Withholding Tax and Self-Billed E-Invoicing on Overseas AI & SaaS Subscriptions: A 2026 Guide for Malaysian SMEs

If your company pays monthly for ChatGPT, Claude, Canva, Notion, or any other overseas software tool, there are two compliance obligations attached to that subscription that most finance teams only discover after the fact: withholding tax (WHT) and, if your business is already within the e-invoicing mandate, a self-billed e-invoice. Neither is optional, and they're not the same thing. one determines whether tax is owed, the other creates the compliance record LHDN uses to check it.

This guide walks through both obligations in full, including the parts that tend to get missed: the small-value deferment that most consumer-tier SaaS subscriptions actually qualify for, who is and isn't required to self-bill, and how the two obligations connect in practice.

Why "Just a Software Subscription" Becomes a Tax Question

Most Malaysian businesses now run on some combination of overseas SaaS and AI tools: ChatGPT for content or research, Canva for design, Notion for project management, and so on. Used for business purposes, with proper invoices and payment records kept, these subscriptions are generally deductible business expenses. That part is straightforward.

What's less obvious is what happens on the other side of the transaction: because these are payments to non-resident companies, they can fall under Malaysia's withholding tax provisions, specifically, as a payment for the right to use software, which the Inland Revenue Board (LHDN) treats as a royalty under Section 109 of the Income Tax Act 1967.

The 10% Withholding Tax Rate - How It Actually Works

Under Section 109 of the Income Tax Act 1967, royalty payments made to a non-resident are subject to withholding tax of 10% of the gross payment, unless a Double Taxation Agreement (DTA) between Malaysia and the vendor's country of residence sets a different rate. Malaysia has DTAs with roughly 75 countries; some reduce the royalty rate below 10%, but for most major SaaS vendor jurisdictions (the US in particular, where the applicable DTA has limited scope for royalties), the domestic 10% rate applies in practice.

A few mechanics worth knowing:

• Who pays it: The Malaysian company (the payer) is responsible for deducting the 10% and remitting it to LHDN, not the software vendor. You withhold it from the payment, rather than paying it as an additional cost on top.

• Deadline: The withheld amount must be remitted to LHDN within one month of the date the payment was made or credited to the non-resident, using Form CP37 (for royalties).

• Penalty for missing it: Late remittance triggers an automatic 10% penalty on the unpaid amount. More significantly, if withholding tax due on a payment isn't remitted, the underlying expense can be disallowed as a tax deduction entirely under Section 39(1)(j),  meaning a RM1,300/month software spend that isn't properly withheld could become RM15,600/year of non-deductible expense, on top of the penalty.

• DTA claims: To apply a reduced DTA rate instead of the standard 10%, you generally need the vendor's Certificate of Residence from their home tax authority.

Alt text: "Calculator and Malaysian ringgit notes next to a ChatGPT and Canva subscription invoice"

The Small-Value Deferment - What Most SMEs Actually Qualify For

This is the part most business owners haven't heard of, and it changes the practical burden considerably for typical SaaS spend.

LHDN allows a deferment of small-value withholding tax payments where:

1. The withholding tax amount does not exceed RM500 per transaction, and

2. The payment recurs, i.e., the same type of small-value payment happens more than once within the relevant six-month period.

Where both conditions are met, instead of remitting WHT monthly for every single payment, you can batch and remit once every six months, using Forms CP37S or CP37DS instead of the standard CP37/CP37A. The filing deadlines are fixed:

• On or before 30 June, for payments made to the non-resident between 1 December (previous year) and 31 May

• On or before 31 December, for payments made between 1 June and 30 November

This is a deferment, not an exemption, the tax still has to be calculated, withheld, and eventually remitted. But for a typical monthly subscription (a RM500-equivalent WHT threshold covers most consumer-tier SaaS pricing), it removes the need to file every single month.

Self-Billed E-Invoicing for Foreign Vendors

Separately from withholding tax, Malaysia's e-invoicing mandate (administered by LHDN through the MyInvois platform) creates a second obligation for cross-border payments: because overseas vendors like OpenAI, Canva, or Notion don't issue Malaysia-compliant e-invoices, the paying company must generate the invoice itself, a self-billed e-invoice.

When self-billing applies

Self-billed e-invoices aren't a general substitute for "my supplier forgot to send an invoice." They apply only to specific scenarios defined in LHDN's e-Invoice Specific Guideline, and cross-border payments to foreign suppliers who don't use MyInvois is one of them.

The process

1. Receive the foreign vendor's invoice or payment receipt (e.g., a monthly ChatGPT or Canva billing statement)

2. Log into the MyInvois portal (or use API/accounting software integration for higher volumes)

3. Issue a self-billed e-invoice using the vendor's available details, name, registration or passport number, and TIN if they have one (LHDN provides a general TIN for foreign suppliers without a Malaysian TIN), plus your own company's TIN

4. LHDN validates the submission and issues a Unique Identification Number (UIN) as the compliance record

Once validated, you have a 72-hour window to cancel or reject the document if something's wrong; after that, corrections require a credit note, debit note, or refund note instead.

Who actually needs to do this

This is the detail that gets lost when this topic is discussed in general terms: the self-billed e-invoice requirement only applies to businesses that are already within scope of Malaysia's e-invoicing mandate, which is phased by annual turnover:

In other words: if your business turnover is currently under RM1 million, you're not yet required to self-bill your overseas software payments — but you may still owe withholding tax on them, since that obligation isn't tied to the e-invoicing threshold. Once your turnover crosses into a mandatory phase, both obligations apply together.

