eSPA Is Here: What New Homebuyers in Malaysia Need to Know About Signing Their SPA Digitally

Malaysian homebuyer signing her SPA digitally on a smartphone at a lawyer's office

By Mohd Fadzrin Md Safea

Introduction

Since 1 January 2026, anyone buying a residential unit under construction from a licensed developer signs their SPA differently: not on paper, but through the Housing Integrated Management System (HIMS), using a government digital identity app called iDsaya. It’s a real procedural shift, not a cosmetic one, and it’s worth understanding before your own signing appointment comes around, given how much confusion we’ve seen in the market about what it actually involves.

This piece sets out what eSPA actually is, how the mechanics work, what parts of your legal protection as a buyer are completely untouched by any of this, and a handful of things we’ve seen go wrong for clients in the first few months of the system being live.

What eSPA Actually Is

Strip away the acronym and eSPA is just the same statutory contract Malaysian developers have always been required to use — the standard-form agreements under Schedules G, H, I and J of the Housing Development (Control and Licensing) Act 1966, an Act every conveyancer here still calls by its old number, Act 118. Nothing about the substance of that contract changed on 1 January 2026. What changed is the manufacturing process: the document is now assembled and executed inside HIMS instead of printed at a law firm, and the signature carries the same force in law as ink on paper because it’s recognised under the Digital Signature Act 1997.

The part that actually confuses people isn’t the technology — it’s scope. eSPA only touches new units bought directly from a licensed developer, still under construction. Three situations sit outside it entirely, and we get asked about all three regularly:

  • You’re buying a resale unit from its current owner (a subsale) — still wet ink, still the old process.
  • You’re buying a completed unit that already carries its own strata or individual title.
  • You’re buying commercial space, which Act 118 has never covered and still doesn’t — that may shift if the Real Property Development Bill currently being drafted eventually passes.

Don’t guess which category you’re in. Ask your lawyer at the outset, because it determines whether your signing appointment happens on a screen or across a table.

How It Actually Runs, Step by Step

First, your digital identity

Long before you sit down to sign anything, register on iDsaya and complete eKYC — a facial scan checked against your identification documents. This creates the verified identity everything else in the process relies on, and it’s the step people leave too late.

Then the system builds the contract

The developer feeds in the transaction details — unit number, price, your particulars — and HIMS assembles the SPA in the prescribed statutory format on its own. Five years ago that document would have been typed up in a law firm from a firm-specific template; now the system produces it directly, and your lawyer’s role shifts from drafting to checking.

Signing happens on your phone

Buyer, developer and any required witness each sign using their iDsaya credentials — IC number, a digital certificate PIN, and a one-time password. The moment it’s signed, it’s timestamped and locked into HIMS.

Stamping follows automatically

The signed eSPA passes straight into LHDN’s e-stamping system, which itself switched to self-assessment (SDSAS) on the same date. On paper this should close the old gap between signing and stamping, when documents used to travel physically between law firm and LHDN counter.

What none of this changes is why a lawyer is in the room. The system produces a standard document; it has no opinion on whether this particular developer has a clean track record, whether the price and specifications match what you were promised, or what you’re actually agreeing to. That judgment call still sits with a human being, and it always will.

What Hasn’t Moved an Inch

Reading all of the above, it would be reasonable to assume the whole legal landscape has been rewritten. It hasn’t. Everything Act 118 gives a buyer in substance is untouched — only the signing and stamping mechanics have gone digital.

  • Your Defect Liability Period — still 24 months from vacant possession on a new launch — is exactly where it’s always been.
  • The Schedule G/H terms, including what happens if the developer delivers late, are the same statutory baseline they’ve always been. eSPA just produces that contract in a different format.
  • Your progress payments still sit inside the Housing Development Account structure, unaffected.
  • You can still bring in your own lawyer rather than defaulting to the developer’s panel solicitor — that choice hasn’t gone anywhere either.

Two Scenarios We See Often

The client who assumes she has time. A buyer picks up a unit at a new condo launch in Cheras, still on the drawing board. Because it’s a primary purchase from a licensed developer, her SPA is going through HIMS, and she plans to sort out her iDsaya registration “the morning of” the appointment. We push back on that every time — verification queues have been running long during peak launch weeks, and if that step slips, so does your loan disbursement, and everything downstream of it.

The client who thinks none of this applies to her — correctly, for once. Another buyer is picking up a resale terrace house from its owner. A subsale, not a developer sale. None of the above touches her transaction; her SPA gets signed the old way, ink on paper, exactly as it would have in 2020.

Where We’re Seeing Buyers Trip Up

Treating eKYC as a formality. It isn’t, not right now. Verification has been genuinely backed up around popular launches, and finding that out on the morning of your appointment is not where you want to be.

Assuming eSPA covers everything. It doesn’t. It’s easy to assume a subsale will now go through the same digital process, when in fact it’s signed the traditional way, wet ink and all.

