How to collect restaurant booking deposits in Malaysia: DuitNow QR, FPX links or card holds

Deciding to take reservation deposits is the easy part. Chinese New Year reunion dinners have required them for years, large groups increasingly expect them, and fine dining venues in KL now treat them as standard. The hard part in Malaysia is the plumbing: how do you actually collect RM50 per pax from a guest who booked over the phone, and what does each option cost you?

The answer is less obvious than it looks, because Malaysia's most popular payment method is structurally unable to do the one thing a no-show guarantee really wants: hold money without taking it. DuitNow QR and the e-wallets are instant push payments, so a "deposit" through them is a real transfer you may later have to refund by hand. FPX payment links are the workhorse that most independent restaurants end up using. And a genuine pre-authorisation, where nothing is charged unless the guest fails to show, exists on exactly one rail: cards.

This guide compares the four options with fees verified on each provider's own pricing page in early October 2026, and ends with when to use which, whether you run everything through WhatsApp today or take bookings through an online system that automates the chase.

The short version:

• DuitNow QR and e-wallets (Touch 'n Go eWallet, GrabPay, Boost): superb at the till, wrong for deposits. No pre-authorisation exists; money moves instantly and refunds are manual.
• FPX payment links are the mainstream deposit rail: Billplz from RM1.25 flat per transaction, Curlec from 1.5% or RM1, senangPay plans from RM199/year.
• Card pre-authorisation is the only true hold: Stripe Malaysia supports manual capture at 3% + RM1 per domestic transaction, with a hold window of about 7 days.
• Plain bank transfer costs nothing and swallows hours in reconciliation.
• Match the rail to the booking: FPX links for groups and festive set menus, card holds for fine dining and international guests.

A deposit and a hold are two different instruments

Before the fees, one distinction that shapes everything else:

• A deposit (or advance) is money that actually moves at booking time. The guest pays RM50 per pax now; if they show up, you deduct it from the bill or treat it as part payment; if they cancel late, you keep some or all of it under your stated policy.
• A hold (pre-authorisation) is a promise, not a payment. The guest's card is authorised for an amount, nothing is charged, and the restaurant captures the money only if the guest no-shows or cancels late. Card holds for reservations feel lighter to guests precisely because no money leaves their account when they book.

Malaysia's payment landscape splits cleanly along this line. Every local account-to-account rail (DuitNow, FPX, the e-wallets) can take a deposit but cannot place a hold. Only card networks support pre-authorisation. That single technical fact decides most of what follows.

DuitNow QR and e-wallets: brilliant at the till, wrong for deposits

DuitNow QR is Malaysia's national QR standard, and by volume it has won: PayNet reported the network more than doubled to around 3 billion transactions in 2025 (TechNode Global, May 2026). For a restaurant the economics at the till are unbeatable: the merchant fee (MDR) is 0.25%, and it has been widely waived for micro and SME merchants (PayNet, Vulcan Post).

So why not just WhatsApp your static QR code to the guest and ask for the deposit? Because DuitNow QR, like Touch 'n Go eWallet, GrabPay and Boost transfers generally, is an instant push payment with no pre-authorisation mechanism. Three consequences:

1. The money moves immediately. There is no way to hold RM200 and release it when the party shows up. Every QR "deposit" is a real transfer.
2. Refunds are manual. If the guest cancels within your free-cancellation window, someone on your team has to transfer the money back and keep a record of having done so.
3. Reconciliation is on you. A static QR gives you a credit in the bank feed with no booking reference attached. On a Saturday with ten deposits in flight, matching payments to bookings becomes a notebook exercise.

None of this makes QR useless for deposits; a mamak taking one large-group booking a week can live with it. But the moment deposits become routine, the manual refund and matching work costs more than the fees you saved.

FPX payment links: the mainstream deposit rail

FPX is Malaysia's online banking rail, and payment links built on it are how most independent restaurants that take deposits actually collect them. The flow fits the way Malaysians already book: the guest enquires on WhatsApp or by phone, you create a payment link for RM50 x 6 pax, send it, and the booking is confirmed when the link is paid. The gateway dashboard shows who paid what, which solves the reconciliation problem that raw QR transfers create.

