What is a purchase order? 2026 guide for Malaysian businesses

Key Takeaways:

• A purchase order (PO) is a buyer-issued document that authorises a supplier to deliver specific goods or services at agreed prices and terms. Once the supplier accepts it, the PO becomes a legally binding contract.

• POs sit at the front of the procurement cycle and feed into accounts payable through three-way matching, a control that has become critical under Malaysia's MyInvois e-invoicing mandate.

• Airwallex Purchase Orders lets Malaysian finance teams request, approve, issue, match, and pay POs in one workflow, and is the only spend platform that ties PO matching directly to international supplier payments at interbank FX rates.

A purchase order is the document your business uses to tell a supplier exactly what you want to buy, at what price, and under what terms, before any money changes hands. Once the supplier accepts it, the PO becomes a legally binding contract that protects both sides.

This guide explains what a purchase order is, how POs differ from invoices, how the full PO process works in practice, the main types of POs, and what you need to know about POs under Malaysia's tax and procurement rules in 2026.

What is a purchase order?

A purchase order is a formal document that a buyer issues to a supplier to request specific goods or services. It lists what is being ordered, how much it costs, when it should be delivered, and how payment will be made. The PO is created and sent by the buyer before the supplier ships anything or sends an invoice.

POs serve three main jobs:

1. They confirm what the buyer has authorised internally.

2. They give the supplier a written record of the order.

3. They create a reference document for finance and audit teams when something is disputed.

In larger businesses, the PO is usually generated from an approved purchase requisition. It is then tracked through an ERP, accounting system, or dedicated spend management platform like Airwallex Purchase Orders.

Each PO is assigned a unique purchase order number (PO number). This number is the thread that connects the order to the goods receipt and the eventual invoice. It is how your accounts payable team verifies that a supplier bill matches an approved request.

What information goes on a purchase order

A purchase order in Malaysia typically includes the following:

• Buyer and supplier details, including company name, SSM business registration number, address, contact person, and Tax Identification Number (TIN)

• SST registration numbers for both parties, where applicable

• A unique PO number and the date the PO was issued

• Line items showing description, quantity, unit price, and line total for each item

• The currency and total amount payable, in RM for local purchases or in foreign currency (US$, SGD, CNY, EUR) for overseas purchases

• Delivery terms, including the delivery address, expected date, and any special handling instructions

• Payment terms, covering the payment schedule, payment method, and any late-payment penalties

• Authorised signatory details and references to any internal approvals

The SSM number, SST registration number, and TIN matter because they appear on the supplier's e-invoice when it is submitted to MyInvois for validation. If the details on the PO and the invoice do not match, the invoice can be flagged or rejected.

Is a purchase order legally binding in Malaysia?

Yes. Once a Malaysian supplier accepts a PO, by acknowledging it in writing, sending an order confirmation, or starting to fulfil the order, the PO becomes a legally binding contract between buyer and supplier. It sets out the terms both parties have agreed to, including price, quantity, delivery, and payment.

If a dispute arises, the PO is the primary reference document. This is why finance teams insist on a written PO for anything beyond a small ad-hoc purchase, and why most large Malaysian buyers refuse to pay invoices that don't reference an approved PO number.

Purchase order vs invoice

The most common confusion in procurement is the difference between a purchase order and an invoice. Both list goods, quantities, and prices. Both are exchanged between buyer and supplier. But they are issued at different points in the transaction, by different parties, and they do completely different jobs.

Here’s the difference:

• A purchase order is issued by the buyer to the supplier at the start of the transaction. It is a request to buy.

• An invoice is issued by the supplier to the buyer at the end of the transaction. It is a request to be paid.

Here is how they compare:

In practice, the two documents work as a matched pair.

The buyer issues a PO. The supplier delivers the goods. The supplier sends an invoice that references the PO number. Your finance team then checks that the invoice matches the PO before releasing payment.

This is the foundation of three-way matching, covered further down.

Purchase order vs purchase requisition

People also confuse a purchase requisition with a purchase order. They are part of the same workflow but serve different purposes.

