Malaysia’s digital payments ecosystem continues to expand at an unprecedented pace, yet scale alone does not equate to strength. In 2025, the country recorded 18.4 billion e-payment transactions, reflecting a 25 per cent year-on-year increase, with Malaysians conducting an average of 538 digital transactions each. DuitNow QR volumes have also doubled to three billion, supported by nearly three million merchant touchpoints across the country.
While these figures demonstrate strong adoption, they also raise a more pressing question for the industry: whether trust is keeping pace as digital transactions become increasingly embedded in daily life. Reported fraud losses reached RM2.2 billion in 2025, highlighting the growing risks within an increasingly digital ecosystem. In the first quarter of the year alone, online fraud cases rose to 12,110, with total losses amounting to RM573 million. Although digital payments continue to grow rapidly, these figures reflect a parallel reality in which confidence in the system is being tested in real time. This marks an important inflection point, where the focus must now shift from driving adoption at scale to strengthening trust and assurance at every stage of the transaction journey.
Trust in payments is often discussed in broad terms, but for businesses on the ground it is built on three core elements: visibility, control, and protection. Visibility allows merchants to track the status of transactions in real time, while control provides certainty over fund settlements, enabling better cash flow management. Protection offers reassurance that businesses are safeguarded when unexpected issues arise. When any of these elements is weakened, trust can quickly deteriorate, especially for smaller businesses operating with limited margins.
In practice, most payment issues do not occur at scale but at the edges of the system, where processes are fragmented and operational gaps are more likely to appear. For micro, small and medium enterprises (MSMEs), a delayed settlement or disputed transaction is not a minor disruption but one that directly affects daily operations.
Bank Negara Malaysia has already acknowledged this shift in focus. The priority is no longer solely on expanding digital payments, but also on preserving trust within the ecosystem. Frameworks such as the Shared Electronic Fraud and Theft policy promote shared accountability between financial institutions and users, while infrastructure enhancements such as RENTAS+ and the adoption of ISO 20022 standards improve transparency and system resilience. However, regulation alone is not sufficient to build trust; it must be reinforced through consistent, real-world experiences at the merchant level.
Malaysia’s 1.2 million MSMEs sit at the centre of this transition. Unlike large enterprises, they often lack extensive financial systems or dedicated risk management teams. Their exposure is immediate, and their tolerance for disruption is low. For these businesses, trust is not defined by policy or technical standards, but by whether payments are received as expected, whether transactions are transparent, and whether digitalisation simplifies rather than complicates operations. This is where the industry must move beyond enabling access and focus on delivering assurance.
From an operational standpoint, addressing this gap requires rethinking the purpose of payment infrastructure. Direct connectivity to national payment rails is not merely a technical improvement. It removes intermediary layers, enabling faster access to funds and greater visibility over cash flow. This is not just about speed, but about certainty, which is essential for business stability.
Similarly, consolidating multiple payment methods into a single platform or device goes beyond convenience. It reduces fragmentation, minimises operational risk, and ensures consistency in transaction outcomes. Unified terminals that support QR, card, and alternative payment methods within a single controlled environment reflect this approach. These are deliberate design choices aligned with how merchants operate, rather than how payment systems have traditionally been structured.
Trust must also extend beyond transactions to address broader business risks. Many MSMEs remain underinsured, often due to the complexity or perceived disconnect between traditional insurance products and daily operations. Embedding protection directly into payment infrastructure provides a more practical solution, where coverage such as business interruption, liability, and asset protection becomes part of the tools merchants already use. By integrating these safeguards into the payment experience, barriers to adoption are reduced while businesses are better protected against unforeseen disruptions. This reflects a broader shift in fintech, where value is created not only through functionality, but through relevance and integration into real business needs.
Paydibs, for instance, has partnered with Great Eastern General Insurance to embed business protection directly into its payment terminals. Coverage for fire and flood damage, cash-in-transit loss, employer liability, and business disruption is bundled with the terminal merchants already use to accept digital payments. The principle is clear: businesses should not have to choose between digital growth and operational protection, as both should be inherently built in.
Eighteen billion transactions in a single year is a significant milestone, and Malaysia has clearly demonstrated its ability to achieve digital payment scale. Bank Negara Malaysia’s priorities for 2026, which emphasise stronger fraud prevention, cross-sector collaboration, and inclusive adoption, further reinforce trust as a foundational pillar for continued progress.
In this environment, differentiation will no longer be defined by transaction volume or processing speed alone. It will be shaped by the ability to deliver systems that are resilient, transparent, and purpose-built to support businesses through both growth and uncertainty. Digitalisation accelerates when businesses have confidence in the systems they rely on, and that confidence is earned through consistent performance, clear visibility, and meaningful protection.