Fees, from each provider's own pricing page, early October 2026:

A few honest notes on reading that table:

• Billplz's flat RM1.25 is the sharpest price for deposits. On a RM500 group deposit, Billplz costs RM1.25 where a percentage gateway costs RM7.50. The flat fee is per transaction, not a percentage.
• Stripe is the expensive way to run FPX. Its 3% + RM1 applies to FPX as well as cards, so it only earns its place if you want the one thing the local gateways do not offer: pre-authorisation (next section).
• iPay88 publishes no rate card. Pricing is quote-based; a third-party comparison from September 2026 cites an indicative 2.8% to 3.2% band for cards and online banking (Cravings in Malaysia), so treat that as indicative, not vendor-confirmed.
• Whatever the gateway, an FPX deposit is still a payment, not a hold: refunds for legitimate cancellations remain a task, even if the dashboard makes them a button rather than a bank transfer.

Worked example: a 10-pax festive booking at RM50 per pax, so a RM500 deposit. Collecting it costs RM1.25 on Billplz Basic, RM7.50 on Curlec or senangPay, RM16 on Stripe. Against a table of ten that would otherwise have no commitment at all, every one of those numbers is cheap.

Card pre-authorisation: the only true hold

If you want the guest to commit without paying anything upfront, cards are the only rail in Malaysia that can do it. A pre-authorisation places a hold on the guest's credit or debit card at booking; the restaurant captures the amount only on a no-show or late cancellation, and otherwise the hold simply lapses.

For an independent restaurant the accessible route is Stripe Malaysia with manual capture: the charge is authorised at booking and captured later, or not at all. Stripe's own documentation puts the standard validity of an uncaptured authorisation at around 7 days, after which it expires and the funds release automatically (Stripe docs). Pricing is the standard 3% + RM1 for domestic cards, plus 1% for international cards (Stripe Malaysia pricing), and you pay it only on amounts you actually capture.

That 7-day window matters in Malaysia, where reunion dinner tables are booked months ahead: a hold placed at booking time in October has long expired by Chinese New Year. In practice the hold is placed close to the reservation date, or the festive booking takes a real deposit instead. Horses for courses.

And Malaysian fine dining already runs on this rail. Dewakan, the country's only two-Michelin-star restaurant, takes a card at booking and states it plainly: "Your credit card will NOT be charged now. However, in the event of a cancellation of less than 24 hours before the reservation day or no show, Dewakan reserves the right to charge your credit card RM870 nett per guest", alongside a 50% non-refundable deposit for groups of six and above (dewakan.my, October 2026). When the table is worth RM870 per seat, a hold is not hostility; it is arithmetic.

Plain bank transfer: free, and you pay for it in hours

The zero-fee option is the one Malaysian restaurants have used forever: give the guest your account number, ask for a transfer, request the slip on WhatsApp. It works, and for a restaurant taking a handful of deposits a year it is perfectly rational.

At any real volume the costs show up elsewhere:

• Matching: transfers arrive with whatever reference the guest typed, which is usually nothing. Someone matches screenshots to bookings.
• Chasing: "will transfer tonight" bookings sit half-confirmed, and your team has to decide when an unpaid promise releases the table.
• Refunding: every legitimate cancellation is a manual transfer back, done from the business account, logged by hand.
• Disputes: with no gateway record, a "but I paid" conversation is your WhatsApp archive against theirs.

If deposits are becoming part of how you run service, moving from raw transfers to a payment link is usually the first upgrade worth making, and at RM1.25 a transaction the maths is not close.

Which rail for which booking

There is no single right answer; there is a right answer per booking type.

