LepakLah
Guides

How to Check Your CCRIS and CTOS Credit Report in Malaysia in 2026

CCRIS and CTOS are two different systems answering two different questions, and only one of them gives you a score. Here is how to pull both reports, what the RM1 registration transfer is actually for, and what to do if the data is wrong.

Lepaklah Editorial6 min read
An open laptop on a desk beside printed documents showing charts and figures.
An open laptop on a desk beside printed documents showing charts and figures.

Most Malaysians meet their credit report in the worst possible way: a loan officer glances at a screen, makes a face, and says the application did not go through. By then it is too late to do anything about what is on it.

Checking it yourself takes about fifteen minutes and, for the government-run system at least, costs nothing. The complication is that Malaysia has two systems, and they are not the same thing.

CCRIS and CTOS are not the same system

CCRIS is the Central Credit Reference Information System, run by Bank Negara Malaysia. Every licensed financial institution reports your borrowing and repayment behaviour into it. It shows outstanding facilities, twelve months of repayment conduct, applications you have made, and any special attention accounts.

What it does not contain is a score. CCRIS is a record, not a verdict.

CTOS is a private credit reporting agency. It aggregates CCRIS data with other sources — legal records, trade references, directorships — and assigns a CTOS Score from 300 to 850. That number is what most people mean by "credit score" in Malaysia.

So: CCRIS for the raw repayment record, from the regulator and free. CTOS for the score and the wider picture, from a commercial provider. Look at both — they can disagree, and the disagreement is usually the interesting part.

How to check your CCRIS report for free

The official portal is eCCRIS, at eccris.bnm.gov.my — the only legitimate route to your CCRIS report online. Any site charging you for one is reselling something Bank Negara gives away. Since 18 February 2022, individuals no longer need to visit a branch to register.

Step 1. Go to the eCCRIS portal and select the option to register as a new individual user.

Step 2. Fill in your details exactly as they appear on your MyKad. Mismatched names are the most common point of failure.

Step 3. Complete the one-off RM1 transfer to the designated Bank Negara account shown during registration.

Step 4. Once registration is processed, log in with the credentials you created.

Step 5. View, download or print your report. Bank Negara makes one free CCRIS report available per day, so there is no need to ration your checks.

Bank Negara's own eCCRIS user guide and FAQ walks through the screens in detail if you get stuck partway.

What the RM1 transfer is actually for

It is not a fee. The RM1 transfer verifies your identity: because the payment comes from a bank account already in your name, it confirms to Bank Negara that the person requesting the report is the person it belongs to, without a branch visit.

The RM1 is refunded automatically, within two working days. You do not need to claim it. If it has not appeared after that window, that is when to follow up.

If you would rather skip online registration entirely, self-service kiosks remain available at participating Bank Negara branches. Bring your MyKad, or your passport if you are a foreign national, and you can retrieve the report on the spot. That is a useful fallback if online identity matching keeps rejecting you, which happens occasionally with names recorded inconsistently across institutions.

How to check your CTOS score

CTOS runs its own access route through the CTOS app and website.

A MyCTOS Basic report is free. It gives the outline — enough to see whether anything alarming sits on your file.

The full MyCTOS Score report, which includes the 300 to 850 figure and the factors driving it, is a paid product, typically priced in the mid-twenty ringgit range. Prices change, so check the current rate in the app rather than relying on a figure quoted elsewhere.

One reassurance worth stating plainly: checking your own report does not damage it. A self-check is a soft enquiry with no effect on your score. The enquiries lenders weigh are the ones generated when you apply for credit.

What to do if something on the report is wrong

Errors happen — usually through misapplied payments, accounts settled but never closed properly, or mix-ups between people with similar names and identification numbers.

The key thing about CCRIS is that Bank Negara does not author the data. Every line was submitted by a financial institution. Bank Negara operates the database; it does not adjudicate what goes into it.

So corrections start with the institution that reported the entry. Contact the bank or lender in writing, with documentation showing what actually happened — settlement letters, receipts, statements. The institution submits the correction and it flows through at the next update cycle. CCRIS refreshes monthly, so nothing changes the same afternoon.

For CTOS entries, the dispute runs through CTOS directly, since it is a separate commercial database with its own sources.

Either way, keep every piece of correspondence. A dispute resolved verbally and never documented has a habit of reappearing.

How often is worth checking

Once a year is the minimum. Quarterly is more useful, because CCRIS updates monthly and a three-month gap means each check shows a meaningful block of new repayment data.

There is one moment where you should always check first: before a major application. A home loan, a car loan, a credit card. Pulling your report a month ahead gives you time to fix an error, settle a small outstanding balance, or simply know what the lender will see. Finding a problem at the point of application is finding it too late.

That matters most for property, where a rejected loan can unravel a booking. Our breakdown of the first-home costs the stamp duty exemption does not cover covers the rest of that preparation, and the credit card rule changes that landed in 2026 affect what shows up on your file in the first place.

CTOS's own guidance on how often to check your report makes a similar case, and Bank Negara's announcement on digital eCCRIS registration covers the current access process.

FAQ

Is checking my CCRIS report free?

Yes. Bank Negara Malaysia provides CCRIS reports free through the eCCRIS portal, with one free report available per day. The only payment involved is the one-off RM1 identity verification transfer during registration, which is refunded within two working days.

Does CCRIS give me a credit score?

No. CCRIS contains your credit history — outstanding facilities, twelve months of repayment conduct, applications and special attention accounts — but no score. The 300 to 850 credit score most Malaysians refer to is the CTOS Score, produced by CTOS, a private credit reporting agency.

How do I fix a mistake on my CCRIS report?

Contact the financial institution that reported the entry, not Bank Negara. CCRIS data is submitted by banks and lenders; Bank Negara operates the database but does not amend the underlying records. Provide documentation, keep everything in writing, and allow for the monthly update cycle before the correction appears.

Can I check CCRIS without registering online?

Yes. Self-service kiosks at participating Bank Negara branches let you retrieve your report in person. Bring your MyKad, or your passport if you are a foreign national.

Lepaklah Editorial

Researched and edited by the LepakLah team.

More from the team →
Read us on Google more often.Pick LepakLah as a preferred source and our stories rank higher in your results.
One letter, most Sundays.No noise. Unsubscribe anytime.