How to Dispute a CCRIS or CTOS Error in Malaysia (Step by Step)

Finding an error on your CCRIS CCRIS report is frustrating — especially when it costs you a loan approval, a credit card, or a rental application. The good news: errors are fixable. The harder news: the process takes time, and it goes through the lender, not Bank Negara Malaysia.

This guide walks you through exactly what to do. No shame, no panic — just the steps.

What Counts as a CCRIS or CTOS Error

Not every entry you dislike is an error. An "error" means the data is factually wrong. These are the four patterns we see most often:

A wrong late payment marker. Your CCRIS shows a "1" (one month overdue) for a month you actually paid on time. The lender may have processed the payment a day or two after their reporting cutoff, or there was a system mismatch on their end.

An account you do not recognise. A facility appears under your MyKad number that you never opened. This is often an identity mix-up — two Malaysians with similar MyKad numbers, or a clerical mismatch when the lender keyed the data — but in rare cases it can be identity theft.

A settled debt still showing active. You paid off a loan or credit card months ago and received a closure letter, but CCRIS still shows the facility with an outstanding balance. The lender hasn't submitted the closure update yet.

Wrong personal details. Address, employer, MyKad spelling, or contact details that no longer match reality. These rarely affect approval directly, but they signal a data hygiene issue that can spiral.

A separate category is data on CTOS CTOS that does not come from a lender at all — court records, bankruptcy filings, directorships, telco arrears. Those follow a different dispute path, covered below.

Who You Actually Dispute With

This is where most people lose time. They write a long, formal letter to Bank Negara Malaysia, wait six weeks, and hear nothing. Here's why.

BNM operates the CCRIS database, but BNM does not key in the data. Every line on your CCRIS came from a lender — a bank, an Islamic bank, a development financial institution, or a licensed non-bank lender. They submit it to BNM on the 15th of each month. BNM stores and displays it.

So the correction has to come from the same source. The lender investigates, finds the issue, and submits a corrected file to BNM. Only then does your CCRIS update.

For CCRIS errors, you dispute with the lender.

For CTOS-specific errors (court actions, directorships, telco entries, address history), you dispute with CTOS — because CTOS sources that data themselves from courts, the business registry, and other commercial partners.

BNMTELELINK comes in as your escalation channel if the lender ignores you. It is not your first stop.

Step 1: Pull the Evidence

Before you write to anyone, get your hands on three things.

The CCRIS report itself. Open eccris.bnm.gov.my, log in with your MyKad, and download the PDF. Print it. Highlight the disputed line — the specific facility, the specific month, the specific entry. If it's a CTOS issue, pull the CTOS report instead (free annual MyCTOS Basic or paid MyCTOS Score). The how-to for CTOS is in our free CTOS check guide.

Your own records that contradict the entry. This is the bit most readers underestimate. The dispute is much faster when you can show, not tell.

• Disputing a late payment? Pull the bank statement showing the payment date.
• Disputing a settled debt still active? Find the settlement letter or zero-balance confirmation.
• Disputing an account you didn't open? Be ready to provide your MyKad copy and a statutory declaration that the account is not yours.
• Disputing an identity mix-up? Compare the facility details on CCRIS with your own employer letter, address records, or any account where the details are correct.

A clear written statement of what you want corrected. Three short paragraphs is enough. What the entry currently says. What is wrong with it. What it should say instead. Reference the facility number from your CCRIS so the lender can match it on their side without guessing.

If you can't put your hands on the supporting document right now, get it before you write the letter. A dispute without evidence is a polite request — the lender can sit on it for months.

Step 2: Write the Dispute Letter

You write to the lender's customer service or recovery department. Most banks have a dedicated email channel for disputes — check their website footer for "complaints" or "customer feedback." If in doubt, email the general customer service address and request that it be routed to the credit data administration team.

What to include:

• Your full name as registered with the lender
• Your MyKad number
• The facility number (or account number) shown on your CCRIS report
• Specific month or entry you are disputing
• What CCRIS currently shows
• What you believe it should show
• A short factual statement (one or two sentences) of what happened
• Copies of supporting documents attached

What not to include: emotion, threats, legal language, or anything about how much this is costing you in stress. Keep it factual. The clerk who handles your file is processing a queue — clear, evidenced disputes go through faster than long, angry ones.

How to send it. Email is the practical default — fast, timestamped, and gives you a record. For higher-value disputes (a wrongly-reported default, a facility you never opened) send both email and registered post. The registered post receipt is your proof that the lender received the dispute on a specific date, which matters if you later have to escalate.

Keep a copy of everything. The email, the registered post slip, the attached documents. You will need them if you escalate.

Step 3: Wait One CCRIS Cycle

This is the part nobody likes. CCRIS updates on the 15th of every month, and only the 15th. Even if the lender investigates your dispute on the day they receive it, the correction won't show until their next submission file goes to BNM.

A realistic sequence looks like this:

• Day 1: You send the dispute.
• Day 1 to 14: Lender acknowledges receipt (banks are generally required to respond within a few working days).
• Day 5 to 25: Lender investigates internally.
• Lender prepares the correction in their next monthly file to BNM.
• 15th of the following month: BNM processes the corrected file.
• 15th + 1 to 5 days: Updated CCRIS visible to you on eCCRIS.

