Skip to main content

Jomeinvoice

e-Invoice Penalty Malaysia: SME Guide 2026

Failing to issue e-invoices in Malaysia is a criminal offence: fines run from RM200 to RM20,000 per invoice under Section 82C of the Income Tax Act 1967. This guide covers the full penalty structure, when enforcement applies to your business phase, how LHDN detects non-compliance via digital audit trail, the 12-year prosecution window, voluntary disclosure, and a 5-step plan to protect your business before penalties activate in January 2028.
Reading Time: 18 minutes
JomeInvoice banner for e-Invoice Penalty Malaysia SME Guide 2026 showing a warning document inside an envelope and a green penalty fee icon.
🔑Key Takeaways
  • Failing to issue an e-invoice is a criminal offence under Section 82C of the Income Tax Act 1967: RM200 to RM20,000 per offence, up to 6 months imprisonment, or both [Para 120(1)(d), ITA 1967].
  • Each missed transaction is a separate offence, and LHDN can prosecute up to 12 years back under Section 121(1) [Compliance Review Framework, 15 Dec 2025, Section 4].
  • Phase 4 businesses (RM3M to RM5M) are in a relaxation period until 31 December 2027; full penalty enforcement starts 1 January 2028 [e-Invoice Specific Guideline v4.8, Table 16.1].
  • LHDN tracks e-invoicing compliance rates with data analytics: as reported in July 2026, e-Invoice-driven checks had led 52,540 taxpayers to declare RM4.07 billion in additional income, adding RM1.01 billion in tax [New Straits Times, July 2026].
  • Missed e-invoices can be back-filed penalty-free under the SVDP from 7 July 2026 to 31 December 2027 [e-Invoice Specific Guideline v4.8, Section 17].

TL;DR: Failing to issue e-invoices in Malaysia is a criminal offence. Fines run from RM200 to RM20,000 per invoice under Section 82C of the Income Tax Act 1967, with up to 6 months imprisonment. Phase 1–3 businesses (above RM5M revenue) face active enforcement now. Phase 4 businesses (RM3M–RM5M) have until 1 January 2028 before full penalties activate.

Businesses that fail to issue e-invoices in Malaysia face fines of RM200–RM20,000 per offence under Section 82C of the Income Tax Act 1967 (ITA 1967), plus up to 6 months imprisonment. Penalty enforcement for Phase 4 businesses (RM3M–RM5M annual revenue) begins 1 January 2028. In February 2026, the Inland Revenue Board of Malaysia (LHDN, also known as IRBM) identified over 500,000 potential non-compliant cases and RM1.4 billion in unreported income [LHDN statement via Free Malaysia Today, 3 February 2026]: active enforcement for Phases 1–3 is already underway.

This guide covers the full penalty structure, when enforcement applies to your business, how LHDN detects non-compliance, and what you can do right now to protect your business.

What Is the e-Invoice Penalty in Malaysia?

The e-invoice penalty in Malaysia is a financial and criminal sanction imposed on businesses that fail to issue a valid e-invoice for each transaction as required under the national e-invoicing mandate.

Malaysia’s e-invoicing mandate is governed by Section 82C of the Income Tax Act 1967. Under this provision, every mandated business must issue an e-invoice, validated through the MyInvois system at myinvois.hasil.gov.my, for each transaction it conducts. Failure to do so is not a civil matter. It is a criminal offence with defined fines and imprisonment terms.

LHDN does not need to prove intent or deliberate evasion to issue a penalty. The obligation is strict: if you were required to issue an e-invoice and did not, the offence is committed. The only material question is whether enforcement action is triggered.

For a complete overview of Malaysia’s e-invoice system including phases, mandatory fields, and submission methods, see our complete LHDN e-Invoice guide for Malaysian businesses.

