Skip to content
  • About
  • Accolades
  • Practices
    • Capital Markets
    • China Desk
    • Corporate Services
    • Corporate, Commercial & Civil Litigation
    • Employment & Industrial Relations
    • Environmental, Social, and Governance (ESG)
    • FinTech
    • Funds, Private Equity & Emerging Technologies
    • India Desk
    • International Arbitration
    • International Trade
    • Maritime & Shipping
    • Mergers & Acquisitions
    • Probate, Wills & Estate
    • Real Estate & Construction
    • Regulatory & Compliance
    • Restructuring & Insolvency
    • Tax
    • Vietnam Desk
    • White Collar Crime & Criminal
    View all
    Capital Markets
    China Desk
    Corporate Services
    Corporate, Commercial & Civil Litigation
    Employment & Industrial Relations
    Environmental, Social, and Governance (ESG)
    FinTech
    Funds, Private Equity & Emerging Technologies
    India Desk
    International Arbitration
    International Trade
    Maritime & Shipping
    Mergers & Acquisitions
    Probate, Wills & Estate
    Real Estate & Construction
    Regulatory & Compliance
    Restructuring & Insolvency
    Tax
    Vietnam Desk
    White Collar Crime & Criminal
  • People
  • Careers
  • Insights
  • Countries
    Offices
    • Singapore
    • Thailand
    • Malaysia
    • Australia
    Regional Desks
    • China
    • India
    • Vietnam
Enquiries
Understanding Breach of Trust Crimes in Malaysia
  • Blog
  • | 7 September 2026

Understanding Breach of Trust Crimes in Malaysia

Criminal breach of trust in Malaysia is the dishonest misuse of property or funds that someone was entrusted to manage, and it’s governed by Sections 405 to 409 of the Penal Code. The base offence under Section 405 is punished under Section 406 with up to ten years imprisonment plus a fine and whipping, while aggravated versions involving public servants, bankers, or agents in a fiduciary position carry sentences of two to twenty years under Section 409. A conviction requires proof of three things: that the accused was entrusted with the property, that they had dishonest intention, and that they breached a legal duty tied to that entrustment.

Breach of trust cases show up constantly in Malaysian business disputes, an employee siphoning funds, a director diverting client deposits, a business partner quietly moving company money into a personal account. TSL Legal Malaysia handles matters in this space, and the framework below covers how the offence is defined, what makes it worse, and what actually needs to be proven.

What Legally Counts As Criminal Breach Of Trust In Malaysia

The offence is defined broadly on purpose. Section 405 of the Penal Code covers anyone who, being entrusted with property or dominion over property either alone or jointly with another person, dishonestly misappropriates or converts that property to their own use, or dishonestly disposes of it in violation of a legal duty or contract governing how the trust was to be discharged. The key word doing the work here is dishonestly. A poor business decision or a mismanaged account isn’t criminal breach of trust on its own, the prosecution has to show the person knew what they were doing was wrong and did it anyway. Conviction requires proof of three elements: entrustment, dishonest intention, and breach of a legal duty.

What Are The Penalties For Criminal Breach Of Trust In Malaysia

Sentencing depends heavily on who committed the offence and in what capacity. Under Section 406, the base offence of criminal breach of trust is punished with imprisonment for a term not exceeding ten years, together with whipping and a fine. The penalties escalate sharply for people in positions of greater trust. Under Section 409, someone who commits criminal breach of trust in their capacity as a public servant or agent faces imprisonment of not less than two years and not more than twenty years, along with whipping and a fine. That gap, roughly ten years at the base level versus up to twenty for a public servant or agent, reflects a deliberate legislative choice to punish abuse of institutional trust more harshly than an ordinary breach.

Courts also weigh the value of the property misappropriated, the closeness of the trust relationship between offender and victim, and whether the offender has prior convictions when deciding where within that range a sentence should fall.

Can A Company Be Held Liable For Criminal Breach Of Trust

Yes, though the mechanics are less direct than for an individual. Section 11 of the Penal Code defines person to include any company or association or body of persons, whether incorporated or not, but corporate liability for criminal breach of trust can only be established by attributing the conduct of the company’s officers to the corporation itself. In practice this means prosecutors go after the individual director or officer who actually carried out the misappropriation, and the company’s liability flows from that individual’s actions rather than existing independently. This is one reason internal controls and clear authorisation chains matter so much for businesses, since blurred responsibility makes both the crime easier to commit and the eventual liability harder to pin down.

