Can I Blacklist a Bad Tenant or Post Their IC and Photo Online to Warn Other Landlords? (Malaysia, 2026)

SPEEDHOME Editorial Team · Last updated May 2026 · Based on SPEEDHOME platform experience and current Malaysian rental law.

No — do not post a tenant’s identity card, passport, or photo online, and do not name-and-shame them in a landlord group. There is no official public tenant blacklist in Malaysia that a private landlord can post to. Putting someone’s personal details online without a lawful reason is a breach risk under Malaysia’s personal-data law, the PDPA 2010 (as amended by Act A1727), which now also carries mandatory data-breach notification. Calling a tenant a “scammer” in public also hands them a defamation claim against you. Do this instead: keep your own dated private records, and screen future tenants properly. At SPEEDHOME, screening runs on credit, income, and ID with the applicant’s consent — and a meaningful share of applicants don’t pass. That is the lawful version of what you actually want: keeping bad tenants out.

The one-line rule: Keeping a private file for your own decision is legal. Publishing someone’s identity card or photo to punish them is not. The first protects you; the second can turn the person who owed you money into the one suing you.

SPEEDHOME operator insight: the lawful version of a “blacklist” isn’t a public list at all — it’s a consent-based check at sign-up. A blacklist tries to catch a bad tenant after the damage, with no legal cover; what actually keeps problem tenants out is screening the next applicant on verified identity, credit, and income history with their permission before they sign — the same consent-based screening SPEEDHOME runs on every applicant, where a meaningful share don’t pass. In our experience the landlords who stop getting burned aren’t the ones with the longest WhatsApp blacklist; they’re the ones who let a permissioned check do the filtering at the door, so the bad applicant never becomes their tenant in the first place.

Can I post their IC or photo in a landlord WhatsApp or Facebook group?

No — and this is the single most common mistake landlords make after a bad tenancy. When a tenant defaults or_trashes a unit, the urge to warn everyone is understandable. But the moment you post their identity card number, passport, photo, or full name with an accusation, you have done two risky things at once. First, you shared their personal data without a lawful basis. Malaysia’s personal-data law — the PDPA 2010 (as amended by Act A1727) — restricts that, and now also imposes mandatory data-breach notification. Second, if anything you wrote damages their reputation — “this tenant is a cheat”, “she’s a serial scammer” — you have potentially defamed them, and they can sue you for it. “They cheated me first” is not a legal defence; it just starts a two-way fight you did not need.

Reality check: A WhatsApp landlord group feels private, but it is not. Screenshots travel. The tenant only needs one member to forward your message, and your “warning” becomes the evidence in their defamation claim against you. Treat every group post as if it will be read out in court — because it might be.

Is there an official “tenant blacklist” I can put them on?

No — there is no government-run public tenant blacklist in Malaysia that a private landlord can submit a name to. This surprises a lot of people, because the idea sounds so sensible. Malaysia still has no dedicated Residential Tenancy Act, so there is no official body that registers “bad tenants” the way a credit bureau registers loan defaults. The private “blacklist” groups and spreadsheets that circulate among landlords are not official, are not verified, and do not protect you — they expose you. If your name is on the post, you are the publisher, and you carry the legal risk for what is written there.

Banks and licensed credit agencies do keep records of how people handle debts, and a proper screening check can lawfully draw on that kind of information with the person’s consent. That is completely different from a landlord posting an identity card in a Facebook group. One is a regulated check done with permission; the other is publishing private data to shame someone.

The Malaysian “shortcuts” that backfire

Every Malaysian landlord has heard this advice over a kopi session. Here is what each “shortcut” actually does to you.

“Just post their IC online so everyone knows”

This is the most dangerous one. An identity card number, a passport scan, or a clear photo are exactly the kind of personal details Malaysia’s personal-data law is built to protect. Publishing them to punish or warn — with no lawful basis and no consent — is precisely what the law restricts. You are not exposing a criminal; in the eyes of the law you may be the one mishandling personal data. The better move: record the details privately in your own files for your own future reference, and never publish them.

“Share their photo in the landlord group as a warning”

A photo plus an accusation is the fastest route to a defamation claim. Even if you believe every word, the tenant can argue you lowered their reputation in the eyes of others. Truth can be a defence, but proving it in court is expensive, slow, and uncertain — and you started the fight. The better move: if you genuinely need to warn a specific person you trust, share only the dated facts you can prove, privately, and never the photo or identity card.

“Put them on the landlord blacklist so they can’t rent again”

There is no official list, so what you are really doing is publishing an unverified accusation on an unofficial group. That carries the same two risks — personal-data and defamation — with none of the protection. It also rarely works: serious problem tenants are caught by proper screening, not by spreadsheets that any landlord can edit. The better move: put your energy into screening the next tenant, where the law is on your side.

“Change the locks or cut the electricity to force them out”

Different shortcut, same trap. Even a tenant who owes you money keeps the legal right to stay until a court orders them out — only a court can lawfully evict. Locking them out or cutting utilities can flip you from the wronged party into the one being sued. The better move: go through the proper court process to recover the unit and the money.

The “they cheated me first” trap: Landlords assume that because the tenant did something wrong, anything they do back is fair. The law does not work that way. Your tenant’s breach is one matter; your handling of their personal data and reputation is a separate matter you are fully responsible for. Two wrongs create two cases — and you may lose yours.