Penalty Amounts by Offence Type

Offence Legal Provision Fine Imprisonment Both possible?
Fail to issue a valid e-invoice for each transaction S.82C(1) ITA / Para 120(1)(d) RM200–RM20,000 Up to 6 months Yes
Fail to issue a self-billed e-invoice where required S.82C(6) ITA / Para 120(1)(d) RM200–RM20,000 Up to 6 months Yes
Fail to submit a consolidated e-invoice on time or within required conditions S.82C(7) ITA / Para 120(1)(d) RM200–RM20,000 Up to 6 months Yes
Fail to issue a numbered receipt (pre-existing obligation; revenue >RM150K goods / >RM100K services) Para 82(1)(b) / Para 119A(b) RM300–RM10,000 Up to 1 year Yes

Source: e-Invoice Specific Guideline v4.8 (7 Jul 2026); Compliance Review Framework (15 Dec 2025)

Warning: Each transaction is a separate offence. A business that failed to issue e-invoices for 100 transactions faces 100 separate penalty counts, not one combined fine. LHDN’s review framework covers up to 2 assessment years, meaning accumulated non-compliance creates compounding liability.

Don’t overlook self-billing obligations: Many SME owners focus on whether they are issuing sales invoices and overlook their self-billing obligations. If your business pays agents, dealers, or distributors; purchases services from foreign providers; or handles certain insurance or compensation payments, you are required to issue a self-billed e-invoice on behalf of the other party, even if they never ask for one. Missing this is a separate S.82C(6) offence. See our complete guide to self-billed e-invoices for all applicable scenarios.

Consolidated e-invoices have strict conditions: During the Phase 4 relaxation period (1 January 2026 – 31 December 2027), Phase 4 businesses may use consolidated e-invoices for most transactions. However, any single transaction of RM10,000 or more cannot be consolidated: it requires an individual e-invoice immediately. Misuse of consolidated e-invoicing is a S.82C(7) offence. See our consolidated e-invoice guide for the full rules.

LHDN-Compliant E-Invoicing

Worried about e-invoice penalty exposure before 1 January 2028?

JomeInvoice connects your existing accounting, POS or ERP system to MyInvois and keeps every e-invoice validated with LHDN.

PDPA Compliant  ·  ISO 9001  ·  ISO 20000-1  ·  ISO 27001  ·  MySTI Certified  ·  STI202501062

When Does Enforcement Start for Your Business?

The penalty range is the same regardless of phase, but when LHDN begins actively enforcing it depends on your revenue tier. Critically, the relaxation period is not an amnesty. Non-compliance during relaxation is still an offence; LHDN simply exercises discretion on enforcement during this window. [e-Invoice Specific Guideline v4.8 (7 Jul 2026), Section 16]

Phase Annual Revenue Mandatory Start Relaxation Ends Penalty Enforcement
Phase 1 >RM100 million 1 Aug 2024 31 Jan 2025 Active now
Phase 2 RM25M – RM100M 1 Jan 2025 30 Jun 2025 Active now
Phase 3 RM5M – RM25M 1 Jul 2025 31 Dec 2025 Active now
Phase 4: established RM3M – RM5M 1 Jan 2026 31 Dec 2027 From 1 Jan 2028
New businesses (commenced 2023–2025) RM3M+ (commenced 2023–2025) 1 Jul 2026 31 Dec 2027 From 1 Jan 2028
Below RM3M <RM3M Exempt: with important caveats (see below)

Source: e-Invoice General Guideline v4.8 (30 Aug 2026), §1.5, §1.6.1(e), §1.6.10; e-Invoice Specific Guideline v4.8 (7 Jul 2026), Table 16.1; LHDN FAQs, Q89–Q94 (5 Jan 2026)

The Micro, Small and Medium Enterprise (MSME) Exemption Caveat

Businesses with annual turnover or revenue below RM3 million are generally exempt (the threshold was raised from RM1 million by e-Invoice General Guideline v4.8 on 30 August 2026). However, the exemption does not apply if your business is a subsidiary of a holding company with annual turnover of RM3 million or more, is a related company or joint venture partner of such a company, or has a non-individual shareholder with annual turnover of RM3 million or more. In those cases, the business must comply from 1 July 2026, regardless of its own revenue level.

For the full exemption criteria and how to determine if Phase 4 applies to you, see our MSME e-invoice exemption guide.

How LHDN Detects Non-Compliance

LHDN does not rely on businesses self-reporting failures. Detection is systemic and data-driven.

