Email Invoice for Malaysia

Malaysia's e-invoicing regulations are spearheaded by the Inland Revenue Board of Malaysia (IRBM) to enhance tax administration and promote digitalization within the economy. This initiative, mandated under Section 82C of the Income Tax Act 1967, aims to improve tax compliance, boost business efficiency, and reduce the shadow economy by streamlining tax processes and preventing leakages associated with traditional paper invoices. The scope of e-invoicing is comprehensive, covering all types of business transactions: Business-to-Business (B2B), Business-to-Consumer (B2C), and Business-to-Government (B2G). The IRBM's role is central, as it provides the guidelines, the MyInvois portal for submission, and the validation mechanism for all e-invoices. Businesses must adhere strictly to these regulations, as non-compliance can lead to significant penalties, including fines ranging from RM200 to RM20,000 or imprisonment for up to six months, or both.

Malaysian e-invoices require specific mandatory fields and adhere to prescribed formats like XML or JSON to ensure data consistency and interoperability. The IRBM's guidelines stipulate that an e-invoice must contain up to 55 data fields, with 37 of these being mandatory. These fields are crucial for accurately capturing transaction details and facilitating real-time validation by the MyInvois system.

• Supplier Details: Name, Tax Identification Number (TIN), registration number, SST registration number (if applicable), email address, and official address.
• Buyer Details: Name, TIN, registration/identification number, SST registration number (if applicable), email address, and official address.
• Invoice Details: E-invoice type (e.g., invoice, credit note, debit note, refund note), unique invoice number, date and time of issuance, currency code, and currency exchange rate (if applicable).
• Product/Service Information: Detailed description of goods or services, unit price, tax type, tax rate, calculated tax amount, and any tax exemption details.
• Payment Information: Total amount excluding tax, total tax amount, and total amount including tax.

Beyond these fields, the importance of digital elements cannot be overstated. All e-invoices must include a digital signature, which is linked to a digital certificate issued based on the taxpayer's TIN. This signature verifies the sender's identity and ensures the integrity and authenticity of the e-invoice. Additionally, a QR code is embedded in the validated e-invoice, allowing buyers to scan and verify its validity against the IRBM's system.

Sending e-invoices via email in Malaysia requires adherence to specific guidelines to ensure compliance and secure transmission. The core workflow involves the supplier generating an e-invoice and submitting it to the IRBM's MyInvois system for validation. This submission can be done manually through the MyInvois portal or automatically via an Application Programming Interface (API) for higher transaction volumes.

Here's a step-by-step guide:

1. E-Invoice Creation: The supplier creates the e-invoice, ensuring all mandatory fields are accurately completed and the document adheres to the prescribed XML or JSON format.
2. Submission for Validation: The e-invoice is submitted to the IRBM's MyInvois system.
3. Real-time Validation: The IRBM performs near real-time validation. Upon successful validation, the supplier receives a Unique Identifier Number.
4. Notification: The IRBM then notifies both the supplier and the buyer of the validated e-invoice.
5. Sharing with Buyer: The supplier shares the validated e-invoice with the buyer, often in a human-readable format like PDF, which includes the embedded QR code. While email can be a transmission method for this validated document, it's crucial to ensure secure delivery, possibly through encrypted attachments or by providing a secure link to download the e-invoice from a portal.

Common pitfalls to avoid during email transmission include inaccurate invoice data, which can lead to rejection by the IRBM system, and neglecting the importance of digital signatures. Furthermore, businesses must be aware that buyers have a 72-hour window from the time of validation to request a rejection of the e-invoice with valid reasons.

Malaysia's e-invoicing implementation follows a phased approach, starting with large taxpayers and gradually extending to all businesses based on their annual turnover. This staggered rollout is designed to allow businesses sufficient time to adapt to the new system.

The key deadlines and milestones are as follows:

1. Phase 1 (August 1, 2024): Mandatory for taxpayers with an annual turnover or revenue exceeding RM100 million.
2. Phase 2 (January 1, 2025): Applies to taxpayers with an annual turnover or revenue between RM25 million and RM100 million.
3. Phase 3 (July 1, 2025): Encompasses taxpayers with an annual turnover or revenue between RM5 million and RM25 million.
4. Phase 4 (January 1, 2026): Mandatory for taxpayers with an annual turnover or revenue between RM1 million and RM5 million.

Notably, the exemption threshold for mandatory e-invoicing has been raised to RM1 million, meaning businesses with an annual turnover or revenue below this amount are currently exempt. To ease the transition, the IRBM has also granted relaxation periods (grace periods) of six months after each group's mandatory start date, during which penalties for non-compliance will not be imposed, provided reasonable efforts to comply are demonstrated. For Phase 4 businesses, this interim relaxation period has been extended until December 31, 2026.

Businesses in Malaysia must adhere to specific legal requirements for archiving e-invoices, typically retaining them for a period of seven years. This retention period is mandated under the Income Tax Act 1967, which requires taxpayers to keep sufficient records relating to their business or operations income for at least seven years from the end of the year of assessment. These records are crucial for ascertaining chargeable income and tax payable.

E-invoices can be kept in either manual or electronic form. However, if records are maintained electronically, they must be readily convertible into a readable format. All validated e-invoices, which include a Unique Identifier number and QR code, are also stored in the IRBM's database, providing an additional layer of security and accessibility.

• Secure Storage: Utilizing secure cloud storage or robust on-premise solutions with strong access controls and encryption to protect sensitive financial data from unauthorized access or breaches.
• Data Integrity: Implementing measures to ensure the authenticity and integrity of e-invoices throughout their retention period, preventing alteration or corruption.
• Accessibility: Ensuring that archived e-invoices can be easily retrieved and accessed when needed for audits, inquiries, or business operations.
• Regular Backups: Performing regular backups of electronic records to prevent data loss due to system failures or unforeseen events.
• Compliance with Data Protection Regulations: Adhering to broader data protection laws to safeguard personal and business information contained within e-invoices.