CCRIS and CTOS: How Malaysia's Credit Reports Work and How to Check Them

You apply for a home loan, everything looks in order, but the bank rejects the application without much explanation. Behind that decision there are often two names that are rarely mentioned to you openly: CCRIS and CTOS. Both hold a picture of how you manage your money, and you have the right to see what is written in them.

What is CCRIS and who owns it?

CCRIS stands for Central Credit Reference Information System. It is owned and operated by Bank Negara Malaysia (BNM) to help banks manage credit risk. The system processes data received from participating financial institutions and turns it into credit reports.

CCRIS is not a system that gives you a score. It displays raw data about your credit facilities, namely:

• Borrower profile — name, identification number, date of birth and address.
• Credit application details — the amount applied for, the application date and the type of facility.
• Account details — the type of facility, credit limit, outstanding balance, payment pattern (conduct of account) and the status of any legal action.

This information covers credit cards, home loans, personal loans, vehicle hire purchase and other facilities from licensed institutions. It means the bank can see your payment record going back several years, not just your current salary.

How is CCRIS different from CTOS?

Many people think CCRIS and CTOS are the same thing. In reality, one is the source of public data, and the other is a private company that processes that data.

CTOS is a private credit reporting agency licensed under the Credit Reporting Agencies Act 2010 (Act 710). It takes data such as that found in CCRIS, adds other records, and produces a single CTOS Score between 300 and 850 along with a more readable report. According to BNM, there are three approved credit reporting agencies with access to CCRIS: Credit Bureau Malaysia, CTOS Data Systems and Experian Information Services. These agencies may charge for their services, unlike CCRIS, which is free for borrowers.

Feature	CCRIS	CTOS
Owner	Bank Negara Malaysia	Licensed private company
Nature of data	Raw loan records, no score	Report + 300-850 score
Cost to you	Free through eCCRIS	May be charged
Regulation	BNM	Act 710, under the Ministry of Finance
Updates	Displayed on the 10th of the following month	Depends on the source and agency

Why do banks and landlords check these reports?

Every time you apply for credit, the lender wants to estimate the likelihood that you will fail to repay. CCRIS gives them your actual payment history, while the CTOS Score compresses that history into a single number that is easy to compare.

Their scope of use goes beyond banks. CTOS offers a Tenant Screening service specifically for landlords and property agents, allowing them to check prospective tenants — with the tenant’s consent first — before approving a rental. As a result, one small unresolved arrear can have effects far beyond the original bank.

How is the CTOS score calculated?

The CTOS Score ranges between 300 (high risk) and 850 (excellent). The higher the score, the better you are viewed by lenders. According to CTOS, the “Good” range begins at 697.

The score categories according to CTOS are as follows:

Category	Score range	Brief meaning
Excellent	744+	Viewed very favourably by lenders
Very Good	718+	Considered a prime customer
Good	697+	Above average and eligible for new credit
Fair	651+	Below average, less eligible for credit
Low	529+	May face difficulty applying for credit
Poor	300+	Credit applications likely to be affected

The score is not generated at random. CTOS states that five factors contribute to the calculation with the following weightings:

• Payment history — 45%. Whether you pay your loans on time or have ever missed a payment.
• Amount owed — 20%. How much credit you use compared to the limit available.
• Credit mix — 14%. The mix of facility types you hold.
• New credit — 14%. Recent applications and new facilities.
• Length of credit history — 7%. How long you have held credit facilities.

Payment history accounts for nearly half of the score, so paying every instalment on time is the single most effective step to improve your score.

How do you request your CCRIS report?

Since 18 February 2022, Malaysian individuals can register for eCCRIS directly online without having to go to a counter. The steps are as follows:

1. Go to eccris.bnm.gov.my and select new user registration.
2. Fill in personal details such as your name, identity card number, date of birth, phone number and email.
3. Make a RM1 transfer to the designated BNM account via internet banking to verify your identity digitally. That RM1 is automatically refunded within two business days.
4. Once verified, log in to view, download or print your CCRIS report.

Because CCRIS updates are displayed on the 10th of the following month, checking your report every few months lets you track how your payment record develops, especially before applying for a large loan.

For CTOS reports and Scores, you need to deal directly with the agency through its website or app. Remember that private agencies may charge, although some offer a basic check for free.

How do you correct mistakes in the report?

Credit reports are not perfect. A payment that has been settled may still be recorded as outstanding, or an account that is not yours may appear due to an identity mismatch.

For CCRIS, if incorrect information is detected either by a financial institution or raised by the borrower, the reporting financial institution is obliged to correct that information within a reasonable period. Start by contacting the relevant bank or finance company and keep proof of payment.

For CTOS and other agencies, the industry is regulated by the Registrar Office of Credit Reporting Agencies under the Ministry of Finance, which implements and enforces Act 710 and supervises these agencies. The Act gives data subjects the right to access, correct and dispute information about themselves. If a dispute with an agency is not resolved, the issue can be referred to the Registrar Office.

What next?

Check both reports at least once a year, and more frequently before applying for a home, car or credit card loan. Register for your free eCCRIS account first to see the raw data the banks see, then obtain your CTOS report to understand your score and any additional records. If there are mistakes, correct them early because corrections take time and loan applications do not wait. Before proceeding with any important financial decision, verify the current figures directly from BNM’s eCCRIS and licensed credit agencies, because the details can change over time.