Most home loan rejections in Malaysia are not caused by insufficient income. They are caused by credit issues. Banks run your CCRIS and CTOS reports before they even glance at your salary slip. A borrower earning RM15,000/month with a CCRIS conduct code of "2" will be rejected faster than a borrower earning RM5,000/month with a clean record. Income determines how much you can borrow. Credit history determines whether you can borrow at all.
If you have ever missed a payment — on a credit card, personal loan, car financing, or even PTPTN — it is recorded. Banks see it. And most will not tell you why your application was declined, leaving you to apply again at another bank with the same unresolved red flags. This guide explains exactly what banks check, what triggers automatic rejection, and how to fix your credit systematically before applying.
What Is CCRIS?
CCRIS stands for Central Credit Reference Information System. It is operated by Bank Negara Malaysia (BNM) and serves as the central database for all credit information reported by financial institutions in Malaysia.
Every bank, licensed moneylender, and development financial institution in Malaysia is required to report your borrowing activity to CCRIS. When you apply for a home loan, the bank pulls your CCRIS report to see your full credit history.
What CCRIS Shows
Your CCRIS report contains five sections:
| Section | What It Shows |
|---|---|
| Outstanding credit | All active loans, credit cards, overdrafts — with current balances and approved limits |
| 12-month payment history | Monthly conduct codes (0-9) for each facility over the last 12 months |
| Special attention accounts | Accounts flagged for restructuring, rescheduling, or being under BNM's watch |
| Credit applications | All loan/credit applications made in the last 12 months, including approvals and rejections |
| Legal action | Any legal proceedings initiated by financial institutions against you |
CCRIS Conduct Codes
The 12-month payment history is the most critical section. Each month is assigned a conduct code:
| Code | Meaning | Impact on Home Loan |
|---|---|---|
| 0 | No arrears — payment made on time | No issue |
| 1 | 1 month in arrears | Warning flag — some banks tolerate a single old "1" |
| 2 | 2 months in arrears | Likely rejection at most banks |
| 3 | 3 months in arrears | Rejection at all conventional banks |
| 4-8 | 4-8 months in arrears | Rejection — indicates chronic default |
| 9 | Bad debt / written off by the lender | Automatic rejection — account has been classified as non-performing |
A clean CCRIS record means 12 consecutive months of "0" across all facilities. That is the benchmark. Anything else requires explanation, and most banks would rather decline than investigate.
How to Access Your CCRIS Report
Two options:
- iCCRIS — Free online access at iccris.bnm.gov.my. Requires MyKad and registered mobile number. Results are instant.
- eCCRIS — Available at eccris.bnm.gov.my. Also free. Alternative portal with similar functionality.
You can also visit any BNM branch in person with your MyKad and request a printed report at no charge. Check your CCRIS at least 3 months before applying for a home loan. If there are issues, you need time to resolve them.
What Is CTOS?
CTOS is a private credit reporting agency — the largest in Malaysia. While CCRIS is operated by the central bank and limited to banking data, CTOS aggregates information from multiple sources to produce a comprehensive credit profile and a numerical credit score.
CTOS Score Components
Your CTOS score ranges from 300 to 850 and is calculated from five weighted factors:
| Factor | Weight | What It Measures |
|---|---|---|
| Payment history | 45% | On-time vs late payments across all facilities |
| Amounts owed | 20% | Total outstanding debt relative to approved limits (utilization) |
| Length of credit history | 15% | How long you have had credit accounts open |
| Credit mix | 10% | Variety of credit types (mortgage, car loan, credit card, personal loan) |
| New credit | 10% | Recent credit applications and newly opened accounts |
Payment history dominates at 45%. A single late payment has more impact on your score than maxing out a credit card. This is why the first step in credit recovery is always making every payment on time, every month, without exception.
CTOS Score Bands
| Score Range | Rating | Home Loan Implication |
|---|---|---|
| 750-850 | Excellent | Best rates, fastest approvals, preferred terms |
| 697-749 | Good | Approved at most banks with standard terms |
| 651-696 | Fair | Approved at some banks, may face higher spreads or additional conditions |
| 300-650 | Poor | Declined at most banks — credit repair needed before applying |
How to Check Your CTOS Score
Visit ctos.com.my and sign up for a MyCTOS report at RM24.85 per report. The report includes your credit score, CCRIS data, directorships, legal cases, trade references, and address history.