Digital audit trail: Every validated e-invoice passes through the MyInvois system and is recorded with an IRBM Unique Identifier Number assigned by LHDN. LHDN can cross-reference the volume of e-invoices issued by any business against its declared revenue, purchase records, and third-party data, instantly flagging businesses with unexplained gaps. [e-Invoice Specific Guideline v4.8; Compliance Review Framework (15 Dec 2025), Section 5]

Computer analytics and risk profiling: LHDN selects businesses for compliance review using computer analytics, risk criteria, third-party intelligence, and public complaints. Businesses with unusual patterns (low e-invoice volume relative to declared income, or sudden drops in issuance) surface automatically.

The 12-year prosecution window: LHDN can prosecute e-invoice offences committed up to 12 years before the date of action under Section 121(1) of the ITA. [Compliance Review Framework (15 Dec 2025), Section 4] Non-compliance does not disappear after a year or two: it accumulates.

Enforcement So Far: What LHDN Has Actually Done

LHDN’s e-invoicing compliance rates are policed with data, and its published results show the machinery working. In February 2026, LHDN reported identifying more than 500,000 potential cases of taxpayers displaying high financial capability with no matching tax records; following audit checks and reminders, 17,188 taxpayers filed returns declaring RM1.4 billion in income and contributing RM290 million in tax [LHDN statement via Free Malaysia Today, 3 February 2026]. A single compliance review operation (20 to 24 April 2026) uncovered a further RM3.5 billion in unreported income from 38,906 taxpayers, with RM760.7 million collected [LHDN statement via Free Malaysia Today, 27 April 2026]. As reported in July 2026, the cumulative picture was larger still: 52,540 taxpayers had voluntarily declared RM4.07 billion in additional income as a result of e-Invoice-driven checks, contributing an additional RM1.01 billion in tax revenue [New Straits Times, July 2026].

Reported Taxpayers who came forward Income declared / tax collected Source
February 2026 17,188 RM1.4 billion / RM290 million LHDN statement via Free Malaysia Today, 3 Feb 2026
April 2026 (one operation, 20–24 Apr) 38,906 RM3.5 billion / RM760.7 million LHDN statement via Free Malaysia Today, 27 Apr 2026
July 2026 (cumulative) 52,540 RM4.07 billion / RM1.01 billion New Straits Times, July 2026

For Phase 4 businesses, the relaxation period to 31 December 2027 is not a quiet period for LHDN: every e-invoice you file, or fail to file, before 1 January 2028 feeds the analytics that produced these figures. For how case selection works, see how LHDN uses AI and data analytics in tax audits.

Beyond the Fine: Operational and Reputational Risks

The RM200–RM20,000 fine is the legal floor. The real cost for SME owners typically plays out across three additional dimensions.

Operational Disruption from an LHDN Audit

Under LHDN’s e-Invoice Compliance Review Framework (15 Dec 2025), a triggered audit involves:

  • A 14-calendar-day advance notice before LHDN officers arrive on-site [Compliance Review Framework, Section 6.1]
  • A 1 to 3-day on-site visit (extendable), during which officers can access and download data from your electronic systems [Compliance Review Framework, Section 6.3]
  • Inspection of all sales invoices, purchase invoices, credit notes, debit notes, bank statements, ledgers, and e-invoice records
  • A 90-day resolution window from the start of the review [Compliance Review Framework, Section 6.6]
  • Coverage of up to 2 assessment years per audit [Compliance Review Framework, Section 4]

The cost to your operations (management time, legal fees, accounting hours) can easily exceed the fine itself.

Loss of the RM50,000 Tax Deduction

MSMEs that implement e-invoicing are entitled to claim a tax deduction of up to RM50,000 per year of assessment on consultation fees and qualifying expenditure for e-invoice implementation, available from Year of Assessment 2024 to Year of Assessment 2027. [Budget 2024; LHDN FAQs, Q17, 5 Jan 2026] Non-compliance means losing this deduction while maintaining penalty exposure.

Supply Chain and Buyer Relationship Risk

Phase 1 and Phase 2 companies, large enterprises above RM25 million in revenue, are legally required to receive valid e-invoices from their suppliers for expense claims. Many have already issued vendor notices requiring e-invoice capability as a contract condition. SME suppliers who cannot comply risk delayed payments, removal from approved vendor lists, and loss of long-term contracts.

Financing and Grant Application Risk

Banks and financing institutions increasingly cross-reference e-invoice records as a proxy for business legitimacy. Businesses without clean e-invoice records may find loan approvals and grant eligibility affected as lenders treat structured digital records as a creditworthiness signal.

