Bank Negara Malaysia (BNM) announced on 24 June 2026 that it had imposed an Administrative Monetary Penalty of RM520,000 on AEON Credit Service (M) Berhad for breaches of targeted financial sanctions requirements.
Read the official BNM announcement.
According to BNM, AEON Credit was required as a reporting institution to reject a potential customer when there was a positive match against individuals or entities listed in Malaysia’s Domestic List or the United Nations Security Council Resolutions (UNSCR) List. It was also required to freeze the customer’s funds after determining that the customer was a specified entity.
BNM said the breaches were identified during an on-site supervisory examination. A specified entity listed under the Domestic List had been onboarded as a customer, despite being a positive match. BNM also found a delay in freezing the customer’s account after confirmation that the customer was a specified entity.
Why this matters
This enforcement action is not simply about whether screening was available. The issue identified by BNM was a failure to act properly on a positive match and a delay in freezing the account once the customer was confirmed as a specified entity.
That makes the case especially relevant for compliance teams. Sanctions compliance is not just a data problem. It also depends on clear procedures, staff awareness, escalation steps, documented review and timely action when a possible or confirmed match is found.
Practical takeaways for reporting institutions and compliance teams
For organisations subject to AML/CFT and targeted financial sanctions requirements, the AEON Credit case highlights several practical points:
- screen customers and counterparties before onboarding;
- include relevant domestic sanctions lists and UN sanctions lists in the screening process;
- treat positive or potential matches as operational events requiring review and escalation;
- document the decision made and the reason for that decision;
- ensure staff understand the procedure, not just the existence of the screening tool;
- review existing customers over time, because sanctions status can change after onboarding.
Kyboa perspective
Kyboa includes screening coverage for Malaysia’s Domestic List and United Nations sanctions lists, alongside broader sanctions, PEP, watchlist, adverse media and web checks.
However, this enforcement action also shows the limit of technology alone. A screening platform can help identify a match, generate evidence and support a structured review workflow. The organisation still needs to make sure that staff are trained, SOPs are clear, and confirmed matches are acted on in line with its legal and regulatory obligations.
For teams that do not yet have a structured screening process in place, this is another reminder that regional regulators are continuing to enforce AML/CFT and targeted financial sanctions requirements. Having no practical screening process is increasingly difficult to justify. But having a tool is only the starting point: the process must also be followed.
