CCRIS vs CTOS: What's the Difference and How Both Affect Your Home Loan

When you apply for a home loan in Malaysia, your lender pulls two credit checks: one from CCRIS and one from CTOS. These are not the same system, they do not contain identical information, and a clean record in one does not guarantee a clean record in the other. Understanding what each report shows, and how a bank reads it, gives you a concrete prep checklist before you apply.

What is CCRIS?

CCRIS stands for Central Credit Reference Information System, operated by Bank Negara Malaysia (BNM) since 1982. Every licensed financial institution in Malaysia, including commercial banks, Islamic banks, and development financial institutions, is required by law to submit your credit data to CCRIS each month.

Your CCRIS report contains:

• Outstanding credit facilities: every loan, credit card, hire-purchase, and overdraft currently active in your name, including the credit limit, outstanding balance, and monthly instalment amount.
• 12-month repayment history: a grid showing whether each instalment was paid on time (coded “0”), one month late (“1”), two months late (“2”), and so on.
• Special Attention Accounts (SAA): facilities flagged by the bank for restructuring, rescheduling, or close supervision due to financial stress.
• Applications in the last 12 months: every credit application you made, whether approved or rejected.

CCRIS does not generate a credit score. It is a raw factual record. The bank officer or credit analyst interprets the data manually against their internal scoring model.

You can access your own CCRIS report for free at any time via the eCCRIS portal or at any BNM branch. There is no charge to check your own report.

What is CTOS?

CTOS is Malaysia’s largest private credit reporting agency, regulated under the Credit Reporting Agencies Act 2010 by the Ministry of Finance. Unlike CCRIS, CTOS sources information from a wider range of data points:

• CCRIS data (CTOS is licensed to access BNM’s system)
• Legal proceedings: suits, judgments, and bankruptcy petitions
• Trade references submitted by businesses
• Directorship and business ownership records
• Telecommunications and utility defaults in some cases

On top of this broader dataset, CTOS produces a MyCTOS Score, a three-digit number ranging from 300 to 850. The higher the score, the lower the perceived credit risk.

CTOS Score Band	Risk Category	Typical Lender Interpretation
750 to 850	Excellent	Strong approval probability, competitive rate offered
697 to 749	Good	Approved in most cases, standard terms
650 to 696	Fair	Approved with possible conditions or lower loan amount
500 to 649	Weak	High scrutiny, may require guarantor or larger down payment
300 to 499	Poor	Likely rejection by most banks

CTOS is not free by default. You can request one free MyCTOS Score report per year via the CTOS website, with additional checks charged at a fee. Some banks and property developers offer a complimentary check as part of their application process.

How Are They Different?

The clearest way to see the distinction is side by side:

Feature	CCRIS	CTOS (MyCTOS)
Operator	Bank Negara Malaysia (government)	CTOS Data Systems (private, MOF-regulated)
Legal basis	BNM Act	Credit Reporting Agencies Act 2010
Data sources	Licensed financial institutions only	BNM/CCRIS + courts + trade + business records
Credit score	None (raw data only)	MyCTOS Score (300 to 850)
Repayment history	12 months	Varies, can go further back
Legal record visibility	No	Yes (court judgments, bankruptcy)
Free self-check	Yes, via eCCRIS	One free report per year
Who must submit data	All BNM-licensed lenders	Voluntary contributors (banks, telcos, trade)

How Lenders Use Both Reports Together

When a bank processes your home loan application, the credit officer typically runs both checks simultaneously. Here is how each report informs the decision.

Reading CCRIS

The officer scans three things first:

1. Repayment grid: Any “1” or higher in the last 6 months is a yellow flag. A string of “2s” or a persistent pattern of late payments is often an instant rejection signal because it suggests current cash flow stress, not a one-off incident.
2. Special Attention Accounts: A single SAA entry can override an otherwise clean record. SAAs signal that another lender already has concerns about this borrower’s ability to service debt.
3. Outstanding obligations: All active facilities are added together to calculate your Debt Service Ratio (DSR). If your total monthly debt commitments, including the new home loan, exceed 60 to 70 percent of your gross monthly income, most banks will decline regardless of your payment history.

