What documents can a landlord legally ask a tenant for in Malaysia?
A Malaysian landlord may ask for an IC or passport, recent payslips or a salary letter, bank statements showing income, and an employment confirmation letter. These payment-predictor documents are lawful. Asking instead for race, religion, or ethnicity data — whether directly or by encoding it in a document request — is both a weak predictor of payment behaviour and a discrimination risk under Malaysian law.
A 2023 SPEEDHOME/INVOKE landlord survey found 79% of landlords want proper background checks built into the platform they use — which tells you the demand is real. What most landlords lack is a clear list of what they can ask for, what to refuse, and where the legal line sits. This page draws that line.
Lawful documents vs documents you should never request
Ask only for documents that predict payment reliability. Never ask for documents whose primary purpose is to reveal race, religion, or national origin.
| Document | Lawful to request? | What it tells you | Notes |
|---|---|---|---|
| Malaysian IC (MyKad) or passport | Yes | Identity verification | Retain a copy only with the tenant's written consent; store minimally |
| Recent payslips (last 2–3 months) | Yes | Stable income source and amount | The primary income-verification tool for employed tenants |
| Employment confirmation / offer letter | Yes | Employer, role, and tenure | Particularly useful for new employees without three payslips yet |
| Bank statements (last 2–3 months) | Yes | Real income inflows, other obligations | Useful for self-employed applicants where payslips are unavailable |
| CTOS report (self-pulled by tenant) | Yes — tenant self-pull only | Credit history summary | A landlord cannot pull a tenant's CTOS directly; the tenant orders their own copy (RM27.90 as of mid-2026 — verify current price on ctoscredit.com.my before quoting) |
| Tenancy reference from previous landlord | Yes | Payment history and conduct | A phone call to the previous landlord is the most useful screening step many landlords skip |
| Emergency contact | Yes | Basic safety and communication | Standard and uncontroversial |
| Race, ethnicity, or religion declaration | No | Nothing predictive | Screening on this basis is both legally risky and a proven weak predictor of rent payment |
| Home country of origin (as a filter) | No | Nothing predictive | Refusing foreign nationals as a class carries legal risk under anti-discrimination principles |
| Photos of IC beyond what identity requires | Caution | Risk of PDPA breach | Collect only what is necessary; do not share or display |
When does each screening approach win?
For most landlords renting to employed Malaysians, payslips plus an IC plus a reference call is the complete lawful set. More documents do not mean better screening — they mean more data-handling risk for no added predictive value.
Employed applicants: Two to three recent payslips plus an employment letter gives you everything you need. The 3× monthly-rent income rule (gross monthly income ≥ 3× the monthly rent) is the single most reliable filter, and payslips are how you apply it.
Self-employed or commission-based applicants: Bank statements for the most recent two to three months replace payslips. Look for consistent inflows and an absence of large unexplained outflows. A CTOS self-pull adds useful context here because payslips cannot verify their own figures.
Corporate tenants: Ask for a company registration document and a letter of authority confirming the employee is on the company's tenancy. The corporate guarantee replaces personal income verification.
Expat applicants: Passport plus employment pass plus employer confirmation letter. Foreign nationals have the same payment predictor profile as locals when income is verified — refusing them as a class is both a legal risk and a screening mistake.
Student applicants: Parents as guarantors, signed guarantor undertaking, and proof of enrolment. Income verification shifts to the guarantor.
Cost, risk, and the discrimination line
The legal risk from over-collecting documents or screening on protected characteristics is more concrete than most landlords realise — and it sits above the risk of a bad tenant.