A purchase requisition is an internal request. An employee or department head fills it out to ask for permission to buy something. It is reviewed and approved internally by a manager or finance lead.

A purchase order is what gets issued externally once the requisition has been approved. It is sent to the supplier and becomes the legally binding document for the transaction.

In smaller businesses, these two steps often collapse into one — someone asks the boss for approval to buy, then sends a PO. In larger businesses, the requisition is a formal document with its own approval workflow before any PO is generated.

The purchase order process, step by step

A purchase order does not exist on its own. It sits at the centre of a six-step process — from someone identifying a need to the supplier being paid and the PO closed. Here is what each step looks like in a typical Malaysian business in 2026:

Step 1: Requisition

The process starts with a purchase requisition. An employee or team lead identifies a need — new laptops, raw materials, SaaS licences — and submits an internal request to procurement or finance.

A good requisition lists what is being requested and why, the estimated cost, the supplier if known, and the budget code the spend should be charged against.

Step 2: Approval

The requisition then goes through your internal approval workflow, with approvers usually tiered by amount. A team lead might approve up to RM5,000, a department head up to RM50,000, and the CFO anything above that. The point is that spend is approved before any money is committed, not after.

Step 3: PO issuance

Once approved, the formal purchase order is generated and sent to the supplier — usually by email, supplier portal, or EDI in 2026. It now has a unique PO number, agreed prices, line items, and the buyer and supplier details.

Whatever the format, the PO should be logged in your accounting system or spend management platform so the PO number is searchable later. When the supplier accepts the PO (in writing, by email confirmation, or by starting to fulfil), the PO becomes a binding contract.

Step 4: Goods or services receipt

When the goods arrive or the service is performed, your team verifies that what was delivered matches the PO. For physical goods, this usually means signing a delivery order (DO) from the supplier and noting any discrepancies — missing items, damaged stock, wrong specifications.

The delivery order is the supplier's evidence that they have shipped. It references the PO number. Your goods receipt note (GRN) is your evidence that you received it. Together with the PO and the eventual invoice, these documents support three-way matching in the next step.

Step 5: Three-way matching

Three-way matching is how your finance team confirms that you only pay for what you actually ordered and received. The three documents being matched are:

• The purchase order, showing what was ordered and approved

• The delivery order or goods receipt note, showing what was received

• The supplier's invoice, showing what you are being billed for

When the three documents agree on quantity, price, and line items, the invoice clears for payment. When they don't agree, the invoice is flagged for manual review.

Under Malaysia's MyInvois e-invoicing mandate, the supplier's invoice is also a validated e-invoice with a unique identifier (UUID) issued by LHDN. The PO number is referenced in the invoice's Business Reference field, which is how matching is run automatically by most modern accounts payable systems.

For a deeper look at how this is automated, see our guide to accounts payable automation.

Step 6: Payment and PO close-out

Once the invoice is matched and approved, payment is released. This can happen through a direct bank transfer, FPX, DuitNow, a corporate card, or via a spend management platform that pays the supplier directly.

After payment, the PO is marked as closed. A full PO — one where all line items have been delivered, invoiced, and paid — is closed. A partial PO, where only some items have been received, stays open until the rest is fulfilled or formally cancelled.

For a closer look at the tools that run this workflow end to end, see our roundup of the best purchase order software for Malaysian businesses.

4 types of purchase orders

Not every purchase needs the same kind of PO. Most Malaysian businesses use four main types, each suited to a different buying pattern. Choosing the right one keeps your procurement workflow clean and your matching simple.

1. Standard purchase order

A standard PO is the most common type. You use it for one-off purchases where you know exactly what you want, how much of it, when you need it, and what it costs. The PO is issued, fulfilled once, matched against one invoice, and closed.

2. Planned purchase order

A planned PO is used when you know what you want to buy and at what price, but not exactly when you need delivery. You issue the PO with all the details locked in, then release the delivery schedule separately.

This is common in manufacturing. For example, a factory might issue a planned PO for 50,000 units of a raw material at an agreed price, then call off batches as production requires.