How Do Businesses In Malaysia Prevent Criminal Breach Of Trust

Most breach of trust cases inside companies trace back to the same root cause: unclear ownership of who approves what. Preventing criminal breach of trust starts with proper documentation, clear authorisation, and internal financial controls in the workplace, and simple controls such as requiring dual authorisation for payments and separating the duties of approval, recording, and reconciliation can reduce the risk significantly. Regular audits catch problems early rather than after years of accumulated loss, and access to financial systems should be limited to staff who actually need it and removed the moment that need ends.

  • Require dual authorisation for payments above a set threshold.
  • Separate the duties of approval, recording, and reconciliation.
  • Schedule regular internal and external audits.
  • Limit financial system access to authorised staff only, and revoke it promptly on role change.

None of these measures are complicated, which is exactly why their absence is so often the actual cause when a case surfaces.

What Should You Do If You Suspect Breach Of Trust In Your Business

The instinct to confront the suspected individual directly is usually the wrong first move, since it risks destroying or altering records before they can be secured. If evidence shows misappropriation, a report should be lodged under Sections 405 to 409 of the Penal Code, supported by documents showing entrustment and misuse, and a lawyer can advise on disciplinary steps, termination procedures, or a parallel civil claim to recover the losses. Criminal and civil routes aren’t mutually exclusive here. A police report addresses the criminal offence, while a separate civil claim can be the faster path to actually recovering the misappropriated funds.

Why Choose TSL Malaysia?

TSL Legal Malaysia advises businesses on both preventing criminal breach of trust internally and pursuing recovery once it’s happened, working the criminal and civil tracks in parallel where that makes sense. The firm’s familiarity with how these cases actually get investigated and prosecuted helps clients understand realistic timelines and outcomes rather than guesswork. That dual track approach is often what gets misappropriated funds back faster than a criminal report alone.

Conclusion

Criminal breach of trust cases inside a business are rarely simple, and untangling what happened usually matters as much as proving intent once the matter reaches a courtroom. Businesses that act on early warning signs, rather than waiting for a full picture to emerge, generally recover more and lose less.

Contact TSL Malaysia today if you suspect misappropriation within your business or need to respond to an accusation.

Legal Update (1)
  • Legal Update
  • | 15 September 2026

When First-to-File is Not Enough to Protect Your Brand Before Entering Thailand

For businesses entering a new market, trademark protection can appear straightforward: file first, obtain registration and the brand is protected. (...)

More Insights
Find Us
  • Singapore

PDLegal LLC Singapore
1 Coleman Street 

#08-02 The Adelphi 

Singapore 179803

Tel: +65 6220 0325
Email: enquiry@pdlegal.com.sg

  • Thailand

PDLegal Asia (Thailand) Co., Ltd.
6th Floor, 6 O-NES Tower,
Sukhumvit Soi 6,
Khlong Toey, Bangkok 10110

Tel: +66 2 254 6415
Email: Thailand@pdlegal.com.sg

  • Malaysia

Tan, Siew & Lee (TSL Legal)
9-1, Level 9,
Wisma UOA Damansara II,
No. 6, Jalan Changkat Semantan,
Damansara Heights,
50490 Kuala Lumpur

Tel: +603 3009 7825
Email: enquiries@tsl-legal.com

  • Australia
PDLegal Australia
Level 3, Suite 12
58 Pitt Street
Sydney NSW 2000

Tel: +61 2 7813 7619
Email: enquiry@pdlegal.au

Offices
  • Singapore
  • Thailand
  • Malaysia
  • Australia
Regional Desks
  • China
  • India
  • Vietnam
Follow Us

PDLegal Asia (Thailand) Co., Ltd. is a limited company registered in Thailand. © All rights reserved 2026.

  • Privacy policy
  • Cookie Policy
Cookies on our website

We use cookies on our site to remember you, show you content we think you will like and help you to use this site. For more details, please see our cookies policy.

Click ‘Accept’ to consent to cookies other than strictly necessary cookies or ‘Reject’ if you do not. You can change your mind at any time by visiting our cookie policy page.

Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
  • About
  • Accolades
  • Practices
    • Capital Markets
    • China Desk
    • Corporate Services
    • Corporate, Commercial & Civil Litigation
    • Employment & Industrial Relations
    • Environmental, Social, and Governance (ESG)
    • FinTech
    • Funds, Private Equity & Emerging Technologies
    • India Desk
    • International Arbitration
    • International Trade
    • Maritime & Shipping
    • Mergers & Acquisitions
    • Probate, Wills & Estate
    • Real Estate & Construction
    • Regulatory & Compliance
    • Restructuring & Insolvency
    • Tax
    • Vietnam Desk
    • White Collar Crime & Criminal
    View all
  • People
  • Careers
  • Insights
  • Countries
    Offices
    • Singapore
    • Thailand
    • Malaysia
    • Australia
    Regional Desks
    • China
    • India
    • Vietnam
Enquiries