Home  ›  Resources  ›  Getting approved  ›  The documents every SME loan application needs, and why each one matters
Getting approved

The documents every SME loan application needs, and why each one matters

Every document a Malaysian bank asks for, the question each one answers, and the four failures that cost applications the most time.

9 min readUpdated 21 September 2026Reviewed by Steven Law

A Malaysian bank’s SME document list reads like administration. It is not. Every item answers a question a credit officer has to answer in writing, and knowing which is which is the difference between a file that moves and one that generates three rounds of queries.

SSM and constitutional documents

These establish who the company is and who controls it. Under the Companies Act 2016 the pack normally includes the notice of registration SSM issues on incorporation, which replaced Form 9; the section 58 notification of change in the register of directors, managers and secretaries, formerly Form 49; the section 78 return of allotment of shares, formerly Form 24; and the notification of the registered office address, formerly Form 44. Banks still use the old numbers in conversation.

The constitution goes in where one has been adopted. A company registered under the Companies Act 2016 is not required to have one; a company incorporated before 2017 still has a memorandum and articles of association, which serves as its constitution. Most banks also want an SSM company profile printout dated within the maximum age of the SSM search each bank accepts.

Checked for: whether the shareholding on paper matches what the directors describe; whether directors or shareholders changed recently and why; whether the constitution restricts borrowing or requires a members’ resolution before security is granted; and, where a scheme depends on it, the Bumiputera equity position.

Audited accounts

Usually the last two or three sets, signed, with the notes attached. The notes are the point: a profit and loss statement alone says very little.

Checked for: the revenue trend across the sets rather than the latest figure; whether gross margin is stable, because a margin that moves several points needs a reason; the auditor’s report itself, since a qualified opinion or any reference to going concern is read before anything else; related party transactions; directors’ remuneration and the director’s loan account; contingent liabilities, including guarantees given for other companies; and the ageing of trade receivables.

Management accounts

These bridge the gap between the last audited year end and the present. No bank assesses a company on year-old information when newer information exists, and it always does.

Checked for: whether the period runs to a recent month end; whether the figures reconcile to the bank statements for the same period; whether margin is consistent with the audited set; and whether the accounts were prepared or simply exported from the software. A set with a large suspense account, or last year’s closing balances not brought forward, says more about the company’s controls than its performance.

Bank statements for every operating account

Six months, all accounts, in the bank’s own format. This is the part of the pack carrying the most weight, and what your bank statements tell a credit officer sets it out in full.

Checked for: returned instruments, excesses over existing limits, the pattern of month-end balances, round-sum movement, and whether credit turnover matches the revenue the accounts claim.

Directors’ identification and personal financial position

MyKad front and back for each director and substantial shareholder, and passport with the relevant pass for foreign directors. Banks ask for personal information because the directors are part of the credit.

That means each director’s personal income tax return and e-filing acknowledgement, a statement of personal assets and liabilities, and sometimes personal bank statements. CCRIS is pulled on every director regardless. Where personal guarantees are involved, which for Malaysian SME lending is close to standard, the guarantor’s position is assessed on its own terms.

Checked for: total personal commitments and the room left; guarantees already given elsewhere, which appear nowhere in the applicant’s accounts; and whether anything in the personal record contradicts the company file.

Tax filings

The company’s Form C with the tax computation, the CP204 estimate and any revision, and evidence that instalments have been paid. SST returns where the company is registered.

Checked for: whether revenue declared to LHDN matches revenue in the audited accounts, because a gap between those two figures cannot be talked away; and whether there is an outstanding balance with LHDN, which ranks as a claim on the company’s cash ahead of the bank.

A note on the purpose of funds

One page, written by the applicant. How much is being asked for, what it is for, over what period, and how it is repaid out of the business rather than out of a future facility.

This is frequently the only document the applicant wrote, and it is read closely for that reason. It is also where a mismatch between the request and the actual need shows up, which is one of the six reasons in why banks decline SME applications.

Checked for: whether the amount is supported by a quotation, contract, purchase order or working capital calculation; whether the tenure matches the life of what is funded; and whether repayment comes from the business’s own cash generation.

