A structural shift is underway in global financial services, and Malaysia now has a defined timeline to act on it. Open finance – the customer-permissioned sharing of data across banks, insurers, lenders, and investment platforms through standardised APIs – is moving rapidly from policy ambition to operational reality. The Asia-Pacific open banking market alone is projected to reach USD 29.4 billion by 2030, growing at a 29.4% CAGR from 2025 to 2030. The global fintech market is expected to hit USD 1.5 trillion in revenues by the end of the decade. 

This is not a speculative trend. The European Union is advancing its financial data access regulation, while the United Kingdom, Australia, Brazil, and India have launched national open finance programmes. The common thread: regulators are giving consumers control over their financial data, and the institutions that adapt fastest will capture disproportionate value. 

ASEAN is not far behind 

Singapore’s SGFinDex platform has already enabled open financing for citizens, giving them access to consolidated financial data from banks, insurers, and SGX Central Depository. Indonesia has developed its National Open API Payment Standard (SNAP),  and Thailand is currently building its rails for open finance. Cross-border payment corridors through Project Nexus and national QR payment systems operating in Malaysia, Singapore, Thailand, Indonesia, Vietnam, Laos, Cambodia, and the Philippines are laying transactional rails that open finance data layers will eventually ride on. 

For a region where more than 70% of the adult population still lacks formal credit histories, open finance represents more than convenience. It is the infrastructure through which alternative data – transaction patterns, e-wallet activity, payment behaviour – can unlock access to credit, insurance, and wealth management that conventional documentation alone cannot provide. 

Malaysia’s countdown has begun 

In November 2025, the country’s central bank released its Exposure Draft on Open Finance, proposing a foundational regulatory framework. The technical platform is being developed in collaboration with seven banks and the Employees Provident Fund (EPF). Larger banks with more than one million individual customers will kick off this initiative from 1 January 2027, followed by smaller banks from 1 January 2028, and development finance institutions and e-money issuers from 1 January 2029 onwards. 

Malaysia’s central bank governor has framed the imperative clearly - emphasising the need for a future-ready financial system built on secure digital identity and data-sharing frameworks, robust data governance, and a regulatory foundation that enables inclusive, responsible, and trusted innovation. Malaysia already ranks second globally in QR payment adoption after China - a platform the country can build on. 

The economic stakes 

An estimated USD 21.4 billion micro, small, and medium enterprise (MSME) financing gap exists in Malaysia - businesses that are viable and revenue-generating but lack the traditional collateral or credit history to secure bank loans. Open finance offers a practical mechanism to close that gap: an SME owner authorises real-time data sharing with a lender through APIs, and the lender assesses live revenue, and payment flows to deliver a financing decision in minutes rather than weeks. 

Four implementation risks institutions underestimate 

The first is cybersecurity exposure. Open finance expands the attack surface significantly. Every new API connection, every third-party data consumer, and every consent flow introduces potential vulnerability points that must be secured end-to-end. 

The second is liability complexity. When data breaches span multiple parties - the data holder, the data recipient, and the consent intermediary - liability questions become difficult to resolve. Institutions need clear contractual and technical frameworks before incidents occur, not after. 

The third is operational readiness. API infrastructure, consent management systems, and data governance capabilities are foundational prerequisites. Many institutions have not yet scoped the work required to build or procure these capabilities within the regulatory timeline. 

The fourth is strategic underestimation. Treating open finance as a compliance checkbox rather than a business model opportunity would be a costly misjudgement. Institutions that build only for minimum compliance will find themselves outpaced by competitors and new entrants that use open data to personalise products, accelerate decisioning, and deepen customer relationships. 

These risks are intertwined: an institution without robust API infrastructure cannot manage consent securely, and one that cannot manage consent exposes itself to liability across every data-sharing arrangement. The organisations that come through will be those that address all four together. 

Why experience matters 

For Malaysia’s technology providers, the opportunity is to fill this readiness gap. Companies with deep regulatory technology expertise, API-driven platforms hosted in wholly owned local data centres, and existing banking infrastructure relationships are well positioned to support financial institutions through the transition. 

Finexus, a Malaysian FinTech company that has served over 100 banks and FinTech companies across regulatory reporting, payment processing, and Software as a Service (SaaS) solutions for over 25 years, is among those actively exploring the open finance space - particularly in areas such as consent management and secure data orchestration. 

The road to 2027 and beyond 

Open finance is arriving on a defined timeline. The regulatory framework is expected to be finalised by Q4 2026. The institutions, technology partners, and ecosystem players that begin preparing now will be the ones that shape what Malaysian financial services look like in 2027 and beyond. 

Those that wait may find the market has already moved without them. 

  

This article is brought to you by Finexus Group, a Malaysia-based, engineering-first Software as a Service (SaaS) infrastructure and FinTech company providing bank-grade technology solutions to over 100 banks and financial institutions across ASEAN. Learn more at https://www.finexusgroup.com/