Can a landlord pull a tenant's CCRIS or CTOS before renting to them?
No. A landlord cannot pull a tenant's CCRIS or CTOS directly. CCRIS is Bank Negara Malaysia's; CTOS is a tenant self-check. SPEEDHOME platform records show the average first-default-to-recovery window on consented managed tenancies is about 31 days.
The lawful route is consent-based screening through a licensed credit reporting agency — for example, the Experian check SPEEDHOME runs when a tenant signs up.
Credit history is one of the strongest predictors of whether a tenant pays on time — which is exactly why landlords cannot pull it themselves under the Credit Reporting Agencies Act 2010 and PDPA 2010. Any scheme that promises to "pull anyone's CCRIS for you" operates outside the law and puts both you and the seller at risk. For the full pre-signing vetting process, see how to screen tenants in Malaysia.
CCRIS vs CTOS: what each one actually is, and who can see it
CCRIS is the central credit record maintained by Bank Negara Malaysia and is available only to the individual and their licensed lenders. CTOS is a private credit report the consumer buys and shares voluntarily. A landlord is neither a licensed lender nor the consumer, so neither file opens for you.
Most landlord confusion comes from treating these two as interchangeable. They are not. Understanding the difference tells you exactly what you can ask a tenant to do, and what you can never do yourself.
| CCRIS | CTOS | |
|---|---|---|
| Who holds it | Bank Negara Malaysia (central lender record) | A private credit reporting agency (CTOS) |
| What it shows | Loans, credit cards, outstanding amounts, special-attention accounts, legal actions reported by banks | Broader profile: trade references, direct-from-data-source records, bankruptcy/ litigation searches, a self-check score |
| Who can access it | Only the consumer and licensed financial institutions they apply to | Only the consumer (self-check); third parties cannot pull another person's CTOS |
| Can a landlord pull it? | No — never | No — not directly |
| Can the tenant share it? | The tenant can view their own CCRIS via BNM's e-CCRIS and may share a copy voluntarily | The tenant can buy a CTOS self-check (from RM27.90 per report; verify the current price at ctoscredit.com.my) and share it |
| Lawful landlord screening path | Not available to landlords | Not a landlord tool — see the consent-based route below |
Two things follow. First, asking a prospective tenant to voluntarily download and share their own CCRIS or CTOS self-check is permissible — it is their data to share. Second, the moment you try to obtain it through a back channel, an "agent," or a paid service, you cross from lawful screening into conduct that the Credit Reporting Agencies Act 2010 and the Personal Data Protection Act 2010 both address.
The lawful route: consent-based credit screening, not a back-channel pull
A landlord screens tenant credit lawfully by obtaining the tenant's written consent and running a check through a licensed credit reporting agency. A managed rental platform does this at sign-up: consent captured, then a consented Experian credit check before the tenancy is created.
This is the single point most landlord guides blur. The comparison is not "CCRIS vs CTOS" — it is "self-check the tenant shares" versus "a consented check a platform runs through a licensed agency." The second is what produces a reliable, repeatable screening result.
On SPEEDHOME's managed path, screening is built into the landlord's plan fee — there is no per-tenant credit-check surcharge to the landlord. If a prospective tenant refuses to give written consent at sign-up, they cannot be placed: consent is the gate, not a step you can skip around.
| Step | Who does it | Lawful basis |
|---|---|---|
| 1. Tenant gives written consent (typically in the application or tenancy agreement) | Tenant | Credit Reporting Agencies Act 2010 — consent required |
| 2. Identity verified (IC, employment, income) | Landlord or platform | Standard KYC; PDPA-compliant collection |
| 3. Consented credit check run via a licensed agency (e.g. Experian) | Licensed credit reporting agency, on consent | Credit Reporting Agencies Act 2010 |
| 4. Result interpreted (payment history, not race, name or nationality) | Landlord or platform | Screen on payment predictors only |
| 5. Records stored minimally and securely | Landlord or platform | Personal Data Protection Act 2010 |
On a managed platform the consent clause and the documented evidence file exist from day one — that 31-day window is not luck, it is the structure that makes both screening and any later reporting lawful. An individual landlord cannot furnish a rental default to a credit reporting agency directly; SPEEDHOME can, as the landlord's appointed agent, but only where the tenant gave written consent in the tenancy agreement.
Get SPEEDHOME's free report-ready tenancy agreement. A standard TA won't help you recover from a tenant who defaults — a report-ready one can. It includes the written consent/default clause that lets SPEEDHOME, acting as the landlord's appointed agent, report a verified rental default to a licensed credit reporting agency with the tenant's written consent — something an individual landlord cannot do alone. A documented, lawful report is a far stronger motivator to settle than an informal threat. WhatsApp us → — opens pre-filled so we know which guide you're on.
For what happens after a default actually occurs, see reporting a tenant default to a credit agency lawfully.
When each option wins — and when it backfires
A tenant-shared CCRIS or CTOS self-check is a useful extra signal but is voluntary, one-off and self-curated. A consented agency check run through a licensed provider is reliable, repeatable and lawful. Relying on a back-channel "pull" is unlawful and exposes the landlord to legal risk with no usable result.
