How to Check Your Credit Score Malaysia 2026: CCRIS (BNM) vs CTOS vs Experian — Free Guide + How to Improve a Low Score
74% versus 22%. That's the real-world mortgage approval rate gap between a good CTOS Score and a poor one, per CTOS's own State of Consumer Credit Malaysia study. Same salary, same bank, same day — the number on that report decides which side of the line you land on. And Bank Negara lets you see the underlying data for RM 0 before you apply. Here's exactly how, plus when it's worth paying for the paid tiers on CTOS or Experian.
Quick answer: Start with eCCRIS BNM (free, official BNM portal at eccris.bnm.gov.my — RM 1 identity-verification transfer, refunded within 2 working days). Add MyCTOS Score (RM 27.90/report, includes the 300-850 CTOS Score + civil court records + DCHEQS) before mortgages or loans over RM 100K. Add Experian PCRP (RM 23.90/report, includes i-SCORE + Consumer Advice) for a second opinion on a big-ticket application. Ignore every Facebook and Shopee agent charging RM 50-100 for a 'CCRIS check' — they're all scams. DSR ceilings are set per-bank, not by BNM: expect 60-70% as the practical cap on most retail products.
Score is clean and you're ready to apply for a credit card? RinggitPlus compares eligibility, interest, and rewards across 15+ Malaysian banks on one screen — so you can see which cards typically approve at your income before you submit and eat a hard enquiry that would sit on CCRIS for 12 months.
Compare credit cards — free, 2 minutesThe Four Credit-Reporting Systems in Malaysia — And When Each One Matters
Malaysia has one central credit registry run by Bank Negara (CCRIS) and three licensed Credit Reporting Agencies (CRAs) supervised by the Ministry of Finance under the Credit Reporting Agencies Act 2010: CTOS Data Systems, Experian Information Services Malaysia, and Credit Bureau Malaysia (CBM). Each shows something different. The mistake most first-time checkers make is paying for overlapping products.
| System | Operator | Price (2026) | What's in it | Best for |
|---|---|---|---|---|
| eCCRIS Central Credit Reference Information System | Bank Negara Malaysia (BNM) | FREE (RM 1 verify, refunded) | 12 months of payment history, active credit facilities, and applications made in the last 12 months. No numerical score — raw data only. | Routine self-checks, before any credit-card or personal-loan application |
| MyCTOS Basic ctoscredit.com.my | CTOS Data Systems | FREE (sign-up report) | Identity info (NRD), SSM company records (any directorships), civil court actions, bankruptcy status, and trade references (eTR). No CTOS Score. | Baseline legal + business record check, identity verification |
| MyCTOS Score ctoscredit.com.my | CTOS Data Systems | RM 27.90/report (SST incl.) | Everything in MyCTOS Basic + the CTOS Score (300-850) + a CCRIS copy + credit-utilization analysis + DCHEQS (bounced-cheque records). | Before a mortgage, refinance, or any loan over RM 100K |
| CTOS SecureID Subscription | CTOS Data Systems | RM 9.90/mo (3-mo min) or RM 99/year | 4 MyCTOS Score reports per year + continuous monitoring + fraud alerts + identity theft cover. | Active monitoring if you're a fraud victim or in a long property-purchase process |
| Experian PCRB mycreditinfo.com.my | Experian Malaysia | FREE (one-time on sign-up) | Personal Credit Report Basic — identity summary + trade references. No full i-SCORE. | Free Experian baseline before deciding whether to pay for PCRP |
| Experian PCRP mycreditinfo.com.my | Experian Malaysia | RM 23.90/report (SST incl.) | Personal Credit Report Plus — full i-SCORE + CCRIS data + ANGKASA SPGA + PTPTN + non-banking references + Consumer Advice. | Second opinion after MyCTOS Score for large credit decisions |
| Experian JagaMyID Annual subscription | Experian Malaysia | RM 79.90/year (SST incl.) | 4 PCRP reports per year + JagaMyID monitoring + change-alert notifications. | Annual monitoring — cheaper than four one-off PCRP pulls |
| CBM MySCoRE creditbureau.com.my / MyEG | Credit Bureau Malaysia (Sunway + CGC) | RM 19.44/report | MySCoRE (300-850) + CCRIS + business trade references. Same price via MyEG as direct. | Cheapest paid score; useful cross-check if MyCTOS and Experian disagree |
Sources: bnm.gov.my/ccris (eCCRIS BNM), ctoscredit.com.my (MyCTOS Basic/Score, SecureID), mycreditinfo.com.my (Experian PCRB/PCRP, JagaMyID), creditbureau.com.my and myeg.com.my/services/cbm (CBM MySCoRE). Prices verified July 2026 and include SST where applicable. CTOS, Experian, and CBM are licensed under the Credit Reporting Agencies Act 2010 and supervised by the Registrar of Credit Reporting Agencies at the Ministry of Finance — refer to the BNM Consumer Alert page for the current licensed-CRA list.