3. Blanket purchase order

A blanket PO is an agreement to buy a category of goods or services from a supplier over a set period, with pricing agreed upfront but no commitment to specific quantities. It is built for recurring purchases.

A Malaysian eCommerce business sourcing packaging from a supplier in Shenzhen, for example, might issue a 12-month blanket PO that locks in unit pricing in CNY, then call off volumes throughout the year against the same PO number.

This is also where multi-currency capability matters. If you are running a blanket PO with an overseas supplier, paying through a multi-currency account avoids the FX markup your bank would add on every call-off transfer.

4. Contract purchase order

A contract PO is used for long-term agreements where the terms — pricing, payment schedule, service-level commitments, liability clauses — sit in a separate underlying contract. The PO itself is short and references the contract, with each individual order issued as its own release PO.

Large enterprise procurement and government tenders often work this way.

Why purchase orders matter for Malaysian businesses

A PO is not paperwork for the sake of paperwork. For Malaysian finance teams in 2026, it does four specific things that directly affect how money moves through your business:

1. Spend control before money leaves the account

Without a PO process, spend happens first and approval happens later, often only when the invoice arrives weeks down the line. By then, the money is already owed.

With a PO, this doesn’t happen. The spend is reviewed, approved, and locked in before the supplier ships anything. Your finance team knows the commitment exists, the budget owner has signed off, and there are no surprises at the end of the month.

2. A clean audit trail for LHDN and external auditors

Every PO creates a documented chain of who requested what, who approved it, what was delivered, and what was paid. This is the audit trail your accountants will need at year-end, and the same trail LHDN will look for if your business is selected for audit.

Without it, audit defence becomes a manual scramble through email threads and bank statements.

3. Faster invoice processing under MyInvois

Under LHDN's MyInvois mandate, every B2B invoice is validated by LHDN and assigned a Universally Unique Identifier (UUID). The PO number appears on the validated e-invoice as a Business Reference. This is the field your accounts payable system uses to match the invoice back to the original order.

When the PO number, line items, and amounts on the e-invoice agree with the PO in your system, the invoice clears for payment automatically. When they don't, the invoice gets flagged. Either you correct it, or you cancel and reissue within the 72-hour window LHDN allows after validation¹.

This matters even more in 2026 because of the RM10,000 individual e-invoice rule: any single transaction of RM10,000 or more must be issued as its own validated e-invoice rather than rolled into a consolidated monthly batch².

POs make this manageable. Each individual transaction already has a matching PO, so the validated e-invoice ties back to a known, approved order.

4. Budget accuracy through committed-spend tracking

A PO is approved spend, but it is not yet paid spend. Until the supplier delivers and bills you, the money is committed but has not yet left your account. This is what finance teams call committed spend.

Tracking committed spend gives you a more accurate picture of your budget. Paid invoices only tell you what has already left your account. Approved POs tell you what you have agreed to spend, even if the invoice has not yet arrived. The full picture is both numbers added together.

Without POs, you only see spend once invoices land. By that point, the money is already owed and your budget might already be over. With POs in place, every approved order shows up in your books immediately, and your budget reports stay current.

Purchase orders and government procurement in Malaysia

If you sell to the Malaysian government, the rules around POs are stricter than in the private sector.

Government procurement runs on e-Perolehan, the federal e-procurement portal managed by the Ministry of Finance. Suppliers register on e-Perolehan first, agencies issue POs through it, and every supplier invoice has to reference the PO number exactly. Otherwise, the system rejects the invoice and payment cannot be released.

Government agencies use different procurement methods based on contract value, set out in the Treasury's PK2.1 circular. For goods and services, direct purchase (pembelian terus) applies up to RM50,000, quotation (sebut harga) applies from RM50,000 to RM500,000, and open tender applies above RM500,000³.

Whichever method the agency uses, the eventual award generates a PO through e-Perolehan, and the same matching rules apply.

For SME suppliers, the practical takeaway is that you cannot receive POs above the RM20,000 basic-account limit without MOF registration³. Most Sdn Bhd suppliers open a paid MOF Account on e-Perolehan, which is time-limited and must be renewed periodically. State-level procurement and many government-linked company (GLC) workflows follow similar rules, even when they run on their own platforms.