Public shaming vs. lawful screening: what each really does

What you CAN do — keep your own private record

Here is the line that matters, and most landlords miss it: keeping a private record for your own decision is not the same as publishing someone’s data publicly. You are fully entitled to keep your own dated file on a tenancy that went wrong — for your own use, not for broadcast.

A strong private record includes:

• Dated proof of the default — saved bank statements showing missed rent, your written reminders, and any reply from the tenant.
• The signed tenancy agreement and any move-in and move-out condition records, with photos of damage and their dates.
• A short factual note of what happened — dates, amounts, and events only. No insults, no speculation, just facts you could stand behind.

This file is your protection if the same person ever applies to you again, and it is your evidence if you take a money claim to court. Keep it private, keep it factual, and keep it dated. The strength is in the dates and the documents — not in how loudly you can complain about the person.

The evidence principle: A calm, dated folder of facts beats an angry public post every single time. The folder protects your decision and survives in court. The post protects nothing and can become the case against you. Build the folder; never send the post.

The real fix: screen the next tenant — lawfully

By the time a tenant has defaulted, the loss is already done. The protection that actually works is screening the next tenant properly, before they get the keys. And “properly” has two parts.

First, screen on the right things: a person’s ability and history of paying — credit record, income, and verified identity — checked with their consent. This is lawful precisely because the applicant agrees to it and because it looks at how they handle money, not at who they are.

Second, do not screen on the wrong things. Rejecting applicants based on race or nationality is discrimination, not screening, and it is not a defence to anything. The “blacklist” instinct often slides into “I won’t rent to people from X” — that is both wrong and useless, because creditworthiness has nothing to do with someone’s race. Judge the numbers and the record, never the person’s background.

This is exactly what SPEEDHOME was built to do. Instead of you trying to warn the world about one bad tenant — and risking a personal-data or defamation case in the process — SPEEDHOME runs proper, consent-based checks on every applicant so the bad ones are filtered out before they ever sign. A meaningful share of applicants do not pass our screening. That is the lawful, effective version of what the “blacklist” was trying to achieve: keeping problem tenants out of your unit.

How SPEEDHOME handles this for you

SPEEDHOME takes the risky, emotional part off your plate. Rather than you collecting identity cards and policing landlord groups, our platform screens tenants on credit, income, and identity — with their consent — and pairs that with deposit protection and rental protection features so one bad tenant does not become your personal crisis. You never have to publish anyone’s data, and you never have to gamble on an unofficial blacklist. Screening is handled for you, lawfully.

Want bad tenants filtered out before they sign — without the legal risk of doing it yourself? List your property on SPEEDHOME and let our consent-based screening do the heavy lifting — or explore our landlord protection plans to see exactly what’s covered.

FAQ

Can I legally post my tenant’s IC number online to warn other landlords? No. An identity card number is personal data, and publishing it to warn or punish — without a lawful reason and without consent — breaches Malaysia’s personal-data law. It does not matter that the tenant wronged you first. Keep the details in your own private records for your own future decisions, but never publish them.

Is there an official tenant blacklist in Malaysia I can report a bad tenant to? No. There is no government-run public tenant blacklist that a private landlord can submit a name to, partly because Malaysia still has no dedicated Residential Tenancy Act. The “blacklist” groups and shared spreadsheets are unofficial and unverified, and posting to them puts the legal risk on you, not on the tenant.

My tenant really did cheat me — isn’t it fair to name them publicly? Being wronged does not give you a free pass. A public post calling someone a cheat or scammer can be defamation, and “it’s true” is something you would have to prove in court at your own cost. Your tenant’s breach and your handling of their reputation are two separate matters — and you can lose the second one.

What records am I allowed to keep about a bad tenant? You can keep your own dated, factual private file: bank statements showing missed rent, your written reminders, the signed tenancy agreement, and dated photos of any damage. Keeping this for your own decision is fine. The line you must not cross is publishing that information or someone’s identity card and photo to the public.

Can I refuse to rent to someone based on their race or nationality to avoid bad tenants? No. Screening must be about creditworthiness and income — a person’s ability and history of paying — checked with their consent, not their race or nationality. Rejecting people by background is discrimination, not screening, and it does not protect you. Judge the financial record, never the person.

Can someone sue me just for a message in a private landlord WhatsApp group? Yes. A “private” group is not legally private once a screenshot leaves it, and a defamatory message shared with even a few people can support a claim. If you must warn a trusted contact, share only dated facts you can prove — never a photo, an identity card, or an accusation you cannot back up in court.

What’s the fastest lawful way to avoid this whole problem? Screen properly before move-in. For amounts already lost, you can pursue a money claim — the Magistrates’ Court small-claims procedure (claims ≤RM5,000, no lawyers) lets you file without a lawyer. But the real fix is prevention: consent-based screening on credit, income, and identity stops most problem tenants before they ever sign. When a tenant has already stopped paying, the tenant non-payment guide covers the lawful escalation steps.

This article is for general information based on SPEEDHOME’s platform experience and current Malaysian rental practice. It is not legal advice. For your specific situation, please consult a qualified lawyer. Laws and procedures change; verify current requirements before acting.

SPEEDHOME helps Malaysian landlords rent out properties with tenant screening, deposit protection, and rental protection. Explore SPEEDHOME, SPEEDRENO, SPEEDFIX, and SPEEDSIGN for a complete rental solution.