Straight to the free BNM portal, no signup required: the official eCCRIS URL is the only sanctioned way to see your CCRIS data. Every other site charging for "CCRIS check" is either unauthorised or fraudulent — we don't earn anything on this link, it's just where readers should go.
Go to eCCRIS BNM (official, free)Register for eCCRIS BNM — Step-by-Step (Free, ~15 Minutes)
The only official portal is eccris.bnm.gov.my. Not any third party, not any 'BNM partner', not any Facebook agent. Bank Negara does not appoint intermediaries and does not authorise anyone to charge you for a self-check.
- Open eccris.bnm.gov.my in a desktop or mobile browser (Chrome, Safari, Firefox all work). Click "Register Now".
- Enter your MyKad number, full name, date of birth, mobile number, and email — the name must match the record at JPN exactly.
- Complete a one-time RM 1 transfer to the designated BNM account through Malaysian internet banking. This is the identity-verification step BNM uses to bind your MyKad to a real bank account under the same name. The RM 1 is auto-refunded within 2 working days.
- Enter the OTP you receive by SMS or email to confirm the registration.
- Set your user ID, password, personal security image + phrase, and three security questions. Save these somewhere durable — password recovery on eCCRIS is slower than a bank's, by design.
- Log in and download your CCRIS report as PDF. The active view shows the last 12 months; save a copy for your bank application file.
Every third-party agent charging a fee to "check CCRIS for you" is fraudulent. What they actually do: (a) collect your MyKad photo and a selfie under the guise of "verifying you" — this data then gets sold or used to open bank accounts in your name, (b) generate a fake "report" from a scraped template that no bank accepts, or (c) genuinely run the check using your credentials, then resell your credit history to unauthorised third parties.
eCCRIS is FREE. Full stop. If online registration fails, the answer is BNMLINK — not a middleman. Never send MyKad photos or selfies to anyone on social media claiming to offer credit checks.
The CTOS Free Tier is NOT What Banks Actually Buy
Ask anyone on r/MalaysianPF where to check their score for free and someone will send you to ctoscredit.com.my. That's fine — but there's a wedge in what "free" actually gets you.
MyCTOS Basic (the free sign-up tier) contains your personal identity data, SSM company records, civil court actions, bankruptcy status, and trade references. What it does NOT contain: the three-digit CTOS Score itself. That score — the 300 to 850 number banks use in their underwriting pre-check — sits behind the paid MyCTOS Score report at RM 27.90.
Practical consequence: a lot of people log into ctoscredit.com.my, see "no adverse records" on the free Basic report, and conclude their score is good. Then they apply for a home loan and get pricing-penalty treatment or a soft-reject because their actual CTOS Score is 620, not the 720+ they assumed. If a bank's underwriter is going to see the score, you want to see it first — that's the whole point of the paid tier before a big application.
The same logic applies to Experian: the free PCRB shows identity + trade references but not the full i-SCORE. You need PCRP at RM 23.90 to see what the bank's Experian overlay sees. RM 50-ish total (MyCTOS Score + Experian PCRP) is the honest all-in cost of "seeing what the bank sees" before you apply for a mortgage.
What CCRIS Doesn't Show — The Real Limits
CCRIS is often described online as "your full financial record". It isn't. It covers credit facilities reported by BNM-supervised financial institutions. The following do not appear on CCRIS:
- Rejected credit-card applications — CCRIS records applications that resulted in an active account. Rejections don't land there directly, though CTOS captures all enquiries (approved or not) in its 12-month enquiry log.
- Unpaid utility bills (phone, water, electricity) — not on CCRIS. They can surface on CTOS or Experian only if the utility hands the account to a debt collector or files a civil suit.
- JPJ summonses and unpaid traffic fines — not on CCRIS. They can block road-tax and licence renewal but don't hit your credit score directly.
- BNPL balances (SPayLater, Atome, GrabPayLater) — historically absent from CCRIS. The Consumer Credit Act 2025 (gazetted 31 December 2025, in force 1 March 2026) now brings BNPL under the Consumer Credit Commission (SKP), and reporting to a licensed CRA is being phased in — industry indications are that SPayLater, Atome, and GrabPayLater have started reporting to CTOS from March 2026. Assume any active BNPL balance is potentially visible to banks doing new underwriting from Q4 2026 on.
- Family loans and Ah Long debt — not on any official system.