What Happens During an LHDN Compliance Review?

If your business is selected for a compliance review, here is the process: [Compliance Review Framework (15 Dec 2025), Sections 4–7]

  1. Selection: LHDN’s analytics flag your business based on risk criteria, complaints, or intelligence
  2. Advance notice: You receive written notice 14 calendar days before the site visit
  3. Document request: LHDN requests all sales and purchase invoices, e-invoice records, financial statements, and system access
  4. On-site visit: Officers spend 1–3 days on-site (extendable); they may download electronic records directly
  5. Finding letter: LHDN issues a letter with findings; you have 18 calendar days to object [Compliance Review Framework, Section 6.5]
  6. Resolution: Case must be resolved within 90 days from the start of review
  7. Penalty or clearance: LHDN issues a penalty notice or closes the review
Note: Voluntary disclosure: If you know your business has missed e-invoices, submit a voluntary disclosure to LHDN before a compliance review is triggered. Since 7 July 2026, LHDN also runs the e-Invoice Special Voluntary Disclosure Programme (SVDP) under Section 17 of the Specific Guideline v4.8: missed or erroneous e-invoices can be back-filed as monthly consolidated e-invoices, penalty-free, until 31 December 2027. Submit in writing to the relevant LHDN director, including your tax return (Borang Nyata Cukai Pendapatan (BNCP)), audited accounts, and all records of unreported e-invoices. LHDN retains the right to follow up, but proactive disclosure is the only mechanism available to reduce penalty exposure before an audit begins. [Compliance Review Framework (15 Dec 2025), Section 7]

5 Steps to Protect Your Business Before Enforcement Hits

Phase 4 businesses (RM3M–RM5M revenue) have until 1 January 2028 before full penalty enforcement activates. Use the relaxation period to get compliant, not to delay.

  1. Confirm your phase and start date. Check your FY2022 audited financial statements or tax return to verify your annual revenue and implementation phase. If you are a subsidiary or related company of an RM3M+ group, your start date may be 1 July 2026. See the Phase 4 deadline and SME compliance guide.
  2. Audit your transaction types. Map every transaction your business conducts (sales, purchases from agents or foreign suppliers, platform commissions) and identify which require individual e-invoices, which qualify for consolidation, and which require self-billed e-invoices. Use the e-invoicing compliance checklist as a starting point.
  3. Apply the RM10,000 rule immediately. Any single transaction worth RM10,000 or more must be issued as an individual e-invoice from 1 January 2026: no exceptions during the relaxation period. See the RM10,000 e-invoice rule explainer.
  4. Implement your e-invoicing system. Choose your integration model: the free MyInvois portal for low-volume businesses, direct API integration, or middleware. Most Phase 4 SMEs with existing accounting or Point of Sale (POS) systems will find certified middleware the most practical path to compliance without disrupting existing workflows.
  5. Claim your RM50,000 tax deduction. If you are an MSME implementing e-invoicing, claim the deduction for eligible consultation and implementation costs. This incentive runs until Year of Assessment 2027: do not leave it unclaimed.

How JomeInvoice Helps SMEs Get and Stay Compliant

For SME owners who need to become compliant without rebuilding their finance or operations stack, JomeInvoice is a MyInvois-certified middleware platform that connects your existing business systems (accounting software, Enterprise Resource Planning (ERP), POS, or e-commerce platforms) to the MyInvois system without replacing them.

JomeInvoice handles the full e-invoice lifecycle: generating LHDN-validated e-invoices, managing consolidated invoice submissions within the 7-day deadline, flagging RM10,000-threshold transactions that cannot be consolidated, and maintaining the complete audit trail LHDN inspects during a compliance review.

For businesses concerned about penalty exposure during the transition, JomeInvoice’s compliance team provides direct implementation support, from system audit to go-live, so you enter the enforcement window in January 2028 with a clean record.

JomeInvoice is certified under ISO 9001, ISO 20000-1, ISO 27001, PDPA, and MySTI.

For SMEs: Get started at sme.jomeinvoice.my: self-serve onboarding, no technical team required.
For enterprises and ERP-connected businesses: Book a demo to see how JomeInvoice integrates with your existing systems.

