Last updated 25 October 2026 · money.com.my Editorial
Every time you apply for a home loan, car loan, or even certain jobs in Malaysia, someone is pulling your credit information. Most Malaysians don't know what that means until a rejection letter arrives.
The two names that come up most often are CCRIS and CTOS. They're frequently lumped together, but they are fundamentally different things — one is a government-run data repository, the other is a private credit bureau that assigns you a score. Understanding the difference isn't just trivia; it changes what you can actually do to improve your standing before your next application.
CCRIS vs CTOS — The Core Difference
| CCRIS | CTOS | |
|---|---|---|
| Run by | Bank Negara Malaysia (BNM) | CTOS Data Systems (private company) |
| What it is | A report of your credit history | A credit score + expanded report |
| Score? | No score — raw data only | Yes, 300–850 range |
| Data sources | Participating financial institutions only (some credit institutions do not take part) | CCRIS data + court records + bankruptcies + trade referees + directorships |
| Who can access it | Participating FIs, you, and approved credit reporting agencies with your consent | Subscribers such as financial institutions, businesses and government agencies, with your consent under the CRA Act 2010, and you |
| Cost to check (yourself) | Free | Free basic (2 a year); full report with CCRIS and score RM27.90 incl. SST |
| How far back | 12 months of repayment history | Settled records stay 24 months from settlement (CTOS FAQ, CRA Act 2010) |
| Where to check | eccris.bnm.gov.my | ctoscredit.com.my (we could not open myctos.com on 17 October) |
The short version: CCRIS tells lenders what you owe and whether you've been paying on time. CTOS takes that and more — including court judgments and bankruptcies — and turns it into a number.
How to Check Your CCRIS Report (Free)
CCRIS is operated by Bank Negara Malaysia and is free to access. Here's how to pull your own report.
Step 1 — Register on e-CCRIS Go to eccris.bnm.gov.my. BNM's online registration is for Malaysian individuals with a MyKad and internet banking: you enter your details and make a one-off RM1 transfer to a designated BNM account, refunded automatically within 2 working days, then use a 6-digit code valid for 7 days. Other users register at a CCRIS kiosk or through BNM's application form.
Step 2 — Log in and request your report Once registered, log in and open your CCRIS report. (The guide's earlier "select 'Request CCRIS Report'" and "generated immediately" are not in BNM's documents and are withdrawn.)
Step 3 — Read the output Your CCRIS report shows every active credit facility you hold at licensed financial institutions — home loans, car loans, personal loans, credit cards, overdrafts. For each facility, it shows:
- Outstanding balance
- Credit limit
- Repayment status for the past 12 months
The repayment status uses a numbered code; the guide has read 0 as no missed payment and higher numbers as months overdue, and a row of zeros is what you want, but we did not find BNM's code table on the pages we hold, so check BNM's guide to reading the report. BNM says the report is a 12-month factual record: settled arrears stop being new but stay in the 12 months, and updates reach CCRIS on the 10th of the following month.
If you prefer to do this in person, BNM lists CCRIS kiosks at AKPK offices nationwide as a way to register and get your report; the guide's earlier statement that BNM's own offices print reports on the spot is not in BNM's pages and is withdrawn.
How to Check Your CTOS Score
Free basic check: Create an account with CTOS (ctoscredit.com.my; the guide's earlier link myctos.com did not open for us on 17 October) and you can get a basic report at no cost, 2 a year. CTOS lists its contents as personal information, directorships and business interests, litigation and bankruptcy, and trade referee listings; it has no score and no CCRIS data.
Full report with CCRIS and score (RM27.90 including SST): This gives you your CTOS Score (300–850), the main factors affecting it (CTOS's sample report has a "What is affecting my Score?" box) and your CCRIS records. If you're planning a major loan application in the next few months, it may be worth the price to know where you stand before the bank does. CTOS notes the score needs recent credit information: an updated credit, default or adverse record in the last 24 months.
