CIMB Whistle Blowing Policy

At CIMB, we expect our employees to conduct themselves with a high standard of professionalism and ethics in the conduct of our business and professional activities.


As part of good corporate governance, CIMB have establish a whistle blowing policy that sets out avenues for legitimate concerns to be objectively investigated and addressed. Individuals will be able to raise concerns about illegal, unethical or questionable practices in confidence and without the risk of reprisal.

So, what is whistle blowing?

The whistle blowing may relate to any information pertaining to wrongdoings, malpractices, and/or irregularities as per the following list which is not exhaustive:


  • Any unlawful act, whether criminal or breach in civil law;
  • Breach of policies and/ or procedures;
  • Fraud, corruption, misappropriation or dishonesty;
  • Actions which can cause physical danger/ harm to another person and/or can give rise to risk of damage to properties/ assets;
  • Forgery or alteration of any documents belonging to the company, customers, another financial institution, or agents of the company;
  • Profiteering as a result of insider knowledge;
  • Misuse of position or information; and
  • Any other similar or related irregularities shall be reported.

Who should raise a concern?

Anyone has the right to whistle blow. This whistle blowing policy is applicable to all employees, suppliers, vendors, associated stakeholders and the customers of CIMB. Whilst we do not expect absolute proof of wrong-doing that you report, you will need to provide the reasons or basis for your concern. You can raise your concern with us if you reasonably believe that the information and allegation are substantially true. In addition, you must also make the disclosure in good faith and ensure that the disclosure is not for personal gain or motivated by ill intention.

How to make a disclosure?

We take whistle blowing seriously and your concern matters to us, so we would like to hear from you if any of your disclosure is related to improper practices occurring within CIMB. Please email your concern HERE to and we will investigate the matter.


Alternatively, the Whistleblower may report directly to relevant government or regulatory authorities and enforcement agencies in Malaysia as prescribed by the Whistleblower Protection Act 2010 such as Malaysian Anti-Corruption Commission (MACC), Bank Negara Malaysia (BNM), Police, etc.

How does the Group handle the information provided by you?

After receiving the report of any alleged wrong-doing, it will be investigated by our Group Internal Audit Division and reporting to an Independent Board of Director.


If the outcome results in a proven case of wrongdoing/malpractice and confirms the allegations, disciplinary action shall be instituted against the related employees in accordance with the company’s policy.


CIMB commits to ensure that all disclosed information, including the identity of the complainant shall be treated with strictest confidence.


However, there may be certain circumstances where the identity of the complainant may need to be revealed (e.g. requirement to testify in court). If such a situation arises, the Group shall discuss and seek consent with the complainant prior to proceeding with the case.

Outcomes of the investigation

The whistleblower will be updated on the status of their report and reassurance on follow-up action, provided that, the detail of the whistle blow.