So a smooth dispute resolves in 30 to 60 days. Tangled ones — identity mix-ups, multi-facility settlements, disputes that need court documents — can run 90 days or longer. There's no point checking CCRIS every other day. Check it once after the 15th of the month following your dispute, and again the month after if needed.

Step 4: If the Lender Doesn't Respond

This happens more often than it should. If 30 days have passed and you have heard nothing — or the lender has acknowledged the dispute but no correction has appeared after the second reporting cycle — you escalate.

Call BNMTELELINK on 1-300-88-5465 (Mon–Fri, 9am–5pm). The service is free. They take your details, the lender's name, the nature of the dispute, and the dates of your previous correspondence. BNM then contacts the lender on your behalf as a mediator.

This works. Lenders pay close attention when BNM is on the line, because credit reporting obligations are part of their licensing conditions. Most disputes that have stalled at the lender start moving within a week of a BNMTELELINK referral.

Before you call, have your file in front of you: dispute date, lender name, facility number, copy of your original letter, any acknowledgment you received.

Disputing CTOS-Specific Data

CCRIS only holds borrowing data from licensed lenders. CTOS holds that plus court records, directorships, bankruptcy filings, trade references, and address history. If your dispute is about one of those non-CCRIS items, the lender doesn't have it — CTOS does.

The CTOS dispute process is separate. Steps:

1. Go to ctoscredit.com.my and pull your CTOS report (free MyCTOS Basic or paid MyCTOS Score).
2. Log in to your CTOS account and use the in-portal dispute form — they have a "Dispute" or "Report an Issue" link tied to specific entries on your report.
3. Submit the disputed item with supporting documents. For a court record that doesn't belong to you, attach the court document showing the actual respondent details. For a directorship you've resigned from, attach the SSM filing showing your resignation.
4. CTOS contacts the original data source — the court, SSM, the telco, the trade creditor — to verify.

CTOS typically resolves disputes within 14 to 21 working days, faster than CCRIS because the data sits in their own systems. If CTOS does not respond, you can escalate to BNM as well — CTOS is licensed under the Credit Reporting Agencies Act 2010, so BNM has oversight.

What You Cannot Dispute

Honesty matters here. Not everything you'd like to remove is removable.

Legitimate late payments. If you genuinely paid 60 days late on your credit card in March 2025, CCRIS will show a "2" for that month. The lender has no obligation to remove it, and shouldn't. The 12-month rolling window means it ages out naturally.

A settled debt within the recent window. Once a facility is closed, it drops off CCRIS — but the closure itself takes a CCRIS cycle or two to process, and CTOS may retain a record of the past account for up to 12 months after closure as part of your borrowing history.

Judgment debts and bankruptcy records. These have longer retention tails on CTOS (typically several years from the date of resolution), and they are public-record data. The dispute path applies only if the data is wrong — wrong person, wrong amount, wrong status (already discharged but still showing).

Special Attention Account status that is current. A SAA flag stays until the underlying account is regularised. You cannot dispute the flag itself — you settle the arrears, the lender updates BNM, the flag changes. If you're stuck here, our guide on rebuilding credit after default covers what to do next.

If a record is legitimate but old, the better strategy is patience — let the rolling window do its work — and keep your current conduct clean so newer data tells a better story.

Common Dispute Mistakes

These are the patterns that cost readers months.

Writing to BNM first. Covered above. BNM stores the data, the lender owns the data. Save the BNMTELELINK call for escalation.

No supporting documents. A dispute without evidence is treated as a query. Get your bank statement, your settlement letter, your payment receipt — whatever proves the version you want recorded — before you write.

Disputing while still in active arrears. If your dispute is about a late marker on an account that is currently overdue, settle the arrears first. The lender will not action the dispute on an account that's still in default, and a stale dispute file actively hurts you.

Waiting too long to act. The CCRIS rolling 12-month window for payment conduct means that very old markers age off on their own. If the disputed entry is already 10 or 11 months old, sometimes the right call is to wait two more months and let it drop off naturally — disputing a marker that's about to expire anyway uses energy that's better spent elsewhere.

Disputing the same item repeatedly. Once you've filed a dispute and the lender has investigated and rejected it, repeating the same dispute with the same evidence gets you nowhere. New evidence opens it back up. Same evidence resubmitted does not.

When to Bring AKPK In

If the dispute is tangled up with arrears you're struggling to repay — say, the disputed late payment is one of several on an account where you genuinely cannot keep up — call AKPK (Agensi Kaunseling dan Pengurusan Kredit). Free, government-linked, no commercial agenda.

AKPK won't dispute the entry for you. What they will do is help you sort out the underlying repayment problem, so the dispute is happening on an account that's stable rather than one that's actively getting worse each month. They can also draft a Debt Management Programme that gives you breathing room while the dispute is resolved. Our AKPK DMP guide covers what to expect.

A Realistic Final Word

Disputes are a recovery tool, not a magic eraser. When they work, they fix real damage — a wrongly-reported late marker that's been costing you loan approvals can be wiped within two CCRIS cycles. When they don't work — usually because the underlying entry is actually correct — no amount of escalation changes that.

The reader who gets the best outcome from a dispute is the one who: pulls the evidence first, writes to the lender (not BNM), waits one full cycle before escalating, and stays factual throughout. That's the playbook.

Start at eccris.bnm.gov.my today. Print the report. Highlight the line you want to fix. The rest is paperwork.