- Assets (property, cars, EPF, shares) — CCRIS only shows liabilities. Banks compute DSR from your income, not from your net worth.
If you've ever had a civil court judgment, bankruptcy, or a bounced cheque (DCHEQS), those live on CTOS + Experian but not on CCRIS. For a genuinely complete picture before a mortgage over RM 500K, pull all three.
DSR — How Banks Actually Convert Your Score Into a Yes/No
After CCRIS comes back clean, the second gate is DSR: total monthly debt commitments as a share of net income after EPF, SOCSO, and PCB.
Important context: the 60% DSR ceiling you'll see quoted everywhere is NOT a formal BNM rule. BNM's responsible-financing guidance sets principles but doesn't hard-code a percentage — each bank sets its own internal ceiling. In practice, most Malaysian banks in 2026 use these bands:
- DSR ≤ 60% — norm for gross income below RM 5,000/month (banks are conservative with lower-income applicants).
- DSR ≤ 70% — common for RM 5,000-15,000/month gross income.
- DSR up to 80-90% — possible for RM 20K+/month with strong assets (unencumbered property, sizeable EPF).
Worked example. Gross RM 6,000/month. After EPF (11% = RM 660) + SOCSO (RM 40) + PCB (RM 200) → net RM 5,100. Existing commitments: car RM 800, credit-card minimums RM 300, PTPTN RM 250 = RM 1,350. Current DSR = 1,350 ÷ 5,100 = 26%. Add a proposed RM 400K mortgage at RM 1,900 instalment → new DSR = (1,350 + 1,900) ÷ 5,100 = 64%. Conservative banks (Public Bank, Maybank Islamic) may reject; aggressive mortgage banks (RHB, Hong Leong on middle-income profiles) may approve with additional documentation.
Practical target: keep DSR under 40% for buffer and quick approval. Above 55%, clear small debts (credit cards, small PLs) before applying for a mortgage.
The CCRIS Red Flags Banks Reject On — And How Long Each One Lasts
A clean DSR alone won't save an application if any of the following is in your CCRIS report. These are the categories that trigger auto-rejection at most Malaysian banks.
1. Late payments 3+ months in a row (codes 3-6)
CCRIS uses codes 0 (paid on time) through 6+ (six or more months in arrears) for each credit facility. Any code of 3-6 in the last 12 months triggers auto-reject on mortgages and large personal loans at most banks. Credit cards and small PLs may still approve, at premium pricing.
Recovery timeline: after you clear the arrears and the bank updates the facility to "settled", the negative code moves out of active display within the next 12 months.
2. Restructured loans (RA/R&R)
If you've ever asked a bank to reschedule instalments (extended tenure, lower monthly payment) because of financial stress, the RA/R&R marker stays visible for the entire tenure of the restructured facility. Other banks read this as "customer once distressed".
Recovery timeline: pay off in full + close the account → 12 months later the marker falls out of active display. Practical rule: wait 12-18 months post-RA before applying for new large credit.
3. Bankruptcy
The most severe flag. Once you've been declared bankrupt by the Malaysian Insolvency Department, the status remains referenceable in CCRIS/CTOS for several years after discharge (CTOS can hold legal records for up to 7 years). While still an undischarged bankrupt, no bank will approve new credit.
Recovery timeline: discharge typically 3-5 years under the Insolvency Act 2017 (as amended) → rebuild with a secured or prepaid card → 3-5 more years before mainstream credit reopens.
4. Too many applications in a short window
CCRIS logs every credit application (approved or rejected) in the last 12 months under "Applications". Five or more applications inside 90 days reads as "credit shopping desperation" and prompts banks to apply extra scrutiny.
Recovery timeline: stop submitting new applications → 6 months usually quiets the picture → 12 months fully clears the active view.
How to Improve a Low CTOS Score — Realistic 6-Month Plan
The CTOS Score runs 300 (worst) to 850 (best). Below 650 usually means either rejection or premium pricing on new credit. Realistically you're looking at 6-12 months for a meaningful lift and 24 months for full recovery from a low band. The six actions that actually move the number, in order of impact:
Set standing instructions or auto-debits for every instalment (credit cards, PLs, car, mortgage, PTPTN). Pay credit-card minimums at least 7 days before statement due. This eliminates the "one late month" that alone can drop a CTOS Score 30-50 points, and produces a clean run of code-0 entries across the CCRIS 12-month window.
Utilisation = (card balance ÷ total limit) × 100%. Banks read this through CCRIS. Target: below 30%. Example: if your total limit across all cards is RM 20,000, keep the total statement balance under RM 6,000. Faster method: pay twice per month (mid-cycle + statement date) so the average balance stays low even if you spend more.
