Never quietly pull a prospective tenant's CTOS or MyCCRIS yourself — both are consent-based. Ask the tenant to obtain and share their own report with written consent, then treat it as one input alongside payslips, an employment letter and payment records.
How to check a tenant through CTOS or MyCCRIS the right way
Never try to quietly pull a prospective tenant's CTOS or MyCCRIS yourself. Ask the tenant to obtain and share their own report, get written consent, verify their income, and record every decision before handing over the keys. Screening is not a formality — it is the single biggest risk gate before a tenancy starts.
A credit report is only one input, not a verdict. Landlords should still review payslips or an employment offer letter, deposit-payment records, the tenant's responsiveness during the documentation process, the number of dependants, and how they handle basic document requests. A tenant who resists showing ordinary paperwork is usually a stronger warning signal than any credit score on its own.
For the lawful mechanics of pulling a report through a tenant's own consent, see the deeper guide to checking a tenant's CCRIS or CTOS before renting, and pair it with the broader tenant screening process landlords should follow.
What CTOS and MyCCRIS actually are
CTOS is a private credit-reporting agency; MyCCRIS is Bank Negara's own record of your credit facilities. Both are consent-based. A landlord cannot subscribe to silently monitor an applicant; the tenant must generate and share their own copy.
| Report | Who holds it | What it covers | How a landlord sees it |
|---|---|---|---|
| CTOS | CTOS Data Systems (licensed CRA) | Trade references, legal actions, bankruptcy, directorships, non-bank debts | Tenant self-pulls and shares |
| MyCCRIS | Bank Negara Malaysia | Bank loans, credit cards, hire-purchase, outstanding balances, CCRIS special-attention accounts | Tenant logs in via BNM and shares |
| Self-declaration | The applicant | A signed, dated statement of income, debts and prior tenancies | Always collect, even without a report |
The Credit Reporting Agencies Act 2010 governs how licensed agencies handle data, and the consent principle in that law is what makes "report without consent" an unlawful move rather than just an aggressive one.
What compliance checklist governs a pre-tenancy credit check?
Screening is prevention; default reporting is the consequence after a tenancy fails. Do not mix the two, and never threaten a new applicant with the language of punishment. You may explain that the agreement contains a default clause, a data-consent clause, and an evidence process if rent goes unpaid.
| Phase | What the landlord does | Key documents |
|---|---|---|
| Before signing | Verify identity, income, a shared report, and references | Consent form, IC copy, proof of employment, self-pulled report |
| During tenancy | Record payments, reminders, unit issues, and communication | Rent ledger, messages, photos, invoices |
| After a default | Issue notice, pursue a claim, recovery, or lawful default reporting | TA, consent, notice, arrears evidence |
Pair this with a report-ready tenancy agreement so that consent, the default definition, the notice process, and the evidence chain are built in from day one — not improvised after the tenant disappears.
What does a defensible rental default actually look like?
A strong default is not just "bad tenant." It needs a clear arrears start date, a specific amount, an agreement that supports the claim, proof of reminder or notice, and a reasonable chance for the tenant to put it right.
| Evidence | Why it matters | Risk if missing |
|---|---|---|
| Tenancy agreement | Sets the rent, due date, deposit, duties, and default clause | The claim reads like a verbal promise |
| Payment ledger | Separates paid, late, partial, and true arrears | The amount becomes disputable |
| Messages and notices | Proves you asked for payment in writing | Tenant can claim no chance was given |
| Unit evidence | Move-in, move-out, and damage photos or video | Damage blurs into fair wear and tear |
| Key-handover record | Fixes when the tenancy truly ended or the unit was abandoned | Landlord risks an unlawful entry or lock-out |
When the file is complete, the tone of communication changes. There is no need to shout — a short written note stating the arrears, the payment deadline, the next step if unresolved, and the correct channel is more useful than a long public post that strangers comment on without the facts.
When reporting to a credit agency is a lawful path
A verified default can be reported to a licensed credit reporting agency only where the tenant has given consent in the tenancy agreement. Publishing a tenant's details, or reporting without consent, is not lawful under the Credit Reporting Agencies Act 2010.
This is an important line. An individual landlord can keep records and pursue a claim, but cannot simply send credit data directly to a CRA. Through a platform like SPEEDHOME, a verified rental default can be furnished to Experian as a trade reference once the legal and consent conditions are met — an individual owner cannot do this directly. That is why a report-ready tenancy agreement matters: the consent clause, the default definition, the notice process, and the evidence chain must be set up at the start, not after the tenant has gone.
An individual landlord cannot furnish a rental default to a credit reporting agency directly; SPEEDHOME can, as the landlord's appointed agent, but only where the tenant gave written consent in the tenancy agreement.
Get SPEEDHOME's free report-ready tenancy agreement. A standard TA won't help you recover from a tenant who defaults — a report-ready one can. It includes the written consent/default clause that lets SPEEDHOME, acting as the landlord's appointed agent, report a verified rental default to a licensed credit reporting agency with the tenant's written consent — something an individual landlord cannot do alone. A documented, lawful report is a far stronger motivator to settle than an informal threat. Contact us →
For the recovery timeline this feeds into, SPEEDHOME platform records show that on the managed platform the average time from a tenant's first rental default to recovery action is about 31 days — an operator figure and an average, not a fixed outcome for any single case.
The 7 / 14 / 30-day action plan when a tenant starts to go quiet
Use an action schedule, not threats. Day one is confirming the arrears. The second week is giving notice and a chance to fix it. Day 30 is choosing whether to negotiate, claim, escalate lawfully, or build the default file.
- Days 1 to 3: check the bank account, ledger, due date, and any partial payment. Send a short written reminder.