Reading CTOS

The CTOS report answers questions CCRIS cannot:

• Has this person ever been sued or had a court judgment recorded against them?
• Are there active bankruptcy proceedings?
• Does the applicant have undisclosed business liabilities as a director?

A borrower can have a perfectly clean CCRIS report and still be flagged by CTOS if they have an outstanding court judgment from a utility dispute or a business that went into receivership.

Banks also use the MyCTOS Score as a triage filter. Applicants below around 650 may be declined before the file reaches a full manual review.

Why You Can Have a Problem in One But Not the Other

These two systems are complementary. Common divergence scenarios:

• Clean CTOS, problematic CCRIS: No legal issues, but consistently one month late on a personal loan. CCRIS records the payment pattern; CTOS may not.
• Clean CCRIS, problematic CTOS: No missed bank repayments, but a former business partner obtained a court judgment three years ago. CTOS flags this; CCRIS does not.
• Both clean, loan still declined: DSR is too high from total existing debt, or income documentation is insufficient. Credit health is only one factor in the approval decision.

Pre-Application Preparation

The standard advice to “maintain a good credit score” is too vague to act on. Here is what actually moves the needle:

Six to twelve months before applying:

• Pull your free CCRIS report via eCCRIS and dispute any incorrect entries directly with the submitting institution.
• Pull your CTOS report and check for resolved court records that may still show as active. Raise disputes with CTOS directly.
• Calculate your DSR: total monthly loan instalments divided by gross monthly income. If the result exceeds 50 percent before the new home loan is added, reduce existing debt first.
• Pay down revolving credit balances rather than making minimum payments only. High credit card utilisation raises your outstanding balance on CCRIS.

Three to six months before applying:

• Avoid new credit applications of any kind. Each application is recorded in CCRIS and can signal financial stress to a reviewing officer.
• Do not close old accounts with clean recent payment history. The track record is more valuable than a zero balance with no history.

AKPK (Agensi Kaunseling dan Pengurusan Kredit) offers free financial counselling for first-time buyers who need help reading their CCRIS report or calculating their DSR position before applying.

Key Takeaways

• CCRIS (BNM) shows 12 months of repayment history for all bank facilities. No score is generated.
• CTOS (private, MOF-regulated) aggregates CCRIS data plus court records and business information into a MyCTOS Score of 300 to 850.
• Banks use both: CCRIS to calculate DSR and assess repayment behaviour, CTOS to surface legal and business exposure.
• Target a CTOS score above 697 and a CCRIS grid with no entries above “1.”
• DSR is equally important. A perfect credit record will not save an application if total monthly obligations exceed 60 to 70 percent of gross income.
• Check both reports six months before applying, fix errors early, and avoid new credit applications in the lead-up period.

Learn more about property affordability and financing in Malaysia or read our guide on how home loans work in Malaysia and DSR calculation before applying.

Frequently Asked Questions

Does checking my own CCRIS or CTOS report affect my home loan application? No. Self-initiated checks are classified as “soft inquiries” and are not visible to lenders. Only applications you make for credit facilities appear on CCRIS as formal applications.

How long does a missed payment stay on CCRIS? CCRIS shows 12 months of repayment data on active accounts. A late payment exits the visible window once 12 months of new data replace it. Closed accounts may be retained for up to 5 years in the system.

Can I get a home loan with a CTOS score below 650? Difficult but not impossible. Development financial institutions and co-operative lenders sometimes have more flexible criteria. Expect higher scrutiny, a possible joint applicant or guarantor requirement, and less favourable terms. Fixing the underlying issues first is the more reliable approach.

What is a Special Attention Account and how serious is it? An SAA is a flag your existing lender applies when a facility is under close monitoring, usually due to missed payments or a restructuring request. Even a single SAA is treated as a significant risk signal and can result in an outright decline at many banks.

Do CCRIS and CTOS share the same data? Partially. CTOS is licensed to pull CCRIS data and incorporates it into MyCTOS reports. CTOS also adds court records, trade references, and business data that CCRIS does not hold. The two reports overlap but are not identical.