Score bands to know (CTOS sample report gauge, November 2023):
- 300–528 — Poor
- 529–650 — Low
- 651–696 — Fair
- 697–717 — Good
- 718–743 — Very Good
- 744–850 — Excellent
The guide's earlier bands ("697–747 Good, 748 and above Very Good") did not match CTOS's gauge. Banks don't publish the exact cutoff they use internally, so the earlier claims that a score below 650 makes approval "significantly harder" and under 600 is "high-risk" are not sourced and are withdrawn.
CTOS score bands at a glance
On the 300–850 scale, CTOS's own gauge shows 697–717 as Good, 718–743 as Very Good and 744–850 as Excellent, with 651–696 Fair, 529–650 Low and 300–528 Poor. Banks rarely publish their internal cutoff, so know your number and your CCRIS record before you apply.
What Lenders Actually Look At
When you apply for a home loan or car loan, the loan officer pulls both. Here's roughly what they're evaluating:
From CCRIS:
- Do you have any overdue payments in the past 12 months? A late month may be a flag; banks publish no tolerance for late months.
- How much of your credit is already utilized? High outstanding balances relative to your income affect your Debt Service Ratio (DSR).
- Do you have multiple active loans? Some banks cap the number of credit facilities they'll count.
From CTOS:
- Is there a court judgment against you? A civil suit or bankruptcy filing is a serious obstacle regardless of your CCRIS record.
- What is your CTOS score? Anything below their internal threshold typically triggers a rejection or a request for a guarantor.
- Are you currently a director of a company with outstanding court action?
A clean CCRIS with no late payments and no CTOS court records gets you to the table. From there, your DSR (total monthly debt repayments ÷ gross income) determines how much they'll lend you. Banks set their own DSR limits (BNM has said it does not prescribe lending limits); 60–70% is a market rule of thumb we could not source.
Two gates, in order
Approval is really two checks. First, your record: a clean CCRIS (no late payments) and no CTOS court judgments gets you to the table — a late month or a civil suit can stop you here. Then the sizing: your DSR, against each bank's own limit (60–70% is a rule of thumb), decides how much they'll actually lend. Fix the record before you worry about the amount.
6 Actions That Actually Improve Your Score
These are ordered by impact — start at the top.
1. Never miss a payment, on anything Payment history is the single largest driver of your CTOS score: CTOS gives it 45% of the score. The guide's earlier "30–50 points" for one late payment is not a CTOS figure and is withdrawn. Set up autopay for every credit facility — card minimums, loans, hire purchases. The minimum payment keeps the "overdue" flag off; paying in full is the goal, but not missing is non-negotiable.
2. Pay your credit card balance in full every month Carrying a balance on your credit card costs you interest (typically 18% annually in Malaysia) and increases the amount you owe, which CTOS counts as 20% of the score ("keep balances low"). The 30% utilisation line is a common rule of thumb, not a CTOS figure. If your credit limit is RM10,000, keeping your statement balance below RM3,000 is one way to apply it.
3. Keep utilization below 30% on every card It's not just your total utilization — individual card utilization matters too. If you have two cards each at RM5,000 limit and one is maxed out, that's a problem even if the other is empty. Spread spending across cards or request a limit increase (without spending more).
4. Do not apply for multiple loans or cards at the same time CTOS describes its "new credit" factor (14% of the score) as whether you have recently been approved for new credit facilities, and advises doing your rate shopping for a given loan "within a focused period of time" and not opening new cards you don't need. The guide's earlier claims that each application is a "hard inquiry" that signals desperation, and that a 14-day window counts as one inquiry, are not in CTOS's or BNM's pages and are withdrawn.
5. Keep your oldest credit accounts open Length of credit history is a real factor. If you have a credit card you don't use much but you've held it for eight years, don't cancel it. The age of your oldest account and the average age of all your accounts both matter.
6. Pay off PTPTN if you're in default PTPTN (the national student loan agency) lists borrowers in CCRIS, and missed payments show in your CCRIS record. PTPTN can restructure your loan: contact it directly to agree a new schedule and get out of arrears. Ignoring it makes things worse.
Common Mistakes That Hurt Your Score
Settling a loan and then closing all your credit accounts. Some people pay off a car loan, feel good about it, and close everything to "start fresh." This actually shortens your credit history length and reduces the types of credit you have — both negative moves. Keep accounts open.
