaction type
  • Benchmarking study — comparable uncontrolled transactions or companies used to establish the arm's length range
  • Conclusion — why the actual price falls within the arm's length range

For a Sdn Bhd with two or three types of controlled transactions, a competent CTPD pack runs 30 to 80 pages. It is a meaningful piece of professional work — not something a finance executive assembles over a weekend from accounting records.


Five Mistakes SMEs Make with Transfer Pricing

1. "We are too small for TP."

If your aggregate controlled transactions exceed RM1 million, you are in scope. Period. TP is not a size gate — it is a transaction threshold.

2. Preparing CTPD after the Form C deadline.

If you prepare your documentation after the date Form C was due, s.113B applies automatically — even if the documentation is technically perfect. Contemporaneous means completed before or on the filing deadline, not in response to an audit letter.

3. Round-number management fees with no benchmarking.

RM10,000/month does not become arm's length because it is a tidy number. If you cannot point to a benchmarking study that supports the rate, the fee is indefensible under audit.

4. Director loans at zero (or nominal) interest.

Zero percent is not arm's length unless a bank would lend at zero percent to an unrelated party in the same circumstances. LHDN can impute a market rate and tax the deemed interest income.

5. Assuming a generalist tax agent covers it.

A firm that prepares your Form C and your management accounts does not automatically prepare CTPD. Transfer pricing documentation is a specialist work product requiring benchmarking tools and functional analysis methodology. Most general-practice accounting firms in Malaysia do not produce it. Ask directly: "Do you prepare a CTPD local file for our related-party transactions?" If the answer is uncertain, you probably do not have one.


Your 30-Day CTPD Action Plan

If your Sdn Bhd has related-party transactions and you are not sure whether CTPD is in place, here is where to start.

Days 1 to 7: Transaction inventory.

Pull all intercompany invoices, loan agreements, and shared-cost arrangements for the current and prior YAs. Total the aggregate controlled transaction value per YA. If any YA exceeds RM1 million, flag it.

Days 8 to 15: Engage a TP-capable advisor.

Brief them on the transaction types, amounts, and counterparties. Gather supporting financial data — service agreements, loan documentation, management accounts, group structure charts.

Days 16 to 25: Functional analysis and benchmarking.

Your advisor conducts the functional analysis for each transaction type and runs the benchmarking study against comparable transactions or companies.

Days 26 to 30: Compile the local file.

Draft, review, and sign off the CTPD pack. Lock it for the current YA and address any prior YAs where CTPD was absent. Back-filling does not remove s.113B exposure for past years, but it limits forward risk and demonstrates good-faith compliance.

Ideally, this process runs before your Form C deadline — not after you receive an audit letter.


How Muchen Can Help

Muchen runs the related-party transaction inventory, identifies your CTPD exposure across prior and current YAs, and prepares a contemporaneous documentation pack that meets TP Rules 2023 and MTPG 2024 standards. We typically scope a TP file in two to three weeks for SMEs in the RM1 million to RM10 million related-party transaction range.

If you are not sure whether your business is in scope, start with a conversation. The exposure review costs nothing. The penalty for not knowing can cost RM20,000 a year — and counting.

Reach out to Muchen Corp Services at hello@muchen.my or via our website to schedule a transfer pricing exposure review.

Always confirm specific tax positions with your engaged tax agent or legal counsel before acting. The penalty thresholds and statutory references in this article are drawn from legislation and guidelines current as of April 2026.


References

Need a real-world hand?

Our MAICSA-credentialled team replies within one business day — WhatsApp is fastest.