- Days 4 to 7: ask for a clear answer, not a long story. Record any payment promise with an actual date.
- Days 8 to 14: send a more formal notice following the agreement. State the amount, the deadline, and the consequence if it is unresolved.
- Days 15 to 30: assemble the default file — evidence, photos, agreement, and communication. Do not disconnect water or electricity, lock the tenant out, or remove belongings without proper advice.
- After that: choose a claim route, negotiation, recovery, lawful default reporting, or legal action based on the facts of the case.
If the tenant replies with a reasonable explanation, you can still negotiate — but negotiation also belongs in writing: the amount, when they will pay, what happens if they fail, and whether the tenancy continues or ends. For the broader playbook when rent stops, see what a landlord can do when a tenant does not pay rent.
What never to do, even when the tenant is genuinely bad
Do not answer a wrong with a wrong. Do not lock the tenant out, disconnect water or electricity, throw out belongings, storm their workplace, or threaten their family. These acts feel satisfying for a moment but make your case more expensive and harder to win.
If your real issue is unpaid rent, read the lawful options before reacting. And if you are even tempted to disconnect the tenant's electricity or water, check the rules first so your file is not wrecked by a risky self-help move.
How to ask for advice in a community without exposing tenant data
Write the facts of the case without the identity. For example: "Tenant is two months in arrears, there is a written agreement, reminders have been sent, keys are still held. What is the safe next step?" That is enough to get general advice without turning a named person into a public target.
- Remove the name, IC number, phone number, workplace, and face photos.
- Do not upload the full agreement; if needed, share a general clause without private data.
- Do not ask others to harass the tenant, contact their employer, or spread images.
- Keep venting separate from action decisions; save the venting for a friend, not the case file.
- If the case involves threats, major damage, or safety, get professional advice quickly.
Public posts in unverified social-media listing channels are not a court, not a credit agency, and not a formal claims system. Once a name spreads, the discussion quickly becomes public judgment — and that can rebound onto the landlord.
How to tell a lawful warning apart from public shaming
A lawful warning speaks to process, not to personal identity. You can tell a tenant in writing that arrears will be recorded, a claim may be pursued, and a verified default can go through an approved channel if consent and evidence are sufficient. That is different from posting their name, IC, or photo in a public space.
Public shaming usually begins with the intent to "warn other owners." But once a post goes up, comments can spiral — some asking for phone numbers, some urging reports to the employer, some making extra accusations without proof. At that point you no longer control the narrative, and the tenant can screenshot all of it and claim you set out to damage their reputation.
Claim, recovery, or default reporting: which fits your real goal?
Choose by your true purpose. If you want the unit back, focus on possession and the move-out process. If you want the money, focus on the claim and recovery. If you want future risk recorded lawfully, focus on consent-based, evidence-based default reporting.
| Goal | More suitable route | Key note |
|---|---|---|
| Recover unpaid rent | Written negotiation, claim, recovery | Amount must be clear and provable |
| Get the unit back | Notice, key-handover settlement, legal action if needed | No self-help |
| Protect other landlords lawfully | Default reporting through an approved CRA channel | Needs consent and evidence |
| Avoid a repeat case | Screening, report-ready TA, move-in evidence | Do it before the tenant moves in |
How to write a firm notice that is not excessive
A good notice has five things: the amount, the reason, the deadline, the agreement reference, and the lawful consequence. It does not need to be fierce — it needs to be clear. Avoid phrasing like "I will report you to all of Malaysia," which carries risk and is probably inaccurate.
A safer tone: "As of 10 June 2026, May and June rent totalling RM4,000 remains unpaid. Please settle the payment or propose a written payment plan before 14 June 2026. If there is no resolution, we will consider recovery, a claim, and the default process under the agreement and applicable law." That is firm without public punishment.
What to do before the next tenancy
Treat this case as a system audit, not just blame on the tenant. Ask again: is screening strict enough, is the agreement clear, does a data-consent clause exist, is the deposit and protection appropriate, is move-in evidence complete, and does rent collection have an automatic reminder? If the answer is no, the next tenant can repeat the same problem.
A strong landlord is not the one who is best at being angry. A strong landlord is one where every step has a record — when rent is paid, when rent is late, when a repair is done, when an inspection closes. Then if trouble comes, you do not start from panic.
SPEEDHOME is one option worth comparing alongside the routes above.
Frequently asked questions
Can I post my tenant's name in a landlord group?
Avoid it. Even to warn others, a name, photo, IC, workplace, or phone number can bring defamation, harassment, and personal-data risk. Write the issue in general terms if you want advice, rather than making one person a public target.
What is the difference between a public punishment list and a lawful default report?
A public punishment list — what people often mean informally by reporting a tenant's name to warn others — is not a safe or lawful path. A lawful default report must rest on the agreement, written consent, arrears evidence, and a process auditable by an approved party under the Credit Reporting Agencies Act 2010.
If the tenant has already run, is there still anything I can do?
Yes — build the file first. Gather the agreement, payment ledger, claim messages, notices, handover photos, and the total arrears. Then choose whether to negotiate, claim, report the default through a lawful channel, or get legal advice.
Does a default report guarantee the tenant will pay up?
No. It is not a collection guarantee and not a public punishment. Its value is making a lawful arrears record more organised, traceable, and serious within a credit-risk file when every condition is met — it does not force repayment.
Can I, as an individual landlord, report a tenant directly to a credit agency?
No. An individual landlord can keep records and pursue a claim, but cannot furnish credit data to a CRA directly. Verified defaults reach a licensed agency like Experian through an approved channel — such as the SPEEDHOME platform — only when consent and evidence conditions are satisfied.