| Risk | What it looks like | Consequence |
|---|---|---|
| Collecting race/religion data as a filter | Rejecting applicants based on name, IC prefix, or community | Civil liability; public-relations harm; PDPA exposure if data is shared |
| Collecting more data than you need | Retaining copies of ICs, payslips, or bank statements beyond the tenancy | PDPA compliance exposure |
| Reporting a tenant to a credit agency without consent | Sending default data to a credit reporting agency | Credit Reporting Agencies Act 2010 violation — a verified rental default can be reported to a licensed credit reporting agency only where the tenant has given consent in the tenancy agreement; blacklisting or publishing a tenant's details is not lawful |
| CTOS landlord-pull (misunderstanding) | A landlord believing they can pull a tenant's CTOS report directly | You cannot; the tenant self-orders; a platform running a consented credit check (via Experian) is the landlord-side route |
| Asking for original IC with no return | Taking physical possession of a tenant's ID permanently | Potentially unlawful detention of identity documents |
The discrimination-law angle deserves naming directly. Approximately 43.6% of Malaysian landlords acknowledge excluding applicants by race (AOD Malaysia 2026, public survey). That is not only a legal risk — it is a worse screening outcome, because race and religion have no statistically meaningful relationship to rent-payment reliability. SPEEDHOME's platform screens on credit, income, and references — never on name, IC prefix, or community — and the ~30% of applicants who fail screening fail on payment-predictor grounds.
The SPEEDHOME path: consent-first, Experian-backed, at the platform level
SPEEDHOME runs consented credit screening via Experian — built into the rental sign-up — so landlords get a reliable applicant profile without collecting or storing sensitive documents themselves.
The process that causes landlords to over-collect documents (or to make ad-hoc discrimination calls) is usually the absence of a structured screening workflow. When there is no system, landlords fill the gap with gut feel, which often codes as discrimination.
The SPEEDHOME landlord workflow:
- Applicant consents to a credit and income check at sign-up — consent is explicit, documented, and tied to the tenancy application.
- SPEEDHOME runs the check via Experian (the platform's credit-screening provider — not CTOS, which is a self-pull tool for tenants).
- The landlord sees a cleared or flagged applicant, not raw financial documents — reducing both data-handling risk and discrimination surface.
- If a tenancy ends in default, the verified default can be reported to a licensed credit reporting agency where the tenancy agreement includes a reporting-consent clause (Credit Reporting Agencies Act 2010 basis).
Landlords who want to list their property can do so at /more/landlord/speedhome. The tenancy agreement template includes the consent clause required for lawful default reporting.
For the full tenant-screening framework — including the document red-flag table, the 3× income rule, and the "screen-on-THIS / NEVER-on-THIS" matrix — see how to screen tenants without legal trouble. For what to do when a tenancy ends badly, including whether a default can be reported to CTOS, see can you report to a licensed credit agency with consent a tenant on CTOS?.
FAQ
Can a landlord in Malaysia refuse to rent to a foreigner? Refusing a foreign national as a class — because they are foreign, not because their income or references are insufficient — carries legal and reputational risk. A valid employment pass and employer confirmation letter provide the same payment-predictor evidence as a Malaysian IC plus payslips. Screen on income and references, not nationality.
Is it legal to ask for a tenant's bank statements in Malaysia? Yes, asking for two to three months of bank statements is lawful and standard practice, especially for self-employed applicants. The PDPA requires you to collect only what you need, store it securely, and not share it. Do not retain statements beyond what the tenancy-application process requires.
Can a landlord pull a tenant's CTOS report without their permission? No. A landlord cannot pull a third party's CTOS report. CTOS is a self-pull product — the tenant orders their own report (at their own cost) and shares it with the landlord voluntarily. The landlord-side alternative is a platform that runs a consented credit check via Experian at the point of application.
Can I report a defaulting tenant to a credit bureau in Malaysia? A verified rental default can be reported to a licensed credit reporting agency only where the tenant has given consent in the tenancy agreement. The Credit Reporting Agencies Act 2010 (consent basis) is the governing law. Publishing or sharing a tenant's personal details outside this route — including IC numbers, addresses, or social-media posts naming the tenant — is not lawful.
What is the 3× income rule and is it mandatory? The rule of thumb is that a tenant's gross monthly income should be at least three times the monthly rent. It is not a statutory requirement — Malaysia has no Residential Tenancy Act in force — but it is the most widely used payment-predictor filter among professional landlords and platforms. It is a practical guide, not a legal minimum.
What documents can I ask for from a self-employed tenant? Ask for two to three months of personal bank statements showing regular income inflows, a business registration document (if applicable), and a CTOS self-pull report. The bank-statement review replaces payslips; look for income consistency and the absence of large unexplained withdrawals rather than a specific employer name.