CBM Score Explained: Credit Bureau Malaysia's 0-100 Scale vs CTOS

You have probably heard of CTOSCTOS (CTOS)Malaysia's largest private credit reporting agency, licensed under the Credit Reporting Agencies Act 2010. It compiles a credit report and a CTOS Score (from 300 to 850) that many lenders use to help decide your application., and if you have ever applied for a loan you will have brushed up against CCRISCentral Credit Reference Information System (CCRIS)The credit database run by Bank Negara Malaysia. It records the loans, credit cards and financing you hold with licensed banks, plus your repayment conduct for the last 12 months. It is not a blacklist — it is a factual record.. But there is a third name that quietly sits behind a growing number of lending decisions in Malaysia, and most people have never heard of it: Credit Bureau MalaysiaCredit Bureau Malaysia (CBM)One of Malaysia's licensed private credit reporting agencies, alongside CTOS and Experian. It was set up with Bank Negara backing and focuses heavily on small-business (SME) credit reporting, producing reports lenders use to assess borrowers., usually shortened to CBM.

That obscurity matters, because a fintech or a digital lender may be reading a CBM score on you that you have never seen. This guide explains what CBM is, how its unusual 0-to-100 score works, where it sits next to CTOS and CCRIS, and how to check and correct yours.

What Credit Bureau Malaysia Actually Is

Credit Bureau Malaysia Sdn Bhd is a credit reference agency with a distinctive ownership history. It was founded in 2008 by Credit Guarantee Corporation Malaysia (CGC) and Dun & Bradstreet as Malaysia's first credit bureau for small businesses. In 2020, Sunway Holdings acquired a 51% stake, so today CBM is jointly owned by Sunway Holdings and CGC. Note that despite the CGC link, Bank Negara is not a direct shareholder — CBM is a commercial credit bureau, not a central-bank body — though it operates under the same credit-reporting regulation as CTOS and Experian.

What CBM produces is a credit scoreCredit ScoreA number that sums up how reliably you have handled credit, used by lenders to gauge risk. In Malaysia the best-known one is the CTOS Score, but banks also form their own view from your CCRIS record. — a statistical estimate of how risky you are as a borrower — for both individuals and businesses. That is an important distinction from CCRIS. CCRIS is a factual record: it lists your facilities and your repayment conduct, but it does not judge or rank you. CBM, by contrast, is a model: it takes that kind of data and turns it into a single number that expresses risk.

How the 0-to-100 CBM Score Works

Here is the part that trips people up. The CBM score runs from 0 to 100, and a higher score means lower risk.

The direction — higher is better — is the same as most credit scores. What is unusual is the size of the scale. If you are used to seeing a CTOS scoreCTOS Score (CTOS Score)A three-digit number from 300 to 850 calculated by CTOS that summarises how risky you look to a lender. A higher score signals lower risk. It is one input into a lending decision, not a pass-or-fail verdict. in the hundreds, a two-digit CBM figure can feel alien, and it is tempting to read a low-looking number as bad news when it may be nothing of the sort. So keep two rules in mind:

1. Higher is lower risk. A larger number on the 0-to-100 scale points to a stronger, less risky profile.
2. Do not compare it to a CTOS number. A CBM 0-to-100 score and a CTOS 300-to-850 score are different models on different scales. A figure that looks small in CBM terms tells you nothing when placed next to a CTOS figure — they simply are not the same measurement.

One thing we will not do here is invent precise good, fair and poor cut-offs for the CBM scale. CBM's MySCoRE does show a rating word alongside your number — an 85, for example, is marked "Very Good" — but, unlike CTOS, CBM does not publish a full public table of band thresholds, and the exact cut-offs individual lenders apply are their own and not published. What is genuinely known is the direction of the scale — higher means lower risk — and that is what we will stand behind. Treat your CBM score as a relative signal of risk, not as a number you can slot into a published pass-or-fail table.

Where CBM's Data Comes From

CBM's score is built from more than one source. It draws on CCRIS-type data — the credit-facility and repayment information that flows through Bank Negara's system — combined with information from participating financial institutions and alternative data.

That last ingredient is part of why CBM has found favour with newer lenders. Alternative data can capture signals that a traditional bank record misses, which is useful when assessing someone with a thin conventional credit history. It also explains an outcome that surprises people: you can have a perfectly clean CCRIS and still not have the CBM score you expect, because CBM is layering its own model and its own data on top of the raw record rather than simply echoing it.

Who Uses CBM — and Why You Might Be Scored Without Knowing

For years, most consumer attention in Malaysia has gone to CTOS, and for good reason — it is the most consumer-visible bureau. CBM has kept a lower public profile. But its relevance is growing, particularly among fintechs, ride-hailing platforms and digital lenders.

These are exactly the players reshaping how Malaysians borrow: app-based lending, buy-now-pay-later, gig-economy income assessments, digital banks. When one of them assesses you, there is a real chance a CBM score is part of the picture, even though the brand name never surfaces in the app. That is the quiet risk of an obscure bureau — a profile can exist and be used to judge you without you ever having looked at it.

How to Check Your CBM Score

You check your CBM score by applying online through creditbureau.com.my. The process is an online application for your report, and there is a small fee — check the site for the current amount before you apply, because published fees change and we will not quote a figure that may be out of date.

Because CBM is so much less familiar than CTOS, this is often a genuine blind spot. Many Malaysians have a CBM profile they have simply never checked. If a digital lender or fintech has assessed you recently, seeing your own CBM report removes the guesswork about what informed that decision.

How to Correct a CBM Error

If you pull your CBM report and something looks wrong, the route is direct: contact CBM with supporting documents. As with any credit record, the correction depends on evidence — statements, settlement letters, or whatever substantiates your case — so gather your paperwork before you raise the issue.

Two things to keep in mind. First, because CBM produces a score built on underlying data, an error may sit in the data feeding the model rather than in the number itself, so be specific about what you believe is inaccurate. Second, correcting a record at one bureau does not automatically fix the others — CBM, CTOS and CCRIS are separate systems, so if the same wrong information appears in more than one place, you may need to raise it with each.

CBM, CTOS and CCRIS Side by Side

It is easy to blur the three together, so here is the clean version:

• CCRIS is Bank Negara's factual database of your credit facilities and 12-month repayment conduct. No score.
• CTOS is a private credit reporting agency with its own 300-to-850 score, built on CCRIS-type data plus its own sources.
• CBM is jointly owned by Sunway Holdings and Credit Guarantee Corporation (CGC) and has its own 0-to-100 score, also built on CCRIS-type data plus participating institutions and alternative data.

If you want the full comparison of how the three relate — who sees what, and which matters for which decision — the CTOS vs CCRIS vs CBM comparison lays it out in detail. To understand the raw record underneath all of them, start with what CCRIS is.