Alt text: "MyInvois platform login screen on a laptop representing e-invoice submission"

How the Two Obligations Connect

It's worth being precise about this, because they're often treated as one task when they're actually two:

• Withholding tax determines whether tax is owed on the payment, and how much.

• Self-billed e-invoicing creates the audit trail LHDN uses to verify that the transaction happened and that the correct WHT was applied.

Addressing one without the other still leaves exposure. A missing self-billed e-invoice can draw scrutiny even where WHT was correctly paid, and a correctly issued self-billed invoice doesn't substitute for actually remitting the tax. For finance teams managing several overseas software vendors, the practical approach is to treat this as one sequenced workflow, assess WHT, issue the self-billed e-invoice, remit and file, rather than two separate to-do items handled by different people at different times.

Alt text: "Malaysian accountant flagging an error on a compliance checklist"

Common Mistakes SMEs Make

• Assuming free-tier or personal-card subscriptions are exempt. The obligation applies to business-purpose payments made by the company, regardless of which card or platform account was used to pay.

• Treating the RM500 deferment as an exemption. It changes the filing frequency, not whether tax is owed.

• Confusing withholding tax with Digital Service Tax (DST). These are different taxes on different parties, see the FAQ below.

• Not keeping a vendor list with TIN and registration details. When it's time to file, having this on hand for each overseas vendor (OpenAI, Canva, Notion, etc.) saves considerable back-and-forth.

• Only fixing the tax side, not the invoicing side (or vice versa). As above, both need addressing for the transaction to be fully compliant.

Action Checklist for Business Owners

• List out every overseas SaaS/AI vendor your company pays for business use, and note the monthly/annual spend per vendor

• Check whether the WHT on each vendor's typical payment falls at or under RM500 — if so, the biyearly deferment likely applies

• Confirm your company's current e-invoicing phase based on FY2022 (or latest) annual turnover, to know whether self-billing is currently mandatory or voluntary

• Keep invoices, payment records, and (once applicable) self-billed e-invoice UINs organised by vendor

• If you're unsure whether a specific vendor relationship qualifies for a reduced DTA rate, that's worth a direct check with an advisor rather than assuming the standard 10% applies, or that it doesn't

Alt text: "Blackspire Advisory accountant reviewing tax compliance documents with an SME client"

Frequently Asked Questions

1. Is my ChatGPT or Canva subscription tax-deductible in Malaysia? Yes, if used for business purposes and supported by proper invoices and payment records. However, if the associated withholding tax isn't correctly withheld and remitted, LHDN can disallow the deduction entirely.

2. Do I need to pay withholding tax even if the amount is small, like a $20/month subscription? Generally yes, the obligation applies regardless of transaction size. What changes at small amounts is the filing frequency: if the WHT works out to RM500 or less per transaction and recurs more than once in a six-month period, you can defer and batch-file rather than remit monthly.

3. Is withholding tax the same as Digital Service Tax (DST)? No. DST is a separate 8% tax charged by the foreign digital service provider on services supplied to Malaysian consumers, generally already built into the vendor's pricing. Withholding tax is a separate obligation on the Malaysian payer, tied to the nature of the payment (royalty, in this case) rather than the DST regime. It's possible for both to be relevant to the same overall vendor relationship, but they don't offset each other.

4. Do all businesses need to issue a self-billed e-invoice for overseas software payments? Only if your business is already within Malaysia's e-invoicing mandate based on your annual turnover. Businesses under RM1 million annual turnover are currently exempt from the e-invoicing mandate generally, and therefore from the self-billing requirement too, though withholding tax can still apply regardless of turnover.

5. What happens if I get this wrong, is it likely to be flagged? With e-invoicing now giving LHDN a real-time digital record of cross-border transactions for businesses within its scope, mismatches between what was paid, what was withheld, and what was self-billed are easier to detect than in the past. The more common risk in practice isn't a single missed payment being caught immediately, but the compounding cost of a full year of non-deductible expense and penalties once a review does happen.

6. Where can I check the current rate or rules myself? The official source is LHDN's withholding tax page (hasil.gov.my) and the MyInvois e-Invoice Specific Guideline. Both are updated periodically, so it's worth checking directly before filing rather than relying on older references.

Getting This Right Without Slowing Your Team Down

None of this needs to become a monthly headache. Once a company's overseas vendor list, WHT treatment, and e-invoicing phase are mapped out properly, the ongoing process is largely routine, it's the initial setup and the DTA/exemption edge cases that tend to need a second pair of eyes.

If your business is weighing whether the RM500 deferment applies to your current SaaS spend, or you're not sure which e-invoicing phase you're in, our accounting outsourcing team can walk through your specific vendor list with you and set up a system that catches this going forward rather than at year-end.

You might also find our earlier post on Malaysia's government grants and financing schemes useful if you're separately reviewing your company's overall compliance and funding position this year.

Get in touch with Blackspire Advisory for support with withholding tax review, e-invoicing setup, and ongoing accounting compliance.

This article reflects publicly available LHDN and MyInvois guidance as of August 2026. Tax rates, thresholds, and e-invoicing phase dates are subject to change, always confirm current requirements with LHDN or a licensed tax advisor before filing.