CTOS also offers a subscription plan (MyCTOS Score) that provides ongoing score monitoring. If you are in the middle of a credit recovery plan, the subscription is worth it — you can track your score improvement month by month.
What Moves Your CTOS Score
Not all actions have equal impact. Because payment history carries 45% weight, a single late payment can drop your score by 30-80 points. Conversely, 3-6 months of perfect payments can recover 40-60 points. Here is the approximate impact of common actions:
| Action | Approximate Score Impact | Recovery Time |
|---|---|---|
| One late payment (30 days) | -30 to -80 points | 6-12 months of on-time payments |
| Paying down credit card from 80% to 30% utilization | +20 to +40 points | Reflected within 1-2 months |
| Settling an account in collections | +10 to +30 points | 1-3 months after settlement is reported |
| Opening a new credit card (new credit inquiry) | -5 to -15 points | 3-6 months |
| Closing your oldest credit account | -10 to -25 points | Permanent — cannot undo |
| Disputing and removing an incorrect negative entry | +20 to +50 points | 14-30 days after removal |
These are estimates — CTOS does not publish exact scoring mechanics. But they are directionally accurate based on observed score movements across borrowers.
CTOS Data Sources
Unlike CCRIS (which only covers banking data), CTOS pulls from:
- CCRIS (Bank Negara)
- Court records (civil and bankruptcy proceedings)
- Trade references (telco, utility companies)
- Company registry (SSM) records
- Public records and gazette notices
This means a default on your Unifi bill, a bounced cheque from 2019, or a forgotten Maxis contract can appear on your CTOS report — even if your CCRIS is clean.
What Banks Actually Look At
Banks do not simply check your score and approve or decline. They run through a decision matrix that weighs multiple factors. Here is what triggers automatic rejection versus what triggers a warning that a credit officer might override.
| Factor | Auto-Rejection | Warning (Case-by-Case) | No Issue |
|---|---|---|---|
| CCRIS conduct code | Any "2" or above in last 12 months | Single "1" from 6+ months ago | All "0" for 12 months |
| CTOS score | Below 600 | 600-696 | 697 and above |
| Legal proceedings | Active lawsuit from a financial institution | Settled lawsuit (still on record) | No legal proceedings |
| Bankruptcy | Active bankrupt status | Discharged bankrupt (within 5 years) | Never declared bankrupt |
| PTPTN default | Active PTPTN blacklist | PTPTN in repayment (arrears cleared) | PTPTN fully settled or never taken |
| Credit card utilization | Above 90% across all cards | 50-90% utilization | Below 50% utilization |
| Multiple recent applications | 5+ loan applications in last 3 months | 3-4 applications in last 3 months | 1-2 applications |
| Special attention account | Currently flagged | Previously flagged, now resolved | Never flagged |
Key points:
- PTPTN is a common hidden blocker. If you have outstanding PTPTN loans in default, you are on the blacklist. Banks check this. Settle your arrears or enter a formal repayment arrangement with PTPTN before applying.
- Multiple applications hurt your profile. Every loan application shows up in CCRIS. Applying at 6 banks in desperation makes the 7th bank assume everyone else already rejected you. Limit your applications to 2-3 banks, and only apply after confirming your credit profile is ready.
- Credit card utilization above 50% signals financial stress to credit algorithms, even if you pay the full balance each month. The utilization snapshot is taken at statement date, not after payment.