Guaranteeing someone else's loan without tracking it. If you're a guarantor on a family member's or friend's loan and they miss payments, it shows in your CCRIS under your name. You own that risk. Check CCRIS annually even if you have no active borrowing of your own.
Assuming a settled judgment disappears immediately. CTOS records court judgments. CTOS's FAQ says a settled record stays on your report for 24 months from settlement (Credit Reporting Agencies Act 2010), and that you can have a settlement remark added by sending documentary proof such as a letter of settlement or court order; it says updating your record is free and you then receive a free report. Follow up with CTOS after settlement to confirm the status has been updated.
Ignoring small defaults. A RM300 unpaid credit card bill that went to collections can do real damage. Small balances get written off and sold to debt collectors, who report them. No debt is too small to ignore — especially recurring bill accounts like telco and utilities that may go to third-party collection agencies.
No debt is too small to hurt you
A RM300 unpaid card bill sold to a collections agency lands on your report the same way a large default does. Telco and utility accounts that quietly go to third-party collectors are the usual culprits. If you're a guarantor on someone else's loan, their missed payment shows under your name too — check your CCRIS annually even if you have no borrowing of your own.
If You Find an Error in Your Report
Errors happen. A bank may have reported a payment as late when it was on time, or an account that isn't yours may appear in your CCRIS.
For CCRIS errors: The correction starts at the financial institution that reported the data. BNM says only the reporting institutions can change CCRIS entries (BNM intervenes only on request with documentary evidence), and that it will assist with complaints about inaccurate information. In eCCRIS you can select the disputed item and send a data verification request to the institution; BNM's eCCRIS FAQ says feedback normally takes up to 14 days. Follow up until the correction appears in your next CCRIS report.
For CTOS errors: Get your latest report from CTOS, then contact CTOS using the steps on its disputes page. CTOS says wrong information (an account you never opened, someone else's name, a judgment in a lawsuit you were not part of) and outdated negative information can be removed with valid proof, and its FAQ gives a settlement letter or court order as examples of documents. For court record errors (e.g., a judgment that was set aside), provide the relevant court order. The guide's earlier statement that CTOS is "required to investigate disputes within a reasonable timeframe" is not in CTOS's pages and is withdrawn.
Disputes go to different places
Fix a CCRIS error at the bank that reported it (eCCRIS has a verify-and-dispute option that goes to the institution); BNM only consolidates what the banks send. Fix a CTOS error by contacting CTOS with documentary proof such as a court order for judgment errors. Keep every piece of correspondence; if repeated follow-ups fail, BNM's contact centre (BNMTELELINK, 1-300-88-5465) can assist with CCRIS complaints.
Keep records of all correspondence. If a correction isn't made after repeated follow-ups, BNM says it will assist to resolve complaints about inaccurate CCRIS information (contact BNMLINK on 1-300-88-5465), and CTOS's FAQ points complaints about credit reporting agencies to the Registrar of Credit Reporting Agencies (ppapk.treasury.gov.my). The guide's earlier references to BNM's "IFIU" and a "Credit Bureau Malaysia regulatory framework" are withdrawn.
Track Your Credit Ongoing
Checking your credit once is useful. Checking it regularly is how you catch errors early, notice sudden drops, and stay in control heading into any major financial decision.
For more on credit scores and reports, see our guide on how to improve your credit score.
Related Guides
- How to Improve Your Credit Score in Malaysia — practical steps to raise your CTOS score and clean up your CCRIS record
- How to Apply for a Personal Loan in Malaysia — what banks look for in your credit report when you apply
- AKPK Debt Management Programme Malaysia — the free AKPK programme for restructuring debt if your credit report shows you are overcommitted
- Best Balance Transfer Credit Cards Malaysia 2026 — a practical tool for reducing credit card debt that is dragging your credit score down
- Personal Loans in Malaysia: How Rates Work — how banks set your rate once your credit profile is in shape
The information in this guide reflects publicly available details about CCRIS (Bank Negara Malaysia) and CTOS (CTOS Data Systems Sdn Bhd) as read on 17 October 2026. Score bands and fees may change — always verify current details at eccris.bnm.gov.my and ctoscredit.com.my before making financial decisions.
