A Malaysian landlord may ask for identity, income, employment, and reference documents — with the tenant's consent and only what is relevant to the tenancy
There is no fixed statutory checklist of documents a landlord must collect. Malaysian practice is consent-based: you may ask for an IC copy, proof of income, an employment letter, and references — but you should collect only what is relevant to assessing payment risk, obtain it with the tenant's agreement, and store it minimally. Screening on race, religion, or nationality instead of payment predictors is both unlawful-risk and a weak filter. The sections below set out what to ask, what to avoid, and the lawful way to use what you collect.
The right document request does two jobs at once: it confirms the tenant can pay the rent, and it builds the evidence base you need if the tenancy ever goes wrong. The wrong request — asking for too much, or asking for the wrong things — pushes good applicants away and can create legal exposure of its own. For the wider screening process, see how to screen tenants in Malaysia.
Documents you may ask for vs documents you should not
The decision is which documents move you toward a confident payment-risk decision without collecting data you do not need. A short, consent-based request for identity, income, employment, and a reference beats a long demand for sensitive records you have no use for.
| Category | Reasonable to ask (with consent) | Avoid / think twice |
|---|---|---|
| Identity | IC copy (front, with the IC number partially masked once recorded) | Asking to keep the tenant's original IC, or an unmasked copy stored loosely |
| Income | 2–3 recent payslips, or 3 months of bank statements showing salary credits | Demanding full access to the tenant's online banking |
| Employment | Employment letter or an offer letter confirming role and start date | Requiring the tenant's full HR file or contract of employment |
| Credit / payment history | A tenant-supplied CCRIS or CTOS self-report (the tenant pulls this themselves) | Trying to pull a third party's CCRIS or CTOS directly — a landlord cannot do this |
| References | One prior-landlord or employer reference, in writing | Requiring multiple guarantors for a standard residential let |
| Right to occupy (foreign tenants) | Valid passport, valid pass or work permit (verify before signing) | Refusing all foreign tenants categorically — screen the document, not the nationality |
A few notes on the table. Malaysia's personal-data protection law applies to how you handle what you collect — gather only what you need, use it for the screening purpose, and do not pass it around. On credit reports: a landlord cannot pull a tenant's CCRIS or CTOS directly. The tenant can self-pull a report and share it with you; verify the current self-pull fee before relying on a quoted figure. For the detail on this, see can I check a tenant's CCRIS or CTOS before renting to them.
When a minimal document set wins, and when you need more
A short document set wins for a standard, locally-employed tenant on a 12-month residential tenancy: identity, recent payslips, an employment letter, and one reference is usually enough to make a payment-risk decision. You need more — guarantor, business registration, or foreign-pass verification — only when the applicant's income or residency picture is less standard.
When each approach fits:
- Minimal set (IC + payslips + employment letter + one reference): A locally employed salaried applicant renting a typical residential unit. Most of your applicants fall here.
- Self-employed applicant: Ask for business registration (SSM), 6–12 months of bank statements showing business income, and recent income-tax notice of assessment if available. Profitability matters more than a payslip here.
- Foreign tenant: Verify a valid passport and a valid pass or work permit; confirm the pass covers the full tenancy term. Screen the document's validity, not the nationality. See how to verify a foreign tenant's work permit status before renting.
- Borderline or first-time renter: A named guarantor plus a reference is often more useful than asking the applicant for more of their own documents.
- Corporate tenant (the tenant is a company): Company SSM registration, a directors' resolution or authorising letter, and identification of the signing director. The guarantor question depends on the company's standing.
The common thread is relevance: every extra document you ask for should map to a real risk you are trying to assess. Asking for documents "just in case" slows good applicants and collects data you are then responsible for protecting.
The cost and risk of asking for the wrong documents
The cost of asking too little is a tenant you cannot trace and a deposit dispute you cannot evidence; the cost of asking too much is lost good applicants, data-protection exposure, and in the worst case a discrimination complaint. Most landlords overestimate the first cost and underestimate the second.
- Too little: No employment reference and no emergency contact makes abandonment harder to trace. No move-in condition report makes a deposit deduction contestable. No signed inventory makes a missing-fixture claim hard to prove.
- Too much: Demanding sensitive financial records a landlord has no use for creates a data-handling obligation you may not be equipped to meet, and signals to a careful tenant that their information will not be respected.
- Screening on the wrong axis: Filtering applicants by race, religion, or nationality rather than by payment history is both a legal risk and a weak predictor of whether rent gets paid. Screen on income, credit, and reference signals instead — that is where default risk actually lives.