Aged debtor and creditor listings

Required where the facility sits against receivables, so for invoice financing, factoring and most working capital lines. Usually as at the most recent month end, and needing to agree to the management accounts.

Checked for: concentration, meaning whether one debtor is most of the book; how much has aged past 90 days; whether the largest debtor is a related party; and whether suppliers are being stretched, because a creditor listing that has lengthened over the year is a cash flow signal the accounts alone will not show.

Where files usually fall apart

Four failures account for most of the delay, and none is about the company being unbankable.

Management accounts that do not reconcile to the bank statements

The most damaging of the four. Where the management accounts show revenue for a period and the statements show materially less coming in, the officer has two versions of the same six months and no basis for choosing. The explanation is often innocent: cash sales banked elsewhere, a contra arrangement with a supplier, receipts collected by a related company. Innocent or not, if it is not in the file the management accounts stop being usable.

An audited set more than six months old with nothing to bridge the gap

Once the most recent audited set is well behind the present and no management accounts have been supplied, the bank is lending against a picture of a company that may no longer exist. The usual response is not a decline but a query, and a query costs weeks.

A director’s loan account nobody explained

It appears in the notes and is almost never addressed in the covering material. Both directions raise a question. Money owed by the company to a director may be genuine funding, in which case the bank wants to know whether it stays in place and will often ask for it to be subordinated. Money owed by a director to the company is drawings not declared as income, and the officer treats it as cash that has left the business. One paragraph and a movement schedule closes it. Silence does not.

A pack submitted in pieces

Sending documents as they are found, over two or three weeks, is the most avoidable of the four. Most banks will not begin a serious assessment until the file is complete, so the clock does not start with the first email, and partial sets tend to arrive with different period end dates.

The pack is not the point, the consistency is

Every document is read against the others. The accounts against the statements, the statements against the payroll, the tax computation against the accounts, the debtor listing against the balance sheet. A complete pack where three of those disagree is weaker than a thinner pack where all of them hold. The useful exercise before submission is not counting documents. It is checking that they tell one story.

What happens after the pack goes in

Queries, almost always, and they are not a bad sign. An officer asking questions is an officer writing the paper. How long an assessment takes varies by bank, by facility and by whether a guarantee scheme is involved, and banks generally indicate the indicative assessment timeline each bank quotes, in weeks. Having a pack read for the inconsistencies above is a conversation worth having before it goes in.

Common questions

What documents do I need for an SME loan in Malaysia?

The standard pack is the company’s SSM documents and constitution, the last two or three sets of audited accounts, management accounts to a recent month end, six months of bank statements for every operating account, director identification with personal financial information, company tax filings including Form C and CP204, and a short note explaining the purpose of the funds.

Aged debtor and creditor listings are added where the facility sits against receivables. Banks vary at the margins, so the list a particular bank issues is the one to work from.

What replaced Form 24 and Form 49 under the Companies Act 2016?

Form 24, the return of allotment of shares, became the section 78 return. Form 49, the particulars of directors, managers and secretaries, became the section 58 notification of change in that register. Banks and company secretaries still use the old form numbers in conversation, and either version is normally accepted for its period.

How recent do management accounts have to be?

Recent enough to close the gap between the last audited year end and the present. Where the audited set is more than six months old and nothing bridges it, the bank is assessing a picture that may have changed, and the usual result is a round of queries rather than an answer.

Management accounts are most useful when they run to a recent month end and reconcile to the bank statements for the same period.

Can I apply for business financing without audited accounts?

Some facilities and some guarantee-backed schemes are structured for companies without a full audited history, and the requirement varies by bank and by product. Where audited accounts are not available, banks lean harder on the bank statements, tax filings and management accounts, which means the consistency between those three carries more weight than usual.

Where this leaves you

If you want to work out what this means for your own application rather than in general, that is what the first conversation is for. It costs nothing and we will tell you if the answer is that you are not ready.

Related reading

Written in-house by SMEBox. Last reviewed 21 September 2026 by Steven Law. See our editorial approach, which explains how these guides are researched, reviewed and corrected.