Amendment, 11 October 2026. This guide said PTPTN "reports defaulters to CTOS". PTPTN's own pages say nothing about CTOS: they say PTPTN lists borrowers in CCRIS, and that it may pass names to other third parties for monitoring without naming them. The PTPTN paragraph now says CCRIS. Still outstanding: we have not verified whether any PTPTN information reaches your CTOS report by another route.
Amendment, 17 October 2026 (AKPK). The related-guides line called AKPK's programme "the free government programme". AKPK's pages describe it as an agency set up in April 2006 and do not call it a government programme, so the word is removed (see docs/verification-log/akpk-aeon-oct17/evidence.md).
Amendment, 17 October 2026 (follow-up, evidence batch H). We re-read this guide against CTOS's own site (ctoscredit.com.my home page, credit score report page, FAQs, disputes page and its sample MyCTOS Score report, all fetched on 17 October 2026 and saved in the verification folder), BNM's CCRIS page and eCCRIS user guide and FAQ (saved earlier and hashed in docs/verification-log/guide-followups-oct17/hashes.txt) and BNM's registration guide (not stored; sha256 in not-stored.txt). Corrected: the full CTOS report with CCRIS and score costs RM27.90 including SST (the guide said about RM25); the score bands on CTOS's own gauge are Poor 300-528, Low 529-650, Fair 651-696, Good 697-717, Very Good 718-743 and Excellent 744-850, not "Good 697-747" and "Very Good 748 and above"; CTOS gives payment history 45% of the score, amounts owed 20%, credit history length 7%, credit mix 14% and new credit 14%, and describes new credit as recently approved facilities, so the "hard inquiry" and 14-day-window explanations are withdrawn; the "soft inquiry" answer is reworded around CTOS's five factors; BNM's offices do not print CCRIS reports (BNM lists CCRIS kiosks at AKPK offices), and online registration needs a MyKad, internet banking and a one-off RM1 transfer refunded in 2 working days; CCRIS corrections go through the reporting institution (eCCRIS verify-and-dispute, feedback normally within 14 days), with BNMTELELINK for complaints, and CTOS complaints about credit reporting agencies go to the Registrar of Credit Reporting Agencies, not an "IFIU" or a "Credit Bureau Malaysia regulatory framework"; settled CTOS records stay for 24 months from settlement. Removed as unsourced: a score below 650 or 600 making approval "significantly harder" or "high-risk"; "one late payment can knock 30-50 points off"; "most banks cap DSR at 60-70%" (now a rule of thumb; BNM said in 2016 that it does not prescribe lending limits); "employers, landlords" as CTOS report users (CTOS's sample report lists financial institutions, multinational corporations, government agencies, businesses, legal firms and credit grantors); "the report is generated immediately"; CTOS being "required to investigate disputes within a reasonable timeframe"; "Longer historical view" for CTOS. Held, unchanged: the meaning of the 0, 1, 2 repayment codes, the 30% utilisation line (labelled a rule of thumb), and that the CTOS bands are from a sample report dated November 2023. We could not open myctos.com, so the guide now points to ctoscredit.com.my. Review-round fix (17 October 2026): a "Last updated 17 October 2026" line was added under the frontmatter, as in the other guides in this batch. Evidence and hashes: docs/verification-log/evidence-batch-h-oct17/evidence.md.
Amendment, 25 October 2026 (CCRIS code). The "From CCRIS" list said "Even one "1" (one month late) is a flag", and the callout said "a single "1" or a civil suit can stop you here". Both stated a CCRIS repayment-code reading ("1" means one month late) and a consequence as fact. BNM's code table is not among the pages we hold (evidence batch H, HELD), and banks publish no tolerance for late months, so the code reading is removed: the list now says a late month may be a flag and that banks publish no tolerance, and the callout says "a late month or a civil suit". Removed: the "1" code reading in both places. The earlier paragraph that reads 0 as no missed payment stays labelled as unconfirmed. Evidence: docs/verification-log/followups-batch2-oct25/evidence.md.
Amendment, 30 October 2026 (phone numbers). The Registrar of Credit Reporting Agencies phone numbers were removed; use ppapk.treasury.gov.my. The Bank Negara contact line is named BNMLINK.