Skip to main content
Ccredit.com.my

What Is CCRIS in Malaysia? How to Check Your Credit Record at BNM

CCRIS is Bank Negara Malaysia's credit database. Learn what data it holds, how lenders use it, how to check yours free at eccris.bnm.gov.my, and common misconceptions.

8 min readBeginnerCovers:CCRISCTOS
Written by
Daniel Lim· Risk lens
On this page
  1. What CCRIS Actually Is
  2. What Data CCRIS Contains
  3. How CCRIS Differs from CTOS
  4. How to Check Your CCRIS Report (Free)
  5. When CCRIS Data Updates
  6. What Lenders See When They Check Your CCRIS
  7. CCRIS Data Retention: How Long Records Stay
  8. Common Misconceptions About CCRIS
  9. What to Do If Your CCRIS Has Errors
  10. Key Takeaways

What this guide does

  • Explains what CCRIS contains and how lenders read it
  • Walks through the free eCCRIS check, step by step
  • Shows the real difference between CCRIS and CTOS
  • Covers how to fix errors and how long records stay

What it doesn’t do

  • Predict whether your next loan application will be approved
  • Replace a licensed credit counsellor or AKPK appointment
  • Remove genuine repayment history from your record

If you have ever applied for a loan, credit card, or financing facility in Malaysia, your data is already in CCRIS CCRIS. Every bank and licensed lender in the country reports to it, and every bank checks it before saying yes or no to your application.

Understanding what CCRIS contains — and what it does not — puts you in a stronger position when applying for any form of credit.

What CCRIS Actually Is

CCRIS stands for Central Credit Reference Information System. It is a database operated by Bank Negara Malaysia (BNM), the country's central bank, since 2001.

CCRIS is not a score. It does not rate you as "good" or "bad." It is a factual record of your borrowing activity — what you owe, how much, and whether you pay on time. Think of it as a financial transcript rather than a report card.

Every commercial bank, Islamic bank, development financial institution, and licensed non-bank lender in Malaysia is required to report borrower data to CCRIS monthly.

What Data CCRIS Contains

Your CCRIS report has three main sections:

1. Outstanding Credit

This section lists every active credit facility under your name:

  • Facility type — housing loan, personal loan, credit card, hire purchase, overdraft, trade financing
  • Lender name — which bank or institution granted the facility
  • Approved limit or loan amount — the original amount approved
  • Outstanding balance — how much you still owe
  • Repayment conduct — a 12-month payment history, month by month

The repayment conduct is what most lenders focus on. Each month is marked with a number:

  • 0 — paid on time or no payment due
  • 1 — payment overdue by one month
  • 2 — overdue by two months
  • 3 — overdue by three months or more

A string of zeros tells a lender you are reliable. A string of 1s, 2s, or 3s raises concerns — and the higher the number, the more serious the flag.

2. Special Attention Accounts

If an account is classified as non-performing (typically 90+ days overdue), it appears here. This is the section that creates the most anxiety, but it is not permanent. Once the arrears are settled and the lender updates BNM, the status changes.

3. Credit Applications (Last 12 Months)

Every time a bank or lender pulls your CCRIS to assess an application, that inquiry is recorded here. The record shows:

  • Date of the inquiry
  • Name of the institution
  • Type of facility applied for
  • Status — approved, pending, or rejected

This section covers the most recent 12 months only. Applications older than 12 months drop off automatically.

How CCRIS Differs from CTOS

This is one of the most common points of confusion in Malaysia. They are not the same thing.

CCRIS CCRISCTOS CTOS
Operated byBank Negara Malaysia (government)CTOS Data Systems Sdn Bhd (private company, Bursa-listed)
What it recordsBorrowing data from licensed lenders onlyBorrowing data + legal actions + trade references + directorship + address history
ScoreNo score — factual record onlyCTOS Score (300–850 range)
Data sourcesBNM-regulated institutionsBNM data + court records + utility companies + telcos + trade creditors
How to checkFree via eCCRIS portalFree once per year (MyCTOS Basic) or paid (MyCTOS Score RM27.90)
CoverageBanks & licensed lendersBroader — includes non-bank debts and legal records

In short: CCRIS tells you what the banking system knows about you. CTOS tells you what the banking system and the broader commercial ecosystem know about you.

Most lenders check both.

How to Check Your CCRIS Report (Free)

You can check your CCRIS report at no cost through BNM's eCCRIS online portal.

Step-by-step:

  1. Go to eccris.bnm.gov.my
  2. Register using your MyKad number (12-digit IC) — first-time users need to create an account
  3. Verify your identity — the system uses your MyKad details and may require TAC verification via your registered mobile number
  4. Log in and request your credit report
  5. Download or view your report — it generates as a PDF showing all three sections above

The report is free, and checking your own CCRIS does not appear as an inquiry on your record. It has zero impact on your creditworthiness.

Alternative: Visit BNM in person

If you prefer not to use the online portal, you can visit BNM's headquarters in Kuala Lumpur (Jalan Dato' Onn) or any BNM regional office (Penang, Johor Bahru, Kuala Terengganu, Kota Kinabalu, Kuching) with your MyKad. The report is printed on the spot, free of charge.

When CCRIS Data Updates

CCRIS data is updated on the 15th of each month. This is when lending institutions submit their latest batch of borrower data to BNM.