When does your business need a formal PO process?

Not every business needs POs from day one. A two-person startup buying a few SaaS subscriptions can manage with shared bank cards and a spreadsheet. Adding a formal PO process to that setup would slow things down without adding control.

POs start to matter when your spending outgrows what one person can track. There are four common signals that you have hit that point:

1. You have around 50 or more employees

Once you cross roughly 50 staff, you typically have multiple departments making purchases — marketing, ops, engineering, and HR each with their own budgets and suppliers.

Approvals stop being something the founder can sign off in passing, and finance can no longer see every purchase as it happens.

2. Your monthly invoice volume is climbing

If your accounts payable team is processing more than 50 to 100 invoices a month, manual matching becomes the bottleneck and errors creep in. A PO process gives every incoming invoice something to match against, which makes processing predictable.

3. You run multiple entities or branches

If you operate across more than one entity, branch, or country, you need a way to keep purchases visible across the whole group. POs give every entity a shared framework with consistent approval rules and one set of records for committed spend.

4. You buy from overseas suppliers

Cross-border procurement adds two complications: foreign currency exposure and longer lead times. A blanket PO with an overseas supplier locks in pricing and terms upfront, so call-offs throughout the year are predictable instead of becoming a separate negotiation and FX exposure each time.

If more than one of these signals apply to you, it is probably time to formalise your PO process. The longer you wait, the more retrofitting your finance team will need to do later.

Best practices for purchase orders in Malaysia

If you are setting up or refining your PO process, four practices make the biggest difference. None of these are expensive to implement. Most just take a one-time decision and a bit of discipline:

1. Standardise your PO numbering system

Use a consistent format across your business — for example, PO-YYYY-MM-XXXX, where the prefix identifies the year, month, and a running serial.

A consistent format makes POs easier to search, audit, and reference on invoices. It also reduces the chance of two suppliers being issued the same PO number by different teams.

2. Include SSM, SST, and TIN fields on every PO

Make sure every PO template includes your SSM business registration number, your TIN, and your SST registration number where applicable. Require the same from your supplier.

These details need to match the eventual MyInvois-validated e-invoice, and missing fields are one of the most common reasons invoices get rejected at validation.

3. Set approval thresholds tied to your budget

Tie your PO approval workflow to your actual budget structure, not to arbitrary amounts. Each cost centre or department should have a spending limit. Approvals should escalate based on how much of that limit a single PO uses up.

This stops one large PO from quietly consuming a quarter's budget without anyone noticing.

4. Match every invoice to a PO before paying

No invoice should be paid without a matching PO and goods receipt. This is the single most effective control against duplicate payments, supplier fraud, and overbilling. Three-way matching can be done manually at low volume.

Most businesses processing more than a handful of invoices a month use software to automate the checks.

Why Malaysian businesses use Airwallex Purchase Orders

A standalone PO module inside your ERP or accounting software is fine if all your suppliers are local, all your invoices are in RM, and you only need to track POs as paperwork. For purely domestic procurement, most ERP-bundled PO tools cover the basics.

But most Malaysian businesses don’t look like that anymore. You’re paying overseas suppliers different currencies. You’re managing approval chains across multiple cost centres and entities. You’re manually matching validated MyInvois e-invoices to POs. A PO tool that handles only the front half of that workflow leaves your finance team scrambling to fill the gaps.

That's where Airwallex Purchase Orders comes in. It runs the full PO lifecycle — request, approval, issuance, matching, and payment — in one workflow, and ties directly to the same multi-currency account you use to pay overseas suppliers.

Here’s what you can do with Airwallex:

Request, approve, and issue POs in one workflow

Employees raise PO requests using simple intake forms. Requests are routed automatically to the right approvers based on category, department, or amount, with comments and clarifications happening directly inside the request.

Once approved, the PO is generated and ready to send. No spreadsheets, no email approvals, no lost requests.

Real-time visibility into committed and actual spend

Every PO sits in a searchable view alongside its PO total, total billed, and current status. Finance gets one place to see what has been approved, what has been delivered, and what is still outstanding.

