You applied for a loan, got asked about your "CCRIS" and "CTOS," and now you're not sure which is which — or which one just cost you the approval. Take a breath. Neither is a secret judge deciding your fate. They're just two records, and once you understand what each one holds, they stop being scary.
What CCRIS actually is
CCRIS stands for the Central Credit Reference Information System. It's run by Bank Negara Malaysia, the central bank — not a private company. Every bank, licensed lender, and most financing institutions in Malaysia are required to report your borrowing to it every month.1
Here's the part people get wrong: CCRIS does not give you a score. It's a factual ledger, nothing more. When a bank pulls your CCRIS, it sees:
- Outstanding credit — every active loan, credit card, and financing facility, and how much you still owe.
- 12 months of payment conduct — for each facility, how many months you were in arrears over the past year. This rolling 12-month window is the heart of the report.1
- Pending and approved applications — recent credit you've applied for or been granted in the last 12 months.
- Special Attention Accounts (SAA) — loans a lender has flagged as impaired and put under special monitoring, usually after repayments have stopped for 90 to 180+ days.1
What CCRIS does not show: your income, your savings, a credit score, court judgments, or bankruptcy status. It's purely your borrowing and repayment picture inside the banking system.
What CTOS actually is
CTOS is a private credit reporting agency, licensed under Malaysia's Credit Reporting Agencies Act. Think of it as the value-added layer on top of the raw facts. It pulls together data from several sources and packages it into a single number and a fuller picture.3
CTOS feeds on:
- CCRIS / BNM banking data — your repayment behaviour.
- Trade references — non-bank creditors like telcos and utilities.
- Legal and bankruptcy records — from the courts, the Insolvency Department, and the Companies Commission (SSM).3
From all of that, CTOS produces the CTOS Score, running from 300 to 850. Higher is better.
| CTOS Score band | Range | What it signals |
|---|---|---|
| Very Poor | 300–528 | Well below average; approvals are difficult |
| Poor | 529–614 | Below average; expect scrutiny |
| Fair | 615–650 | Borderline; may need a stronger application |
| Good | 651–696 | Above average; viable for new credit |
| Very Good | 697–743 | Treated as a prime customer |
| Excellent | 744–850 | Viewed favourably; best rates on offer |
Payment history is the single biggest driver of the score (roughly 45% of it), followed by how much you owe. So the same behaviour that shapes your CCRIS report also moves your CTOS number.5
The differences that matter
| CCRIS | CTOS | |
|---|---|---|
| Who runs it | Bank Negara Malaysia (public) | Private agency |
| Is it a score? | No — factual record only | Yes — 300 to 850 |
| Time window | Rolling last 12 months | Includes older legal records |
| Legal / bankruptcy records | No | Yes |
| Trade references (telco, utilities) | No | Yes |
| Cost to check yourself | Free | Basic report free; full score report ~RM26 |
| Do banks use it? | Yes | Yes |
The short version: CCRIS tells the bank how you've paid. CTOS gives a quick score and flags anything legal. Neither one alone approves or rejects you — the bank reads both alongside your income and commitments.
How to check each — for free
CCRIS (via eCCRIS)
You can pull your own CCRIS report online, free, through BNM's eCCRIS portal. As of 2026, registration is fully digital.6
- Go to eccris.bnm.gov.my and click Register Now.
- Enter your details — full name, MyKad number, date of birth, mobile number, and email.
- Verify your identity with a one-off RM1 transfer to a designated BNM account. It's auto-refunded within two working days.6
- Confirm the OTP sent to your mobile, then set your User ID, password, and multi-factor authentication.
- Once logged in, go to the Enquiry section, choose Self Enquiry – Individual, accept the disclaimer, and download your report.
Can't register online? You can still access CCRIS at physical kiosks in selected AKPK offices.6
CTOS
Download the CTOS app or visit ctoscredit.com.my and register with your MyKad. The MyCTOS Basic report — your basic credit information — is available free (typically twice a year). The full CTOS Score report is a paid product at around RM26.2
How banks read them on a loan application
When you apply, the bank pulls both. Here's what moves the needle:
- Months in arrears on CCRIS — a "1" or "2" against a facility means you were one or two months late. A clean run of "0"s is what lenders want to see.
- A Special Attention Account flag — this is serious. It signals a loan that stopped being repaid and went under recovery. It doesn't automatically block a new loan, but the bank will want an explanation and evidence it's resolved.1
- A low CTOS score or a legal record — a court judgment or insolvency flag on CTOS is a red flag banks weigh heavily.
None of these is an automatic rejection on its own. Banks read the whole file — your income, your debt-service ratio, and the story behind any blemish all count. See our DSR guide guide for how your debt-service ratio fits in.
Common myths, cleared up
"I'm blacklisted by Bank Negara." There is no BNM blacklist. CCRIS is a factual record, not a naughty list — it simply reports what happened. The word "blacklist" gets thrown around, but it isn't a thing that exists.1
"A blacklisted person can never get a loan." Since there's no blacklist, the real question is whether your record shows arrears or a legal flag — and even then, approval depends on the full picture. Many people with a past hiccup still get financing once the issue is settled and time has passed.
"Bad records follow me forever." CCRIS shows a rolling 12-month window of payment conduct. Older arrears roll off as time passes — though a settled overdue can still appear until it drops out of the 12-month view. Legal records on CTOS can stay longer.1
How to repair your record
Realistically, there's no instant fix — but there's a clear path:
- Settle any arrears and Special Attention Accounts first. These carry the most weight.
- Keep paying on time, every month. Since CCRIS runs on a 12-month window, consistent on-time payment steadily replaces the bad months.
- Don't over-apply. A burst of loan applications shows up and looks like distress.
- Check your own report for errors and dispute anything wrong.
- If debt is the real problem, talk to AKPK — the free credit counselling agency set up by BNM. See our AKPK guide guide.
Give it time. Twelve months of clean conduct changes the picture more than any shortcut ever could.
Want to see roughly where you stand before you apply? Run your figures through our eligibility calculator.
This guide is general information, not financial advice, and does not guarantee loan approval. Lending decisions rest entirely with each bank.