Source Verification
Start from the source of truth. Not from a form the merchant filled in.
Every Malaysian company has one authoritative record: SSM e-Info. Kenal AURA resolves a merchant against that record at onboarding and pulls the real company status, directors, shareholders, and registered address. If the declaration doesn't match SSM, you see it before the case is opened.
How it works
Lookup by SSM number
The merchant enters their SSM number. Kenal AURA normalizes both the 12-digit new format and the legacy 1234567-A format, then resolves against the registry.
Populate and compare
The authoritative company profile is pulled: company name, type, status, address, directors, shareholders. Any declaration mismatch against SSM is surfaced immediately.
Gate onboarding on eligibility
Only ACTIVE or EXISTING companies are eligible for onboarding. Dissolved, dormant, or struck-off companies are blocked with a clear reason, not routed to manual review.
SSM Company Details
Registration No.
202301012345
Company Type
Sdn Bhd
Status
Date of Incorporation
2023-01-17
Nature of Business
Grocery retail trade
Share Capital (RM)
100,000
Registered Address
No 18 Jalan Seribu 3, Taman Seribu Jaya, 47000 Sungai Buloh, Selangor
Directors & Officers from SSM
The authoritative registry, not a form field
Merchants mistype, rename, pivot, or lie. SSM e-Info is the single source of truth for Malaysian company records. Pulling it directly at submission means the case starts from the real data, not from whatever was typed into the onboarding form.
Both registration number formats handled
The modern 12-digit format (202301012345) and the legacy hyphenated format (1234567-A) are both normalized and resolved. Merchants registered before the migration still match cleanly, and old references in legacy systems keep working.
The real director list
Directors, secretaries, shareholders, and their share percentages come from SSM, not from a self-declaration field. If the merchant-declared director list differs from the SSM record, the gap is visible on the case. Undisclosed controlling persons stop being invisible.
Status checks block dead companies
Only companies with an ACTIVE or EXISTING status are eligible for onboarding. Dissolved, winding-up, and struck-off companies are rejected at the form, not at month-end audit. The reason is surfaced to the merchant with the exact registry status.
Frequently asked questions
- What happens if the SSM lookup fails?
- A failed lookup is logged and the application is flagged for manual review. The underlying reason (number format invalid, company not found, API unavailable) is surfaced to the analyst. Manual overrides require a reason and are logged in the audit trail.
- Is SSM data cached?
- Profiles are cached with the case for evidence retention and audit. A refreshed lookup can be triggered on demand at periodic re-verification time so director and shareholder changes are caught without waiting for the next incident.
- Does this cover businesses in Sabah and Sarawak?
- SSM registration applies to Peninsular Malaysia. Sabah and Sarawak-registered businesses are onboarded via their state license flow with the same structured registry field capture; the source just differs by state.
- Can an acquirer bring their own SSM integration?
- Yes. The platform supports acquirer-specific SSM endpoints and credentials via configuration, so acquirers with an existing SSM contract or a paid e-Info subscription can wire their own connection. The response schema is normalized to a single profile shape inside the platform.