Can I post the runaway tenant's IC or photo online to warn other landlords?
No. Publishing a tenant's IC, photo or contact details online to "warn" other landlords is not lawful, however badly they behaved. The only lawful way to share a verified default is to report it to a licensed credit agency — and only where the tenant consented in the tenancy agreement.
The frustration is real: a tenant absconds with unpaid rent or damage, and the impulse to protect other owners by naming and shaming feels justified. But Malaysian law does not give a landlord a "warning the community" exemption. Posting a tenant's personal data on a public page exposes you to the very legal trouble you are trying to escape, and it does not recover a single ringgit. This page lays out what you can do instead — and what every competitor in the SERP gets wrong about it.
Doxxing the tenant vs lawful reporting: the decision
Posting a tenant's IC or photo online is unlawful personal-data exposure; reporting a verified default to a licensed credit reporting agency with consent is the lawful equivalent. They are not the same act scaled up or down — one is a remedy, the other is a fresh offence.
| Posting the tenant's IC/photo online | Reporting to a licensed credit agency | |
|---|---|---|
| Lawful? | No — exposes you to personal-data and defamation liability | Yes, but only where the tenant consented in the tenancy agreement |
| What it achieves | Nothing recoverable; reputational harm to you and the tenant | A verified default record that future consented screening can surface |
| Who sees it | Anyone, indefinitely, outside your control | Only licensed agencies and consented users, within scope |
| Risk to you | Civil claim, regulatory complaint, and your own exposure as the publisher | Minimal, provided consent and a verified default are documented |
| Recovers your money? | No | No — but it does not create new legal exposure either |
| What the law requires | Nothing authorises this path | A verified default and the tenant's prior consent in the agreement |
When each path wins (and when neither does)
Lawful reporting wins when you have a verified default and a consent clause in the signed agreement. Doxxing never wins — it is a liability, not a remedy. With neither consent nor a verified default, your remedy is a written demand and, if needed, the small-claims court.
Lawful credit reporting fits when: - The tenancy agreement contains a clause where the tenant consented to default reporting. - You can evidence the default with a stamped agreement, ledger, and written demand.
The court route fits when: - The unpaid amount is within the small-claims limit (up to RM5,000, no lawyer needed) or higher through the Magistrates' or Sessions Court. - You want actual recovery, not just a warning.
Neither path fits when: - Your goal is revenge or public naming. The law offers no route for that, and acting on the impulse makes your own position worse.
Cost and risk of posting a tenant's details online
The cost of posting a tenant's IC or photo is not zero — it is a new liability on top of the original loss. You trade an unpaid-rent problem for a personal-data and defamation problem, and you do it in public, where evidence is permanent.
| Risk dimension | What posting online creates | What lawful reporting creates |
|---|---|---|
| Personal-data exposure | You publish IC/photo/contact data without a lawful basis | No public exposure; data flows only to a licensed agency under consent |
| Defamation risk | If the tenant disputes the default, your public post is the evidence against you | A consented report is a regulated data flow, not a public accusation |
| Recovery of arrears | Nil — posting does not compel payment | The credit record is leverage; recovery still runs through the court if needed |
| Your standing as a landlord | Future tenants and platforms see the post too | No reputational spillover |
| Permanence | Screenshots and reposts outlive any deletion | Regulated, correctable, and scoped |
The single most expensive mistake in this cluster is treating the doxxing impulse as a "free" action. It is not free; it is a second, self-inflicted legal exposure that costs more to unwind than the original arrears.
The SPEEDHOME path: prevent the runaway before it happens
The cheapest remedy for a runaway tenant is the one you take before signing: consented credit and income screening at tenancy sign-up, a stamped agreement, and a documented handover. Recovering from a default is always harder and slower than declining a risky applicant.
Posting an IC online is a reaction to a problem that structured screening is designed to prevent. On a managed platform the screening, the consent clause for lawful default reporting, and the stamped agreement are built into the sign-up flow — so the decision you are actually making on this page (warn others unlawfully, or report lawfully) is one most landlords reach only because the front door was left open.
If you are already past the default, the lawful sequence is: collect the stamped agreement, the rent ledger, and the written demand; then report a verified default to a licensed credit agency only where the tenant consented in the agreement. Never publish the tenant's details. You can read more on how to screen tenants in Malaysia to set up the front door, and the related guide on whether you can report a tenant default to a credit agency covers the consent mechanics in detail. Landlords ready to let the platform handle screening and the consent clause can look at landlord plans on SPEEDHOME; tenants searching for a SPEEDHOME verified listing are already inside a consented-screening flow.
FAQ
Is it ever legal to post a tenant's IC or photo online to warn other landlords?
No. There is no "community warning" exemption. Publishing a tenant's personal data is not a lawful remedy regardless of how much they owe; the only lawful sharing of a default is to a licensed credit reporting agency, and only with the tenant's consent in the tenancy agreement.
What if the tenant owes a lot of money or damaged my property?
The scale of the default does not change the rule. Your lawful remedies are a written demand, then the small-claims court for amounts up to RM5,000 (no lawyer needed) or the civil courts above that. Recovery runs through the court, not through public exposure of the tenant.
Can I share the tenant's details with other landlords instead?
A limited audience does not make unlawful personal-data sharing lawful. The same exposure applies, and screenshots travel. The lawful equivalent — reporting a verified default to a licensed credit agency with consent — is the only route that does not create fresh liability for you.
I have the tenant's IC copy from the agreement — can I use that to warn people?
Holding an IC copy for the tenancy is lawful; republishing it to warn others is not. The agreement also cannot be repurposed into a consent to publish. Consent to report a default must be explicit in the agreement, and it covers reporting to a licensed agency rather than posting on public channels.
Will reporting the tenant to a credit agency actually get my money back?
Reporting does not compel repayment on its own — it records the verified default so future consented screening can surface it. Actual recovery still runs through a written demand and the courts if needed. The value is leverage and an accurate record, not instant payment.
How do I stop this happening with my next tenant?
Set the front door before signing: consented credit and income screening, a stamped tenancy agreement with a default-reporting consent clause, and a documented handover. Declining a risky applicant is always cheaper than chasing a runaway one.