Reading “auto-generated” as “already checked”. A standardised format tells you nothing about whether the numbers, the unit specs and the delivery date match what you were promised. That’s still a job for someone who reads it line by line.

Losing track of digital credentials. A signed contract you can’t retrieve because you’ve lost access to your iDsaya account is a genuinely awkward problem to solve after the fact. Keep your own copy.

Not checking the sequence with your bank. Stamping and loan drawdown don’t necessarily line up the way they used to under the paper process — a five-minute call to your bank before signing saves a lot of back-and-forth later.

Common Questions About eSPA

Is a digital signature under eSPA really as binding as one on paper?

Yes, without qualification. It draws its legal force from the Digital Signature Act 1997, and under Act 118 it stands on exactly the same footing as ink on a printed page.

If the system generates my SPA, do I still need a lawyer?

Genuinely, yes. HIMS produces a standardised document — it has no idea whether this particular developer has delivered on time before, or whether what’s in the contract matches what you were promised at the showroom. That’s still a conversation to have with someone qualified, not a form to trust blindly.

My eKYC verification is stuck — what now?

Register on iDsaya as early in the process as you can, rather than waiting for your signing date to approach. If it’s still stuck close to that date, tell your lawyer and the developer immediately rather than hoping it resolves itself.

Does any of this apply to a subsale I’m buying?

No. eSPA only touches primary purchases of units still under construction, bought from a licensed developer. A subsale runs exactly as it always has.

Has my Defect Liability Period or my rights over a late handover changed?

Not at all. Those come from Act 118 itself, which hasn’t been amended by any of this. eSPA changes how the contract is signed and stamped — not a word of what it actually says.

Who’s responsible for paying the stamp duty?

The liability rules under the Stamp Act 1949 haven’t moved. What’s different since 1 January 2026 is that you — or whoever’s advising you — now has to work out and declare the duty yourself under the SDSAS system, rather than sending it to LHDN and waiting for them to assess it.

What about buying commercial property — does eSPA cover that?

Not yet. Act 118 has only ever covered residential housing development, and eSPA sits inside that boundary. Whether that changes depends on the Real Property Development Bill, which is still being drafted.

What’s worth doing before I turn up to sign?

Get your iDsaya registration and eKYC done well ahead of time, check your ID documents are current, ask your lawyer to confirm they’ve been through the generated SPA line by line, and have a quick word with your bank about how stamping and loan disbursement will line up.

I’ve spotted something off in the draft SPA — what do I do?

Raise it immediately, with your lawyer and the developer both. Once it’s digitally signed and stamped, unpicking an error is a far harder conversation than catching it beforehand.

The Bottom Line

This is probably the biggest practical shift residential conveyancing in Malaysia has seen in years, and it’s worth saying plainly what it isn’t: it isn’t a change to your rights as a buyer. Act 118 still protects you the same way it did in December 2025. What’s different is the mechanics — a digital identity, a system-generated contract, an integrated stamping process, in place of a stack of paper and a pen. Once buyers are through it, most tell us it’s actually faster than what came before. The one thing worth doing differently is sorting your digital identity out well ahead of your signing date, and resisting the temptation to treat a tidy, machine-generated document as one that’s already been checked on your behalf.

Need a Hand With Your Purchase?

Whether you’re a few weeks out from your first eSPA signing or working through an ordinary subsale, our conveyancing team at Nik Saghir & Ismail can sit down with you, go through the contract, and stay with you the whole way from offer to vacant possession. Come and see us before you sign — the conversation afterwards is always harder.


Disclaimer: This article is provided for general informational purposes only. It is not intended to, and should not be construed as, legal advice. The discussion herein is meant to highlight key considerations in a broad sense, and may not reflect the full scope of issues relevant to your particular situation. Readers are encouraged to treat this content as background knowledge rather than a substitute for professional counsel. For guidance tailored to your specific circumstances, please contact our firm directly. We would be pleased to provide advice that takes into account the details of your transaction and objectives.

© 1978 - Nik Saghir & Ismail Advocates & Solicitors. All rights reserved.

Book an Appointment

Privacy Policy

PERSONAL DATA PROTECTION NOTICE

This Personal Data Protection Notice (“Notice”) sets out how Messrs. NIK SAGHIR & ISMAIL (“Firm”) collects, uses and protects your Personal Data which you have provided to the Firm. By engaging the Firm to provide its services or by accessing the Firm’s website at www.nsi.com.my (“Website”), you hereby consent to the processing of your Personal Data by the Firm in the provision of legal and secretarial or any other services that you have requested from the Firm (“Services”).

1. PERSONAL DATA

1.1 The “Personal Data” that you provide or have provided to the Firm includes your name, contact details, address, telephone numbers, email address, NRIC number or passport number, bank account information, income tax reference number, etc.