Score Thresholds by Bank
Banks do not publish exact credit score thresholds — these are internal risk parameters that change periodically. However, industry patterns are consistent enough to provide a general guide:
| Bank Category | Banks | CTOS Score Threshold | CCRIS Tolerance | Notes |
|---|---|---|---|---|
| Tier 1 | Maybank, CIMB, Public Bank | 700+ | Zero tolerance for any late payment code in last 12 months | Strictest criteria, best rates. Public Bank is known for particularly rigid credit assessment. |
| Tier 2 | RHB, Hong Leong, AmBank | 680+ | May overlook a single "1" from 6+ months ago if rest of record is clean | Slightly more flexible, competitive rates. Good option if you have a minor historical blemish. |
| Tier 3 | Bank Rakyat, MBSB, Affin Bank | 650+ | More flexible, especially for government servants with steady income | Higher rates (typically +0.10-0.30% spread vs Tier 1). Consider these if Tier 1-2 decline. |
Strategy based on your score:
- 750+: Apply at Tier 1 banks first. You will likely get the best rates and can negotiate spreads.
- 697-749: Apply at Tier 1 and Tier 2 banks simultaneously. You may get approved at both, giving you leverage to negotiate.
- 650-696: Focus on Tier 2 and Tier 3 banks. Do not waste an application at Public Bank — the rejection will add another inquiry to your CCRIS.
- Below 650: Do not apply yet. Follow the 30/60/90-day recovery plan below. Every rejected application makes your next application harder.
The 30/60/90-Day Credit Recovery Plan
If your credit profile has issues, do not apply for a home loan yet. Every rejection adds a mark to your CCRIS and erodes your CTOS score. Instead, execute this systematic recovery plan.
Days 1-30: Assess and Stop the Bleeding
Week 1: Pull your reports.
- Get your CCRIS report via iCCRIS (free)
- Get your CTOS report at ctos.com.my (RM24.85)
- List every negative item: late payment codes, outstanding arrears, legal actions, special attention flags, high utilization accounts
Week 2: Bring every account current.
This is the single most important step. Pay the minimum due on every credit card, loan, and financing facility you have. If you can only afford minimums, pay minimums. The goal is to stop new "1" codes from appearing on your next CCRIS cycle.
| Priority | Action | Timeline |
|---|---|---|
| 1 | Pay all overdue credit card minimums | Immediately |
| 2 | Pay all overdue loan installments | Within 7 days |
| 3 | Contact lenders for accounts in "2" or "3" arrears to arrange catch-up payments | Within 14 days |
| 4 | Check PTPTN status — clear blacklist if applicable | Within 14 days |
Week 3-4: Reduce exposure.
- Cancel unused credit cards. Each open card counts toward your total credit exposure, and cards you do not use can still hurt your utilization ratio if they have annual fees that go unpaid.
- Set up auto-debit (standing instruction) for every remaining account. Late payments after this point are unacceptable — you need 12 months of clean conduct codes, and the clock resets with every miss.
- Do NOT apply for any new credit. No new credit cards, no personal loans, no hire purchase. Every application adds an inquiry to CCRIS.
Days 31-60: Clean Up
Settle arrears fully where possible.
If you have an account showing "1" or "2" conduct codes, the fastest way to remove the damage is to bring the account fully current (not just minimum payment). If the arrears are on a small facility — a RM2,000 credit card balance or a RM5,000 personal loan — consider settling it entirely. Closed accounts with zero balance look better than open accounts with a history of arrears.
Dispute incorrect entries.
CTOS allows you to dispute any entry you believe is inaccurate. Common disputes:
- Settled debts still showing as outstanding
- Accounts belonging to someone else (identity confusion)
- Legal cases that were dismissed or withdrawn
- Incorrect facility amounts or limits
File disputes through CTOS Data Management. Processing takes 14-21 days. CTOS will contact the data provider to verify. If the entry is confirmed as incorrect, it will be amended or removed.
Pay down credit card balances to below 30% utilization.
Credit card utilization is calculated as: Outstanding Balance ÷ Credit Limit × 100
| Utilization | Effect on Score |
|---|---|
| 0-30% | Positive — shows controlled credit usage |
| 31-50% | Neutral — acceptable but not optimal |
| 51-75% | Negative — signals reliance on credit |
| 76-100% | Strongly negative — near-maxed cards trigger risk flags |
If your credit limit is RM10,000 and your outstanding balance at statement date is RM7,500, your utilization is 75%. Even if you pay it in full before the due date, the 75% utilization has already been reported to CCRIS and CTOS at statement date. Strategy: make a payment before the statement date to bring the reported balance below 30%.
