Is an Electronic Signature Legally Valid in Malaysia? (2026)

The short answer is yes. In Malaysia an electronic signature is legally valid and can create a binding contract for most commercial and everyday documents. Malaysia is unusual in having two separate laws that touch signatures, so the practical question is which one applies to what you are signing. This page explains both laws, the difference between an ordinary electronic signature and a digital signature, the documents that are excluded, and how to keep a signature defensible. It is general information, not legal advice. ## The two laws behind Malaysian e-signatures Malaysia has two relevant statutes: - The Electronic Commerce Act 2006, which gives legal recognition to electronic messages and ordinary electronic signatures in commercial transactions. It is technology-neutral and based on functional equivalence.

• The Digital Signature Act 1997, which creates a licensed public key infrastructure for digital signatures, overseen by the regulator, with licensed certification authorities issuing certificates. An ordinary electronic signature under the 2006 Act is the usual route for everyday contracts. A digital signature under the 1997 Act is a specific, certificate-based form that carries stronger assurance and is used where higher trust is needed. <!-- [VERIFY] confirm the current sections of the Electronic Commerce Act 2006 and the Digital Signature Act 1997 before relying on specific numbers. --> ## The reliability test under the Electronic Commerce Act Under the Electronic Commerce Act 2006, where a signature is required, that requirement is met by an electronic signature that is attached to or logically associated with the message, adequately identifies the person and their approval of the information, and is as reliable as appropriate for the purpose, given all the circumstances. The parties must also consent to using electronic signatures. This means ordinary electronic signatures, such as a typed name, a signature drawn on screen, or a click to agree, are generally sufficient for most commercial contracts when both sides clearly intend to sign. ## Digital signatures under the Digital Signature Act A digital signature under the 1997 Act is created using a key pair and a certificate issued by a licensed certification authority. It binds the signature to a verified identity and allows any change to the document to be detected. A digital signature verified against a valid certificate carries strong evidential weight and is useful for high-value, regulated, or government-facing transactions. The practical point for most businesses is that the two laws are not in conflict. The 2006 Act gives you a broad, flexible route for everyday commercial signing, and the 1997 Act gives you a stronger, certificate-based route when a specific transaction or counterparty demands more assurance. Pick the route that matches the document in front of you rather than assuming one method fits everything. ## What is excluded The Electronic Commerce Act 2006 does not apply to certain documents and transactions, set out in its schedule. These commonly include: - Wills and codicils.
• Trusts.
• Powers of attorney.
• Negotiable instruments. For these, traditional signing and the relevant formalities continue to apply. <!-- [VERIFY] confirm the current schedule of excluded matters under the Electronic Commerce Act 2006 before relying on them. --> ## When you should take extra care Even where electronic signatures are valid, take care with: - Wills, trusts, powers of attorney, and negotiable instruments, which are excluded.
• Documents that must be witnessed, stamped, or notarised, where the formality must still be met.
• Land dealings, which can have their own execution and registration rules.
• Documents used abroad, which may need to satisfy another country's standard. ## When a digital signature is worth it Consider a digital signature under the 1997 Act, backed by a licensed certificate, when the value or risk is high, when you need strong proof of identity, when a regulator or government body expects it, or when you want the certainty of a verified certificate. For routine commercial contracts where intent is clear, an ordinary electronic signature under the 2006 Act is usually enough. ## How to keep a Malaysian e-signature defensible To make an electronic signature easy to defend, capture the signer's intent and consent clearly, use a platform that records an audit trail with time stamps and identity data, check that the document is not in the excluded schedule, use a digital signature where the stakes or the counterparty require it, lock the document after signing so any change is detectable, and store the signed version safely. ## Keeping the signed document safe afterwards Signing is only the first step. Once a contract is signed it still has to be stored, tracked, and renewed, and a signed PDF left in an inbox is easy to lose. Drafting, review, e-signing and e-stamping, tracking, and governance can live in one AI workspace tuned to your company and built on Claude, with public per-seat pricing and a 7-day free trial. Adira brings these together and is India-first while aiming to be global-capable, so e-stamp and jurisdiction depth vary by region and are worth confirming during the trial, and the single-pane Command Centre is on the roadmap. See how it works. The guidance above stands on its own. ## Bottom line In Malaysia, electronic signatures are legally valid for most contracts. An ordinary electronic signature under the Electronic Commerce Act 2006 works for most agreements when it identifies the signer, shows their intent, is reliable for the purpose, and the parties consent. A digital signature under the Digital Signature Act 1997 adds certificate-based assurance for high-value or regulated dealings. Wills, trusts, powers of attorney, and negotiable instruments are excluded and still need traditional signing. For those, and for anything used abroad, confirm the current rules before you rely on an electronic signature.