What this means in practice:

  • If you settle an overdue payment on 10 March, the update may not reflect until 15 April (the next reporting cycle after your bank processes the payment)
  • If you are planning a loan application, checking your CCRIS right after the 15th gives you the most current picture
  • Changes are not instant — expect a 1–2 cycle lag between action and reflection

What Lenders See When They Check Your CCRIS

When a bank or lender pulls your CCRIS (with your authorisation), they see the same report you can view — but they interpret it through their own internal credit-scoring models. They typically focus on:

  1. Payment conduct — How many months show "0" in the last 12 months? Any 1s, 2s, or 3s?
  2. Total exposure — How much do you owe across all facilities? What is your debt-to-income ratio?
  3. Number of recent applications — Multiple applications in a short window can signal desperation or financial stress
  4. Special Attention status — Any accounts flagged as non-performing?

Different banks have different risk appetites. A record with a couple of "1" marks might be acceptable at one bank and a dealbreaker at another. There is no single pass/fail line across the industry.

CCRIS Data Retention: How Long Records Stay

  • Outstanding credit — stays as long as the facility is active
  • Payment conduct — 12-month rolling window (older months drop off)
  • Settled accounts — removed once the facility is fully closed
  • Special Attention Accounts — remain until the lender reports the account as regularised or settled
  • Credit applications — 12 months from the inquiry date

CCRIS does not hold a permanent record of past defaults once settled. This is a critical difference from CTOS CTOS, which retains legal action records for longer periods.

Common Misconceptions About CCRIS

"I'm blacklisted in CCRIS"

There is no blacklist in CCRIS. The system records facts — balances, payment history, application inquiries. A Special Attention Account flag is serious, but it is a status, not a permanent ban. Settle the arrears, and the flag is updated.

"Checking my own CCRIS hurts my score"

Checking your own report through eCCRIS is a self-inquiry and is not visible to lenders. It has no impact whatsoever on how banks view you. You should check at least once a year.

"If CCRIS is clean, I'll definitely get approved"

A clean CCRIS helps, but lenders also assess your income, employment stability, debt service ratio (DSR), and the specific product's eligibility criteria. CCRIS is one input — not the only one.

"CCRIS and CTOS are the same"

They are different systems run by different entities with different data sets. See the comparison table above. If you only check one, you are seeing an incomplete picture.

"My CCRIS updates the moment I pay"

No. Updates happen on the 15th of each month, after your lender submits the latest data to BNM. Depending on when in the month you made your payment and how quickly your lender processes it, the update may take one to two cycles to appear.

What to Do If Your CCRIS Has Errors

Errors are uncommon but they do happen — a payment marked as late when it was on time, a facility you do not recognise, or an outdated Special Attention status.

If you spot an error:

  1. Contact the lender directly — CCRIS data comes from the lender, not from BNM. The lender must submit the correction
  2. Put your dispute in writing — email or letter to the lender's credit administration department, with supporting documents (payment receipts, bank statements)
  3. Follow up after the next reporting cycle — check your CCRIS after the 15th of the following month to see if the correction has been made
  4. Escalate to BNM if the lender does not respond — BNM's LINK or BNMTELELINK (1-300-88-5465) can assist with disputes that lenders fail to address

Key Takeaways

  • CCRIS is a factual borrowing record held by Bank Negara Malaysia — not a score, not a blacklist
  • You can check it free at eccris.bnm.gov.my — and you should, at least once a year
  • Data updates on the 15th of each month, so changes take 1–2 cycles to appear
  • Lenders check your payment conduct, total exposure, and recent application history
  • Most lenders also check CTOS — CCRIS alone does not give the full picture
  • If you find an error, contact the lender first — they are the source of the data

Frequently asked questions

Is there really no blacklist in CCRIS?
Correct. CCRIS is a factual record of borrowing and repayment, not a blacklist. A Special Attention Account flag is serious but reversible — once arrears are settled and the lender updates BNM, the status changes. The 'blacklist' framing is a colloquial Malaysian usage with no formal equivalent in the actual system.
Does checking my own CCRIS hurt my credit?
No. A self-check via eCCRIS is invisible to lenders and has zero impact on how banks assess you. You should check at least once a year, and always before submitting a loan or credit card application.
How often does CCRIS update?
Once a month, on the 15th. Lenders submit their latest borrower data to BNM on this date, so changes you make (settling arrears, closing facilities) typically take one or two reporting cycles to appear on your record.
Are CCRIS and CTOS the same thing?
No. CCRIS is operated by Bank Negara Malaysia and contains data only from BNM-regulated lenders. CTOS is a private company that combines CCRIS data with court records, trade references, telco data and more — and produces a proprietary score (300–850). Most lenders check both.
How do I fix an error in my CCRIS report?
Contact the lender that submitted the incorrect data — not BNM. CCRIS data comes from lenders directly, so they must submit the correction. Put your dispute in writing with supporting documents, then check your CCRIS again after the next reporting cycle (the 15th of the following month). Escalate to BNMTELELINK (1-300-88-5465) if the lender does not respond.

Daniel Lim

Risk lens · Debt management · Hidden costs · Lender risk-assessment criteria

Daniel's lens is what can go wrong and what lenders actually look at — the CCRIS conduct codes, the DSR thresholds, the consequences of one missed instalment.

credit.com.my is independent of every bureau and lender we cover. We never sell leads.

Was this helpful?
FACT-CHECKED · BNMLast verified 25 May 2026

credit.com.my is an independent editorial site — we are not affiliated with any credit bureau or financial institution.