Settle small debts to reduce total commitments.
Every active loan reduces your Debt Service Ratio (DSR). Settling a RM500/month car loan frees up RM500/month in borrowing capacity — potentially adding RM100,000+ to your eligible home loan amount.
Days 61-90: Build and Apply
Verify your CCRIS shows improvement.
Pull your CCRIS report again. You need at least 3 consecutive months of "0" conduct codes across all facilities. If your recovery started at Day 1 and you have not missed a single payment since, you now have 3 clean months. Some banks want 6 months. If your previous conduct codes included a "2" or higher, consider waiting until you have 6 consecutive "0" months.
Check your updated CTOS score.
Your score should have improved from the combination of: on-time payments (45% weight), lower utilization (20% weight), and fewer recent applications (10% weight). Compare your new score against the bank tier thresholds above.
If your score is at or above threshold — apply strategically.
- Apply to 2-3 banks maximum, based on your score tier
- Apply within a 14-day window — multiple applications within a short period are often treated as a single inquiry for scoring purposes
- Prepare full documentation: latest 3 months payslips, 6 months bank statements, EPF statement, CCRIS printout, CTOS report
If your score is still below threshold — continue building.
Do not apply. Every rejection costs you an inquiry mark and potential score reduction. Continue making on-time payments for 3-6 more months. Each month of clean conduct codes replaces an older negative month in the 12-month CCRIS window.
Days 90+: Maintain and Monitor
The 30/60/90-day plan gets you to application-ready. But credit discipline does not end at Day 90.
- Keep all payments on time. Every single month of clean conduct codes strengthens your next application.
- Keep credit card utilization below 30% at statement date.
- Do not open new credit facilities unless necessary.
- Check your CTOS score quarterly (or subscribe to score monitoring).
After 12 months of unbroken "0" conduct codes, your CCRIS will show a perfect 12-month record. At that point, even a previous "2" or "3" from 13 months ago will have dropped off the report entirely. This is the cleanest possible position from which to apply.
Recovery Timeline: How the CCRIS Window Shifts
To understand why timing matters, consider how a borrower's CCRIS 12-month history evolves. Assume they had a rough patch (conduct codes "1" and "2") and started recovery in Month 1:
| Month | CCRIS 12-Month Window (oldest → newest) | Consecutive Clean Months | Bank Assessment |
|---|---|---|---|
| Start | 0-0-1-1-2-1-0-0-1-0-0-1 | 1 | Auto-reject |
| Month 3 | 1-2-1-0-0-1-0-0-1-0-0-0 | 3 | Risky — Tier 3 might consider |
| Month 6 | 0-0-1-0-0-1-0-0-0-0-0-0 | 6 | Borderline — Tier 2-3 possible |
| Month 9 | 0-0-1-0-0-0-0-0-0-0-0-0 | 9 | Competitive — Tier 1-2 possible |
| Month 12 | 0-0-0-0-0-0-0-0-0-0-0-0 | 12 | Clean record — apply anywhere |
The key insight: every month you wait, the worst month in your history drops off the trailing edge. You do not need to "fix" old entries — you outrun them. But only if you do not create new ones.
Cost of impatience: If this borrower applied at Month 3 and got rejected, that rejection appears in Section D (Credit Applications) of their CCRIS for the next 12 months. When they apply again at Month 9 with a much cleaner record, the bank still sees the earlier rejection and asks: "Why were you declined 6 months ago?" The rejection itself becomes a mark against them.
How to Read Your CCRIS Report
Your CCRIS report is divided into clear sections. Here is what each one means and what to look for:
Section A: Outstanding Credit
Lists every active facility (loan, credit card, overdraft, trade financing) with:
- Lender name — which bank or institution
- Facility type — term loan, revolving credit, hire purchase, etc.
- Approved limit / original amount — the total facility size
- Outstanding balance — what you currently owe
- Collateral type — secured (property/vehicle) or unsecured
What to check: Ensure every listed facility is actually yours. Look for facilities you do not recognize — this could indicate identity fraud or data errors. Also verify that settled facilities are marked as closed, not still showing an outstanding balance.