Use the relaxation period to get compliant, not to delay

Phase 4 businesses (RM3M–RM5M revenue) have until 1 January 2028 before full penalty enforcement activates. Use the relaxation period to get compliant, not to delay.

LHDN-Compliant E-Invoicing

Enter the enforcement window with a clean e-invoice record.

JomeInvoice custom-integrates with the systems you already use and maintains the audit trail LHDN inspects. Start self-serve at sme.jomeinvoice.my or book a demo.

PDPA Compliant  ·  ISO 9001  ·  ISO 20000-1  ·  ISO 27001  ·  MySTI Certified  ·  STI202501062
Disclaimer: This article is for general informational purposes only and does not constitute legal or tax advice. LHDN guidelines are subject to updates. Always refer to the latest official LHDN e-Invoice Guidelines at myinvois.hasil.gov.my and consult a qualified tax professional for advice specific to your business.

Frequently Asked Questions

What is the exact penalty for not issuing an e-invoice in Malaysia?

Under Section 82C(1) of the Income Tax Act 1967, the penalty is a fine of RM200 to RM20,000 per invoice, up to 6 months imprisonment, or both. The same range applies to self-billed e-invoice failures (S.82C(6)) and consolidated e-invoice failures (S.82C(7)).

When will LHDN enforce e-invoice penalties for Phase 4 businesses?

Phase 4 businesses (RM3M–RM5M revenue) entered a relaxation period on 1 January 2026 that runs until 31 December 2027, following the April 2026 extension. Full penalty enforcement activates on 1 January 2028. Businesses without e-invoicing in place by that date are fully exposed to the RM200–RM20,000 penalty regime.

Can I go to jail for not issuing an e-invoice?

Yes: up to 6 months imprisonment is provided for under Section 82C / Para 120(1)(d) of the Income Tax Act 1967. In practice, imprisonment is more likely for repeat or wilful offenders; first-time cases typically result in fines. The legal risk escalates with the scale and duration of non-compliance.

Is the RM200–RM20,000 penalty applied per transaction or per audit?

Per offence, and each transaction without a valid e-invoice is a separate offence. A business with 100 uninvoiced transactions faces 100 separate penalty counts. LHDN’s review covers up to 2 assessment years, so accumulated non-compliance creates compounding liability.

What if I issued a late e-invoice — is that also an offence?

Late issuance is a violation, but LHDN’s enforcement focus is on complete failure rather than minor timing delays for businesses making a good-faith effort. However, late issuance patterns will be flagged in a compliance review. Safest practice: issue e-invoices at point of transaction.

Can voluntary disclosure reduce my penalty?

Yes. Businesses that submit voluntary disclosure before a review is triggered are in a materially better position. Disclosure must include your tax return (BNCP), audited accounts, and all unreported e-invoice records. This is the only mechanism available to reduce exposure before an audit begins. [Compliance Review Framework (15 Dec 2025), Section 7]

Can I still be penalised if I use consolidated e-invoices incorrectly?

Yes. Misuse of consolidated e-invoicing is a separate offence under S.82C(7): same RM200–RM20,000 fine. The most common error is consolidating a transaction of RM10,000 or more, which is prohibited from 1 January 2026. If a buyer requests an individual e-invoice within the same calendar month, failing to comply is separately prosecutable.

My revenue is below RM3 million — can LHDN still penalise me?

Generally you are exempt (the threshold rose from RM1 million to RM3 million under e-Invoice General Guideline v4.8, 30 August 2026), but not if your business is a subsidiary, related company, or joint venture partner of an entity with RM3 million or more in annual revenue. Those businesses must comply from 1 July 2026, and the full penalty regime applies from that date.

I did not issue self-billed e-invoices during the relaxation period. What are the consequences?

Issuing none is still a S.82C(6) offence; relaxation only lets you consolidate self-billed e-invoices monthly. Back-file the missing months as consolidated e-invoices under the SVDP (7 July 2026 to 31 December 2027) and no penalty applies. From 1 January 2028, Para 120(1)(d) fines of RM200 to RM20,000 apply. [e-Invoice Specific Guideline v4.8, Sections 16.2(b), 16.3, 17]

Last updated: 30 August 2026 | Written by Yinn Sheng Ng, Head of Marketing

References

To learn more about how JomeInvoice can transform your e-invoicing processes, check out JomeInvoice’s website or book a demo.

Share