1.2 In addition to the Personal Data that you provide to the Firm directly (whether when engaging us to provide our services or during any communication with the Firm), the Firm may also collect your Personal Data from various other sources, including without limitation, from online search tools, information obtained from third parties through lawful sources including but not limited to Companies Commission of Malaysia, National Registration Department of Malaysia, or at events organised or participated by the Firm.

1.3 In respect of personal data of third parties such as your spouse and family members, you warrant that you have obtained their consent allowing us to process their personal data and you will extend a copy of this Notice to them.

2. PURPOSE OF PROCESSING OF PERSONAL DATA

2.1 By engaging the Firm, you hereby agree and consent to the Firm using and processing your Personal Data provided to the Firm, in the manner and for the purposes as described below:

(1) for the purposes of the Services;

(2) for preparing any document or instrument which may be required for the purposes set out in sub-paragraph (1) above and such other ancillary work in connection with sub-paragraph (1) above, including but not limited to, preparing the necessary contract or agreement or instrument to which you are a party, preparing loan agreement and preparing affidavits;

(3) to provide such necessary information to any regulatory or governmental authorities as required by statutory, regulatory or governmental requirements;

(4) for the Firm’s internal administrative purposes including historical and conflict checking purposes;

(5) for the Firm to communicate with you; and

(6) for the Firm to comply with its obligations under law or any regulations imposed by regulatory or governmental authorities.

2.2 It is voluntary for you to supply your Personal Data to the Firm. However, if you do not wish to provide your Personal Data, the Firm may not be able to:

(1) provide you the services that you require; or

(2) communicate effectively with you.

2.3 The Firm may also use and process your Personal Data for other purposes such as:

(1) to send you materials such as season greeting cards, newsletters, articles, write-ups and other updates, distribute information of events, conferences, talks and seminars which may be of interest to you; and

(2) potential referees to editors / researchers in legal ranking publications and journals and potential clients who request for referees of past work in our credential statements, tenders and submissions,

if any, by way of email or mail.

If you do not agree or consent to the Firm processing your Personal Data for the purposes set out in this paragraph 2.3, please notify the Firm by contacting the Firm via the contact details set out in paragraph 6.1 below.

3. DISCLOSURE OF PERSONAL DATA

3.1 Your Personal Data provided to the Firm or obtained by the Firm shall be kept confidential by the Firm. However, it may be necessary for the Firm to engage third party companies, service providers or individuals to perform certain services on the Firm’s behalf. In such event, you hereby agree and consent that the Firm may disclose and transfer your Personal Data to the third parties, within or outside Malaysia, including without limitation, as follows:

(1) banks and financial institutions;
(2) insurance providers;
(3) storage facility providers;
(4) external advisors and other professional advisors, such as auditors; and
(5) such other party as the Firm deems necessary for the purposes mentioned in paragraph 2 above.

3.2 The Firm shall also disclose and transfer the information to any statutory bodies, regulatory bodies and / or governmental authorities where legally required to do so.

4. EMAIL AND WEBSITE

4.1 Any Personal Data contained in the emails and “Contact Us” messages sent via the Firm’s Website to the Firm shall be used and processed in the manner set out in this Notice. The content of the messages shall be strictly monitored by the Firm.

4.2 If you do not wish for your Personal Data to be collected via cookies on the Website, please configure your internet browser to delete or deactivate cookies.

4.3 The Firm’s Website may contain links to other sites and pages. The Firm shall not be responsible for any Personal Data or information that you may provide to other entity via the links.

5. REQUEST FOR ACCESS AND INQUIRIES

5.1 You may at any time hereafter request for access to, or request for rectification or correction of your Personal Data (subject to payment of fees, if applicable), or limit the processing of your Personal Data by the Firm, as the case may be, however subject to the exceptions and restrictions as may be contained under the applicable law. If you wish to do so, please contact:

Managing Partner
Tel: 03-4043-2888
Fax: 03-4043-8800

You may also contact the Firm via the above contact details if you have any inquiries or complaints in respect of your Personal Data provided to the Firm.

5.2 Please note that the Firm has the right to refuse your request to access and / or make any correction to your Personal Data to the extent permitted under the applicable law.

6. GENERAL

6.1 The Firm reserves the right to amend or modify this Notice from time to time.

Disclaimer

The information contained in this website is for general information purposes only. Such information is not intended to replace legal advice nor is a substitute for specific advice concerning individual situations. While we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.

Every effort has been made to ensure that the information displayed on the website is accurate as at the date of issue. Changes in law or circumstances may occur after the issue date, which may make information displayed no longer accurate or may not reflect the current legal position.

We shall not be responsible for any loss or damage arising from your reliance on any information provided on this website. Should you require specific legal advice, please do not hesitate to contact us.

Through this website you may be able to link to other websites which are not under our control. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.