• Casual bookings and small groups: usually no deposit at all. A confirmation plus a reminder does most of the work, and in a casual segment a deposit demand costs you bookings. Keep DuitNow QR for the bill, where it belongs.
• Large groups (8+ pax) and event bookings: FPX payment link, RM20 to RM50 per pax, deducted from the bill. Flat-fee gateways make small per-pax deposits economical.
• Festive set menus (CNY, Ramadan buffets, Mother's Day): FPX link as genuine part payment, often 50% on the big nights. The money also protects you against menu pre-selection going to waste, and the long lead times rule out a card hold placed at booking.
• Fine dining and tasting menus: card pre-authorisation. The guest commits, pays nothing upfront, and the cover is protected at its real value. This is the Dewakan model.
• International tourists: card pre-authorisation again, for a structural reason: a visitor has no Malaysian bank account for FPX and usually no local e-wallet, but always has a card. With Malaysia recording 42.2 million foreign visitors in 2025 (a figure that includes day-trippers) and Visit Malaysia 2026 in full swing, tourist-heavy venues in KL, Penang and Langkawi arguably get more from card holds than anyone else.

Whichever rail you choose, write the policy down and show it at booking time. Under the Contracts Act 1950, section 75, and the Federal Court's decision in Cubic Electronics, a forfeited deposit must be reasonable rather than "extravagant and unconscionable", and the Tribunal for Consumer Claims hears "deposit not returned" complaints for an RM5 filing fee. The full legal picture, including what to put in the policy itself, is in our guide to no-show deposits for Malaysian restaurants.

Where ViteUneTable fits, honestly

ViteUneTable is a reservation system, so read this section knowing that. The free version takes unlimited online bookings with 0% commission and no per-cover fees, which replaces the WhatsApp-thread reservation book that makes deposit collection chaotic in the first place. The Pack Standard, at €29 per month excluding tax (about RM134 at early-October 2026 rates), adds automatic email confirmations and reminders; reminders are email only, not SMS or WhatsApp.

For the hold itself, the Standard + Anti No-Show pack at €49 per month excluding tax (about RM226 at early-October 2026 rates) takes a card guarantee at booking: nothing is charged unless the guest fails to show. Being a card rail, it fits exactly the segments this article says card holds fit: fine dining, hotel F&B and tourist-heavy venues whose guests carry cards. Let's be honest about the rest: ViteUneTable does not collect FPX or DuitNow deposits, so if your deposit strategy is RM30 per pax by payment link for kopitiam-priced group bookings, that part stays DIY with a local gateway, with the booking system handling confirmations, reminders and the guest list around it.

Frequently asked questions

Can I take a reservation deposit through DuitNow QR?

You can receive money through DuitNow QR, but it is an instant push payment: there is no pre-authorisation, the funds move immediately, refunds are manual transfers back, and nothing links the payment to a booking. It works at low volume; it does not scale as a deposit rail.

Can I place a hold on a guest's Touch 'n Go eWallet or GrabPay?

No. Malaysian e-wallets, like DuitNow, have no pre-authorisation mechanism. Any e-wallet "deposit" is a completed payment. The only rail in Malaysia that supports holding an amount without charging it is a credit or debit card.

What does it cost to collect an RM500 group deposit?

On vendor pricing pages in early October 2026: RM1.25 flat on Billplz Basic, RM7.50 on Curlec or senangPay FPX (1.5%), RM16 on Stripe (3% + RM1). A plain bank transfer is free but you reconcile and refund by hand.

How long does a card pre-authorisation last?

On Stripe, the accessible pre-authorisation route for Malaysian SMB restaurants, an uncaptured authorisation is typically valid for around 7 days before it expires and releases automatically. For bookings made months ahead, such as CNY reunion dinners, the hold is placed closer to the date or a real deposit is taken instead.

Is a non-refundable deposit legal in Malaysia?

There is no Malaysian statute or published court ruling specifically on restaurant booking deposits. The general framework is section 75 of the Contracts Act 1950 as applied in Cubic Electronics (Federal Court, 2019): a forfeited deposit must be reasonable, not "extravagant and unconscionable", and the Tribunal for Consumer Claims accepts deposit disputes. Clear written terms shown at booking are your practical protection.