Committed spend (approved POs not yet billed) and actual spend (paid invoices) sit in one centralised view, which makes budget forecasting accurate instead of guesswork.

AI-powered invoice-to-PO matching

When an invoice arrives, Airwallex's AI-powered OCR reads it and automatically matches it to the right PO. Matching runs at the line-item level across the bill and the PO, so you only ever pay for what was actually ordered. You can enforce exact matches or set configurable tolerances based on how your business runs.

Pay PO-matched bills directly through Airwallex

Once an invoice is matched and approved, you can pay it directly from Airwallex through Bill Pay. For local suppliers, that means DuitNow and bank transfer. For overseas suppliers, that means paying in their local currency from your multi-currency account at interbank FX rates that save you up to 80% on FX fees.

One Spend suite — Corporate Cards, Expense Management, Bill Pay, and Purchase Orders

Purchase Orders isn't a standalone tool — it's one part of the Airwallex Spend suite, which puts every category of business spend in one platform. Corporate Cards handles employee spend. Expense Management handles reimbursements. Bill Pay handles supplier invoices. Purchase Orders sits above them as the approval and matching layer.

Everything runs on the same multi-currency account, with one set of approval rules and one source of data across every type of spend.

Frequently asked questions (FAQs)

What does PO stand for?

PO stands for purchase order. It is a document a buyer issues to a supplier to request specific goods or services at agreed prices and terms. Once accepted, it becomes a binding contract between the two parties.

Who issues a purchase order?

The buyer issues the purchase order, not the supplier. Within the buyer's business, POs are usually created by the procurement team or by the department making the purchase, then sent to the supplier after internal approval. The supplier confirms the PO either in writing or by starting to fulfil the order.

What is a PO number?

A PO number is the unique reference assigned to each purchase order when it is issued. It is the thread that connects the original order to the supplier's delivery order and the eventual invoice, which is how your accounts payable team confirms that an invoice matches an approved purchase. Under Malaysia's MyInvois e-invoicing rules, the PO number also appears as a Business Reference field on the validated e-invoice.

Can a purchase order be cancelled?

Yes, a purchase order can be cancelled, but the rules depend on whether the supplier has already accepted it. If the supplier has not yet confirmed or started fulfillment, you can usually cancel it with no consequences. If the supplier has accepted and started work, you may be liable for costs already incurred. For Malaysian businesses operating under MyInvois, any related e-invoice must also be cancelled within 72 hours of validation, otherwise a credit note is required.

Do small Malaysian businesses need a purchase order process?

Not always; a two-person business with a handful of suppliers can usually manage with simple bank records and a spreadsheet. POs start to matter once you have multiple people making purchases, around 50 employees, more than 50 to 100 invoices a month, multiple entities, or overseas suppliers. Platforms like Airwallex Purchase Orders make it practical to formalise the process without adding administrative load.

Do you need a purchase order under MyInvois?

MyInvois does not require you to issue a PO for every transaction. But if you do use POs, the PO number should be referenced on the supplier's validated e-invoice in the Business Reference field. This is what allows your accounts payable system to match the e-invoice to the original order, which is faster, more accurate, and a key audit control for LHDN.

Sources:

1.  https://jomeinvoice.my/lhdn-e-invoice-complete-guide/

2.  https://jomeinvoice.my/lhdn-e-invoice-rm10000-rule-guide/

3.  https://www.walkproduction.com/blog/eperolehan-tender/

This publication does not constitute legal, tax, or professional advice from Airwallex nor substitute seeking such advice, and makes no express or implied representations / warranties / guarantees regarding content accuracy, completeness, or currency. If you would like to request an update, feel free to contact us at [[email protected]]. Airwallex (Malaysia) Sdn. Bhd., a company incorporated under the laws of Malaysia with company registration number 201801007747 (1269761-X), is regulated as a licensed remittance business under the Money Services Business Act 2011 (Licence number 00743 with an expiry date of 3 August 2028, an E-Money Issuer and a registered merchant acquirer under the Financial Services Act 2013.