Section B: Payment History (Conduct Codes)
A 12-column grid showing your conduct code for each of the last 12 months, for each facility. This is the section banks spend the most time on.
What to check: Scan for any code other than "0". A single "1" from 8 months ago is manageable. A pattern of "1-1-0-0-1-0-1" across different months signals chronic payment difficulty — even though no single month exceeds "1", the pattern tells the bank you are an unreliable payer.
Section C: Special Attention Accounts
Accounts flagged by BNM for restructuring, rescheduling, or being under watch. This section may show facilities where you negotiated a repayment plan with the bank.
What to check: If you had a loan restructured (e.g., during COVID-19 moratorium), it may appear here. Ask the bank whether the restructuring has been formally concluded and the flag removed. Some borrowers discover that a moratorium they thought was routine was actually classified as a restructuring — which carries more weight in credit assessment.
Section D: Credit Applications
Lists every credit application you have made in the last 12 months, including the facility type, amount, and whether it was approved, pending, or rejected.
What to check: Multiple rejected applications are a red flag to subsequent banks. If you see several rejections, do not apply again immediately. Fix the underlying issues first.
Section E: Legal Action
Any legal proceedings initiated by a financial institution — demand letters, court filings, judgments, and bankruptcy proceedings.
What to check: Settled legal cases may still appear. If a case was settled or dismissed, obtain proof from the relevant court or law firm and file a dispute with CCRIS/CTOS to update the status.
Common Mistakes That Delay Approval
Even borrowers who follow the recovery plan make avoidable errors. These are the most frequent:
1. Applying too early. You cleared your arrears last month and your CCRIS now shows one "0" after several "1" codes. You apply immediately. The bank sees 1 month clean, 11 months problematic. Rejected. Wait until you have at least 3 consecutive "0" months — ideally 6.
2. Paying after statement date. You pay your credit card in full every month, but after the statement is generated. CCRIS and CTOS capture your balance at statement date. If your limit is RM10,000 and you spent RM8,000 that month, your utilization is reported as 80% regardless of the fact that you paid it three days later. Pay before the statement closing date.
3. Closing your oldest credit account. Length of credit history accounts for 15% of your CTOS score. If your oldest credit card is from 2012, cancelling it removes 14 years of credit history from your profile. Cancel newer, unused cards instead.
4. Ignoring PTPTN. Many borrowers assume PTPTN is separate from the banking system. It is not. PTPTN defaults are reported to CCRIS and will block your home loan application at any bank. Check your status at ptptn.gov.my and settle arrears or formalize a repayment plan.
5. Shopping for credit while recovering. You are 60 days into your recovery plan and a retailer offers 0% financing on a new phone. You apply. That application adds an inquiry to CCRIS and temporarily dips your CTOS score. Every new application during recovery extends your timeline.
6. Not checking for errors. An estimated 5-10% of credit reports contain inaccuracies — facilities that have been settled but still show outstanding, accounts that belong to someone with a similar name, or legal cases that were dismissed. If you do not check, you are paying the score penalty for someone else's mistake.
Next Steps
Your credit profile is one piece of the home loan approval puzzle. Once your CCRIS and CTOS are clean, the next question is whether your income supports the loan amount you need.
- Check your loan eligibility — the DSR tab shows whether your income supports the loan after cleaning up your credit
- Loan margin guide — understand BNM's 90% vs 70% LTV rules and how your CCRIS record affects the margin you receive
- Home Loan Calculator — calculate monthly repayments at current rates
- DSR calculation guide — understand the 60-70% DSR threshold banks use
- Best home loan comparison — compare 6 banks across 8 factors once you are ready to apply
Sources
- Bank Negara Malaysia — CCRIS — Central Credit Reference Information System overview
- iCCRIS Portal — free online access to your CCRIS report
- CTOS Official — credit score reports and monitoring
- BNM — Responsible Lending Guidelines — framework governing bank lending criteria and DSR thresholds