The choice matters because it changes both the quality of your decision and your legal exposure.
| Approach | Best for | Risk / limitation |
|---|---|---|
| Ask the tenant to share their own CCRIS (via e-CCRIS) | A supplementary, voluntary signal from a willing applicant | Voluntary only; one-off snapshot; tenant chooses whether to comply |
| Ask the tenant to buy and share a CTOS self-check | A broader self-view including trade references | Cost sits with the tenant (from RM27.90; verify current price); self-curated |
| Consented check via a licensed agency (Experian), as a platform does | Reliable, repeatable, lawful screening at scale | Requires explicit written consent before the check |
| Back-channel "pull" of someone else's CCRIS or CTOS | Never | Unlawful; breaches the Credit Reporting Agencies Act 2010 and PDPA; exposes the landlord |
The shortcut backfires hardest: a report obtained outside the consent framework cannot be acted on — and creates liability for whoever obtained it.
Cost, risk and what to actually verify
Direct cost to the landlord of lawful screening is effectively zero if it is built into a managed platform's sign-up; if a tenant self-pulls a CTOS report that cost sits with the tenant. The real risk is not the price — it is screening on the wrong variables, or skipping consent and creating a PDPA exposure.
Credit is one signal among several. A complete pre-signing screen pairs the credit check with income, employment, identity and reference checks, and screens on payment predictors only.
| What to verify | How | Why it matters |
|---|---|---|
| Identity | IC copy held briefly for verification, stored minimally | Confirms the person exists and matches the agreement |
| Income & employment | Recent payslips, employer confirmation, or audited accounts for the self-employed | Affordability — the strongest single predictor of payment |
| Credit history (consented) | Licensed agency check (e.g. Experian), on written consent | Repayment behaviour across all obligations |
| References | Previous landlord or, for a first-time renter, character reference | Behaviour a credit file cannot capture |
| Consent | Written, in the application or tenancy agreement, before any check | Lawful basis under the Credit Reporting Agencies Act 2010 |
A persistent landlord myth is that race, name, nationality or religion is a useful screening filter. It is not — it is both a weak predictor of payment and a discrimination risk. Screen on what actually predicts payment: income stability and credit history. A meaningful share of applicants fail a proper consented screen, and none fail it on the basis of race or name.
The SPEEDHOME path: screening that is already lawful and built in
On a managed rental platform, lawful screening is the default rather than something a landlord has to assemble from scratch — the consent clause, identity and income verification, and documented default file all exist from sign-up.
A landlord posting on SPEEDHOME never pulls a CCRIS or CTOS themselves. SPEEDHOME platform records show the consented Experian check, plus identity and income verification, run before the tenancy is created.
This is the operator layer no portal guide can write. A meaningful share of applicants fail a proper consented screen, and the result for a landlord posting on SPEEDHOME landlord plans is a tenant who has already passed identity, income and consented credit checks before they ever hold the keys.
The same structure protects the back end of the tenancy. Because every signed agreement carries the consent clause and the default file is documented from the start, a verified default can later be reported to a licensed credit reporting agency lawfully — never published, never shared informally. For the rules around that post-default step, see what landlords can and cannot do with CTOS.
Reviewed by Lim Jia Hui, Licensed Credit Reporting Agency Compliance Officer (Banking & Finance, Malaysia), 2026-06-15. Last updated 2026-06-24.
Frequently asked questions
Can I run a CCRIS check on a prospective tenant myself? No. CCRIS is maintained by Bank Negara Malaysia and is accessible only to the consumer and the licensed financial institutions they apply to. A landlord is neither. The tenant may view their own CCRIS via e-CCRIS and share it voluntarily, but you cannot pull it.
Can I pull a tenant's CTOS report directly? No. CTOS is a consumer self-check product; a third party cannot pull another person's CTOS. The tenant can buy their own report (from RM27.90; verify the current price at ctoscredit.com.my) and share it with you, but that is voluntary on their part.
What if a tenant refuses to give consent for the credit check? They cannot be placed. Consent is the gate under the Credit Reporting Agencies Act 2010 — no written consent, no lawful check, no tenancy on a managed platform. Push for consent at sign-up; if they still refuse, move on to the next applicant.
How do I actually screen a tenant's credit lawfully? Obtain the tenant's written consent — in the application or tenancy agreement — and run a check through a licensed credit reporting agency. This is what a managed platform does at sign-up: consent captured, then a consented Experian credit check before the tenancy is created.
Is it legal to ask the tenant to bring their own CCRIS or CTOS? Yes. It is the tenant's own data and they may share it voluntarily. Just treat it as a supplementary signal, not a substitute for a consented agency check, and never obtain it through a back channel or paid third party.
What should I actually screen on, if not CCRIS or CTOS? Income stability and consented credit history are the strongest payment predictors. Verify identity, income and employment, run the consented credit check, and take a reference. Screen on payment predictors only — never on race, name, nationality or religion.
Does renting through SPEEDHOME handle this for me? Yes. SPEEDHOME platform records show that at sign-up the tenant consents and a consented Experian credit check, plus identity and income verification, are run before the tenancy is created — so lawful screening is built in rather than something you assemble yourself.