TIN and SSM — the registration spine of MyInvois
Why every Malaysian business needs a Tax Identification Number from LHDN and an SSM company registration before connecting to MyInvois.
Since 1 January 2022, every Malaysian individual, partnership and company is required to hold a Tax Identification Number (TIN) issued by LHDN. The TIN replaces the old income tax reference number and is the universal identifier across MyTax, MyInvois, the EPF/SOCSO payroll systems and SST registration. Alongside the TIN, every limited liability company, limited liability partnership and registered business must be incorporated or registered with the Companies Commission of Malaysia (Suruhanjaya Syarikat Malaysia, SSM). On MyInvois the supplier TIN, the buyer TIN and the SSM company number are all mandatory header fields — without them the invoice cannot be validated by LHDN.
- TIN: mandatory for all taxpayers since 1 January 2022 (Finance Act 2021).
- Format: C followed by 10 digits and a 2-digit branch suffix for companies.
- SSM: Companies Commission of Malaysia, federal incorporation registry.
- MyInvois requires supplier TIN, buyer TIN and SSM registration number.
How it works
Register your business with SSM under the Companies Act 2016 (for Sdn Bhd companies), the Limited Liability Partnerships Act 2012 (for LLPs), or the Registration of Businesses Act 1956 (for sole proprietors and partnerships). SSM issues a registration number such as 202301012345 for a Sdn Bhd or a SA / IP / ROBO reference for other entity types. The registration is the legal foundation for opening a bank account and applying for the TIN.
Apply for the TIN through LHDN's e-Daftar portal once SSM registration is complete. Companies receive a TIN with prefix C followed by 10 digits and an optional 2-digit branch suffix (for example C 1234567890 02). Sole proprietors receive an SG (resident individual) or OG (operator) prefix; partnerships receive D. The TIN must be quoted on every tax filing and every MyInvois transmission.
Activate MyTax and link your TIN to the MyInvois portal. The director or authorised representative logs in with MyKad (Malaysian national ID) credentials through MyDigital ID, accepts the e-invoicing terms and registers the company as a MyInvois taxpayer. From this point onwards the company can issue and receive validated e-invoices through portal entry or API.
Maintain accurate SSM details. Any change of company name, registered address, shareholding above 5% or directors must be lodged with SSM within 14 days under Section 58 of the Companies Act 2016. SSM data flows automatically to LHDN once per night, so out-of-date SSM filings cause MyInvois rejection when the supplier or buyer profile mismatches.
Validate buyer TINs before issuing invoices. The MyInvois API exposes a TIN lookup endpoint that returns whether a given TIN exists, is active and matches the supplied SSM number. 4invoices automatically validates every customer TIN at the moment the invoice draft is saved, so rejection at LHDN submission is avoided.
Legal framework
- Companies Act 2016 (Act 777).
- Income Tax Act 1967, Section 66A — TIN obligation.
- Finance Act 2021 — universal TIN from 2022.
- Limited Liability Partnerships Act 2012 (Act 743).
Frequently asked questions
What is the TIN format in Malaysia?
The TIN consists of a one or two letter prefix followed by a 10-digit number, with an optional 2-digit branch code. C 1234567890 is a Sdn Bhd company. SG 1234567890 is a salaried resident individual. OG is a sole proprietor (operator), D is a partnership, LE is a limited liability partnership and TA is a trust body. The prefix tells LHDN which set of return forms applies.
Do I need both a TIN and an SSM number on every invoice?
Yes. The MyInvois schema requires the supplier's TIN, the supplier's SSM business registration number, the buyer's TIN (or a generic buyer TIN for B2C transactions below the consolidated invoicing threshold) and the buyer's SSM number when the buyer is a registered business. Missing either field results in a schema validation error and the invoice is not issued a UIN.
How long does TIN registration take?
Through e-Daftar most TINs are issued within 3 to 5 working days for companies and within 1 working day for individuals using MyDigital ID. SSM company incorporation through MyCoID takes 1 to 3 working days for a standard Sdn Bhd. Plan to register both before connecting to MyInvois — the early phases of the mandate had grace periods for missing TINs but the final phase from July 2026 will be strictly enforced.
Can foreign businesses obtain a Malaysian TIN?
Yes, foreign companies with Malaysian source income or a permanent establishment in Malaysia must register with LHDN for a TIN. Foreign suppliers selling digital services to Malaysian consumers also need a Service Tax on Digital Services (STDS) registration which assigns a separate F prefix TIN. For pure cross-border B2B without a Malaysian PE, the foreign supplier does not need a TIN but the Malaysian importer self-accounts through reverse charge.
How does TIN integrate with MyInvois rejection rules?
LHDN runs three TIN checks at submission: existence (the TIN must be active in the LHDN register), category match (the prefix must match the entity type declared in the SSM record) and SSM consistency (the SSM number on the invoice must match the SSM number linked to that TIN). Any mismatch is returned as error code TIN-001 to TIN-005. 4invoices runs the same checks client-side so issues are caught before submission.