- Holding the original IC: Taking a tenant's original IC as "security" is not standard practice and exposes you to a complaint. A masked copy for your records is the normal ask.
If you do intend to report a serious default later, the tenancy agreement — not a pile of collected documents — is what makes that lawful. That point is covered in the next section.
Using what you collect: the lawful path on default
If a tenant seriously defaults, a verified rental default can be reported to a licensed credit reporting agency only where the tenant has given consent in the tenancy agreement; publishing a tenant's details, or reporting without that consent, is not lawful. This is the single most important reason your document collection and your tenancy agreement must line up: the consent that makes lawful default reporting possible is written into the agreement, not gathered as an afterthought.
The practical sequence:
- Build a clean evidence file at the start — signed and stamped tenancy agreement, condition report, payment records, and the identity/income documents you collected at screening.
- If a default happens, act early: a written demand at the first missed grace period resolves more cases than waiting months.
- Recovery of unpaid rent runs through the civil courts, not a dedicated tenancy tribunal (Malaysia has none in force as of 2026). Self-help — disconnecting water or electricity, or locking the tenant out — is unlawful regardless of any clause you write in.
- Reporting a verified default to a credit reporting agency requires the tenant's prior consent (typically a clause in the stamped tenancy agreement) and goes through a licensed operator; an individual landlord cannot report directly.
The point of collecting documents upfront is not to threaten the tenant — it is to have a calm, evidence-based record so that if something goes wrong, you have a lawful path instead of an unlawful shortcut. The lawful recovery route — written demand, then civil court, and default reporting only with the tenant's consent — is covered in the screening process guide.
The SPEEDHOME path: consent-based screening done at the platform layer
SPEEDHOME runs consent-based screening at sign-up — identity, income, and credit checks with the applicant's consent — so the document collection is built into the application rather than negotiated landlord-by-landlord. A platform can do what an individual landlord finds awkward to ask for: run a consented credit check, verify income, and confirm identity before the application ever reaches you.
For landlords who want screening handled consistently, list your property on SPEEDHOME. The platform's Zero Deposit option is a managed rental-risk system — not a financial guarantee product — that replaces the upfront cash deposit with ongoing protection; not every unit or applicant qualifies, so check the live listing for confirmed availability and terms. This does not remove risk, but it shifts the document-and-consent burden onto a process designed to handle it, rather than each landlord improvising.
The structural advantage is simple: when consent and screening are built into the application flow, you collect exactly the documents that matter for payment risk, you collect them lawfully, and you stop collecting the ones that do not.
FAQ
Is a landlord in Malaysia legally required to collect any specific documents from a tenant? No. There is no statute that prescribes a fixed document set for a residential tenancy. Practice is consent-based: you ask for what is relevant to assessing payment risk (identity, income, employment, references), the tenant agrees to share it, and you store only what you need. The tenancy agreement itself, once signed and stamped, is the document that matters most for the legal relationship.
Can I ask for a copy of the tenant's IC? Yes, with the tenant's consent. A copy of the IC is standard for identity verification. Practical good practice is to mask or partially redact the IC number once you have recorded the tenant's identity, and not to hold the tenant's original IC as security. Verify the specific handling against your own data-protection obligations.
Can I ask the tenant for their CCRIS or CTOS report? You can ask the tenant to self-pull their own CCRIS or CTOS report and share it with you — the tenant is the only party who can pull their own report. A landlord cannot pull a third party's CCRIS or CTOS directly. Treat a tenant-supplied report as one signal among several (income, employment, references), not as a guarantee.
Can I refuse to rent to a foreign tenant? Screen applicants on payment predictors — income, credit, references, and the validity of their right to occupy — not on nationality categorically. Where you do rent to a foreign tenant, verify a valid passport and a valid pass or work permit that covers the tenancy term. Refusing an entire nationality category is both a legal risk and a weak predictor of whether rent gets paid.
What should I do with the documents once I have collected them? Use them only for the screening and tenancy purpose, store them securely, retain them for the tenancy plus a reasonable period (around two years) for dispute evidence, and do not share them beyond what the screening requires. If a default later occurs and you intend to report it, you need the tenant's consent clause in the stamped tenancy agreement — not the screening documents alone — to do so lawfully.
Do I need a stamped tenancy agreement, or just the collected documents? A signed and stamped tenancy agreement is the core legal document of the tenancy; the screening documents support your decision but do not replace it. Stamping is done via e-Duti Setem on MyTax. Without a stamped agreement, enforcing your terms — including any default clause — is far harder. See 8 things in a tenancy agreement for what the agreement should cover.