The takeover tip that travelled through a WhatsApp group
On 3 March, the chief financial officer of Sri Bayu Holdings Berhad, a Main Market plantation group, met Meridian Securities' head of research to discuss a routine quarterly results preview. Mid-conversation the CFO mentioned that a regional buyer had completed due diligence on a possible unconditional takeover at RM2.30 per share, that the board would meet 'within a fortnight', and asked that the discussion 'stay in the room'. Sri Bayu's shares closed that day at RM1.44. That evening the research head told Meridian's proprietary dealer, who bought 600,000 shares over the next three trading days through two accounts, one of which belongs to his brother-in-law. The research head also floated the idea at a dinner to a client who runs a family office; the client bought 150,000 shares. A Meridian compliance officer noticed the proprietary position on 7 March. Sri Bayu announced the offer on 12 March and the shares closed at RM2.28. Meridian's information barrier policy exists, but the research head and the dealer sit four metres apart and share a WhatsApp group about 'flow'.
1. Assess the exposure of each individual - the CFO, the research head, the proprietary dealer, the brother-in-law and the family office client - under the CMSA insider trading prohibition. Identify what must be proved and where the evidential weak points are.
Read the worked answer
The prohibition in section 188 of the CMSA bites on four elements: there is information not generally available; it is material and price-sensitive; the person possesses it knowing, or with reasonable grounds to believe, that it came from an inside source or a connected person; and the person then deals, procures another to deal, or communicates it. The facts satisfy the first two elements easily: RM2.30 against RM1.44 is plainly price-sensitive, and it was not public until 12 March.
- CFO. As an officer he is a connected person. He is exposed on the communication limb even though he never traded. 'Stay in the room' is an aggravating fact because it shows he knew the information was confidential.
- Research head. He received the information from a connected person in circumstances that made its status obvious. He did not trade, but he communicated it twice - to the dealer and to the client - and may also have procured the dealer's purchases. His exposure may be the cleanest case in the file.
- Proprietary dealer. He traded while in possession. Knowledge is inferred from the sequence, the shared WhatsApp 'flow' group and the two-account structure. Using the brother-in-law's account adds a nominee dimension.
- Brother-in-law. Exposure depends on what he knew. If he simply followed a tip with no inkling of the source, the case weakens; if he knew the dealer had it from a corporate contact, he is caught.
- Family office client. Same analysis: 'floated the idea at dinner' is a communication, and the client's knowledge at the time of purchase is the battleground.
Weak points to test: the exact words used, the timing of each message, and whether any recipient can credibly say they believed the information was public. The existence of a written Chinese wall is not a defence to personal possession; it bears on firm-level supervision.
2. You are the compliance officer who spotted the position on 7 March. Set out what you do in the first 72 hours, including what you report externally and what you must not say to whom.
Read the worked answer
The instinct to 'investigate quietly' is the main risk. The sequence should be preserve, contain, escalate, report.
Day 1 - preserve and contain. Freeze and image the dealer's emails, chat records, order tickets, telephone records and access logs before anything is deleted. Place Sri Bayu on the restricted list and suspend the dealer's trading mandate in writing. Do not interview the dealer before records are secured, and do not allow anyone to 'unwind' the trades - unwinding to conceal the position would itself be obstruction.
Day 1 - escalate. Notify the CEO and the chair of the audit committee, and take external legal advice so the investigation can be conducted under privilege. Consider whether the research head should be restricted from contact with Sri Bayu's officers.
Day 2–3 - external reporting. A licensed intermediary is expected to report suspected market misconduct to the SC; a self-serving decision to handle it internally is a supervision failure. Because insider trading proceeds can be a money-laundering predicate, the MLRO should also assess whether a suspicious transaction report to Bank Negara Malaysia's Financial Intelligence and Enforcement Department is required. Both reports are confidential.
What not to say. Do not tell the dealer, the research head or the family office client that a report has been made, and do not tell Sri Bayu's CFO that the firm is looking at trading in its shares. Do not discuss the matter in the WhatsApp group, and do not let the relationship manager reassure the client that 'nothing is wrong'. Tipping-off prohibitions and the integrity of the investigation both point the same way: silence outside the escalation chain.
3. The board accepts the facts and asks for a remediation plan covering controls, the issuer's own disclosure obligations and staff consequences.
Read the worked answer
Remediation should address three layers, because the failure is not one rogue dealer.
Firm controls. A barrier policy that two people sitting four metres apart with a shared 'flow' WhatsApp group can defeat is not a barrier. Required: physical and system segregation of research and proprietary functions; a formal wall-crossing procedure with a register; watch and restricted lists maintained by compliance, not by the desk; pre-clearance for personal account dealing that expressly covers accounts of family members and connected persons; a ban on business chat channels that are not archived; and annual attestations from all staff. The board should receive a quarterly report on exceptions, not an annual assurance letter.
The issuer side. Sri Bayu's CFO made a selective disclosure of material information. Bursa's listing requirements require immediate announcement of material information, and the company should have a written disclosure policy, a designated spokesperson and a protocol for analysts' and investors' meetings. The audit committee should review what the CFO said and why, and the issuer should consider informing Bursa and the SC.
People. Consequences should follow the evidence, not seniority: suspension pending investigation for the dealer and possibly the research head, a formal disciplinary process, and retraining across research and sales. If the dealer's brother-in-law's account was used with the dealer's knowledge, treat it as a personal-account-dealing breach regardless of the insider trading outcome.
Tone from the top. If the CEO's first reaction is reputational damage control, the plan will fail. The board minute should record that cooperation with the SC is the firm's position, and that staff who raise concerns will be protected.