Your Business Runs on Numbers. Do You Trust Them?
Every week, you make decisions based on what your books tell you. Whether to hire, whether to expand, whether to take that new contract. Now imagine discovering that the numbers you were given were not the real numbers. That the “profit” was an illusion. That the company was technically paying out more than it earned.
That is not a hypothetical scenario from a corporate finance textbook. It happened to Lembaga Tabung Haji (TH), an institution managing RM91.747 billion for 9.55 million depositors. When the Royal Commission of Inquiry (RCI) report was finally declassified and released this year, the details revealed a pattern of mismanagement that every Malaysian business owner should study — because the failure mode here is not unique to government-linked giants. It can happen in a 10-person company too.
TL;DR: The Tabung Haji RCI report found “creative accounting” was used to declare dividends when TH’s liabilities actually exceeded its assets, resulting in a RM1.4 billion hidden loss in 2017. For your business, the lesson is simple: clean, automated financial tracking is not bureaucracy — it’s survival. If you rely on manual spreadsheets and “adjustments,” you are running exactly the same risk, just at a smaller scale.
What This Means
Let’s translate the RCI findings into plain language. TH was paying out dividends (hibah) to depositors from 2014 to 2017 using numbers that did not reflect reality. The RCI said TH used estimated asset values and tweaked when to reduce asset values due to impairment losses, just so the books would justify paying high dividends. In 2017, TH actually made a RM1.4 billion net loss — but its financial statement recorded a RM3.4 billion net profit. The gap between those two numbers is the danger zone.
When a business uses “estimated values” and flexible accounting treatments, it is not necessarily committing fraud — yet. But it is building a house on sand. The RCI’s report is essentially a very detailed, 252-page case study of how an organisation can drift from “optimistic assumptions” into “systematic misreporting” without anyone in the room realising how bad it had become.
The consequences were severe. The government had to step in with a RM19.9 billion bailout through Urusharta Jamaah Sdn Bhd, buying assets valued at RM9.7 billion. TH could only pay a 1.25% dividend in 2018 before slowly recovering to 3.5% in 2025 — the highest in eight years. The fallout took years to fix.
How This Applies to Malaysian SMEs
You might read this and think: “That’s a huge institution with complex financial instruments. My business is nothing like that.” But the mechanics are identical. The core failures were: recording transactions based on expectation rather than fact, paying out bonuses and distributions when liabilities exceeded assets, and having no independent checks on the numbers. In a small business, all three happen far more easily — because there is usually no one checking the boss’s numbers.
Consider the typical Malaysian SME. You have a main bank account, a part-time accountant (or a cousin who “does accounts”), and a spreadsheet you update when you remember. The e-invoice mandate from LHDN is pushing many owners toward digital records, but plenty are still doing manual data entry. Now think about how your monthly “profit” is calculated. If you rely on your bank balance or a quick glance at revenue, you are missing the full picture — exactly like TH relying on estimated asset values instead of audited financial statements. The RCI explicitly found TH used “other methods” for 2014 to 2017 rather than waiting for audited figures.
Here is a concrete scenario: a Malaysian F&B owner with three outlets. Business looks great; revenue is climbing every month. The owner approves performance bonuses for outlet managers based on sales. But the business is renting storage space, carrying perishable inventory that spoils, and paying overtime that is not tracked. Liabilities are quietly climbing. That was TH’s situation in 2016 and 2017 — liabilities exceeded assets, but because the reported numbers looked good, high hibah and hefty employee bonuses continued. The RCI also flagged unauthorised bonuses totalling RM1.14 million at TH’s property subsidiary — bonuses given without proper approval. In an SME, who approves your bonuses? Often the same person who wants to receive them.
The RCI noted that TH’s high dividend payments pre-2018 were not backed by actual profits, which eroded its reserves. For an SME, the equivalent is drawing out owner’s drawings and bonuses when the company is technically insolvent. It is very common: a business seems profitable, the owner takes cash out, and then the company cannot pay its supplier invoices. The RCI found TH’s liabilities exceeded its assets in 2016 and 2017 — meaning it was technically insolvent, but still distributing money to depositors and staff.
This is where automation becomes more than a convenience. When financial processes are manual, numbers depend on memory, honest estimation, and discipline. When they are automated — through tools that track expenses, invoices, payroll, and inventory in real time — you cannot “estimate” your way into a false profit. The system forces you to see reality. That is the single biggest protection against the TH pattern.
“The gap between what you report and what is real is where businesses die. The RCI report shows what happens when no one closes that gap for years.”
Practical Takeaways for Your Business
- Let software do the counting. Use automated accounting tools to record every transaction as it happens, not a spreadsheet you reconcile once a month.
- Reconcile liabilities weekly, not annually. TH’s problem was not one bad year; it was years of growing liabilities hidden by creative reporting. Know what you owe suppliers, staff, and LHDN this week.
- Separate “cash in the bank” from “profit.” A customer order is not a payment. Authorise bonuses and payouts only from realised profit, not from projected revenue.
- Create a second pair of eyes. An external accountant or a scheduled review with a finance person catches the “adjustments” that nobody questions.
- Automate payroll and approval flows. The unauthorised bonuses at TH’s subsidiary happened because controls were not enforced. Digital approval workflows ensure every extra payout has a record.
- Keep accounting standards consistent. When you are tempted to use “revised” estimates to make the month look better, that is the exact red flag the RCI described.
The Numbers Behind the Story
| Indicator | What the RCI found | Why it matters to you |
|---|---|---|
| 2017 reported profit | RM3.4 billion profit recorded | Reported numbers can be disconnected from reality |
| 2017 actual result | RM1.4 billion net loss | Hidden losses compound when not caught early |
| Depositors affected | 9.55 million depositors (2024) | Poor oversight has a wide impact |
| Government bailout | RM19.9 billion for assets worth RM9.7 billion | One bad decision can take years to fix |
| 2018 dividend | 1.25% | Reality catches up eventually; recoveries are slow |
Data compiled from the Malay Mail summary of the RCI report.
The Bigger Picture
The RCI report was not just about the past. It spanned three prime ministers and was only declassified in 2026 because of fears that depositors would panic and withdraw their savings. That tells you something about how fragile trust in financial numbers really is — and how quickly a confidence crisis can spread.
For Malaysian SMEs, the trend is clear. Digital financial infrastructure, e-invoicing, and automated record-keeping are not just government compliance burdens. They are your defence against your own blind spots. When your data is captured automatically at the point of sale, when every expense receipt is scanned on the spot, and when your dashboard updates itself daily, there is no room for “estimated values” to quietly hide a growing problem.
Long term, the businesses that survive will not necessarily be the ones with the smartest founders. They will be the ones with the most honest systems — systems that do not depend on anyone’s “good intention” to keep the numbers real. The Tabung Haji story is a reminder that size and reputation do not protect you from bad numbers. Only systems do.
Ready to Streamline Your Operations?
Your business should run itself. AutoRunBiz deploys AI agents to automate your daily operations — WhatsApp orders, invoicing, customer follow-ups, and accounting. Book a free 15-min ops audit to see where automation fits your business →