Average length of credit history is a real factor in CTOS Score. Closing a card you've held for 10 years amputates that history. Keep at least one legacy card open — use it once a month for a small auto-charge and pay in full.
If your eCCRIS report shows an account you don't recognise, or an arrears code for a loan you paid on time, file a written dispute with the reporting bank. Under BNM's Financial Consumer Protection guidance the institution has 14 working days to investigate. For CTOS or Experian errors, use the dispute tools inside each portal — the CRAs have a 30-day statutory correction window.
Every application shows up in CCRIS Applications for 12 months and in CTOS enquiries for 12 months. Five applications in 3 months is enough to drop a CTOS Score 50-100 points on its own, independent of whether they were approved. Consolidate: use an aggregator (RinggitPlus, iMoney) that shows likely approval before you submit.
An old default that shows "unsettled" on CCRIS blocks large new credit even years later. Contact the bank, negotiate a settlement (they often accept a partial payment on written-off accounts), and make sure they update the account status to "settled" in the CCRIS submission. Then wait 12 months for the marker to fall out of active display.
What NOT to do: don't open 3-5 new cards at once "to build credit" — every application is a hit against your score. Don't pay any agent claiming to "remove CCRIS records" — BNM records cannot be removed by any third party, and the offer itself is a scam. Don't cancel a low-fee card the day you pay it off — you lose the utilisation buffer and the account age.
Which Report to Pull — Match It to the Decision You're Making
Routine self-check (every 3-6 months) — eCCRIS only
Use eCCRIS BNM (FREE). Routine financial hygiene — confirm no unfamiliar accounts, make sure your on-time payments are being recorded correctly. No reason to pay for CTOS or Experian unless you're planning a big application.
Before a credit card or small PL (RM 20K-50K) — eCCRIS is enough
Use eCCRIS BNM (free). For credit cards and personal loans under RM 50K, most banks rely on CCRIS + minimum-income screen. Confirm CCRIS is clean, no clustered applications in the last 3 months, then apply through an aggregator so you don't burn a hard-enquiry slot on a likely-rejected application.
Before a mortgage RM 300K+ or refinance — eCCRIS + MyCTOS Score
Use eCCRIS (free) + MyCTOS Score (RM 27.90). Mortgages get cross-checked against civil litigation and bankruptcy records that CCRIS doesn't display. MyCTOS Score also gives you the actual 300-850 number so you know where you stand before the bank runs its own official enquiry. RM 27.90 is cheap insurance against a rejected mortgage sitting on CCRIS for 12 months.
Large credit, business guarantor, or commercial lease — eCCRIS + MyCTOS Score + Experian PCRP
Pull all three. For mortgages over RM 1 million, commercial leases, or acting as guarantor on someone else's business loan, you need the complete picture. Experian PCRP (RM 23.90) adds i-SCORE + Consumer Advice + cross-references that MyCTOS Score may miss. Total spend RM 51.80 — trivial against the financial exposure being underwritten.
Active monitoring (fraud victim or long property process) — CTOS SecureID or Experian JagaMyID
CTOS SecureID at RM 99/year OR Experian JagaMyID at RM 79.90/year. Both give 4 reports/year + change alerts (e.g., if someone applies for a card using your MyKad). Choose SecureID if you prioritise the CTOS Score view + litigation monitoring; choose JagaMyID if you prefer i-SCORE + the cheaper price point.
Score checked, ready to apply? The single-highest-friction moment in this whole process is a rejected application that leaves a CCRIS trail. RinggitPlus routes your details through a soft-eligibility pre-check across 15+ Malaysian banks — you see which cards are likely to approve before you submit, so your first hard enquiry lands on a card that actually says yes.
Find cards that match your score — free eligibility checkFAQ
Further reading on SmarterPik: Best Personal Loan Malaysia 2026 — compare rates across 15+ banks before you file the application that adds a hard enquiry to CCRIS. Best Credit Card Malaysia 2026 — pick the card that matches your score band and income. Cara Semak Skor Kredit Malaysia (BM version) — the same guide for Bahasa Malaysia readers. Personal Loans Without a Payslip 2026 — relevant if you're self-employed or freelance and worried about how banks read a variable-income CCRIS profile.
Last updated: July 2026. Pricing for MyCTOS, Experian PCRP, and CBM MySCoRE verified directly against ctoscredit.com.my, mycreditinfo.com.my, and creditbureau.com.my. eCCRIS registration procedure sourced from BNM's official eCCRIS digital-registration press release. DSR percentages are industry practice, not a BNM regulation — always confirm with the specific bank. This content is educational only and does not constitute personal financial advice. Always check the official portals for current pricing and terms.