How Long Does Bad Credit Stay on Your Record in Malaysia? CCRIS, CTOS, AKPK and Bankruptcy

Most readers arrive at this question after a shock — a loan rejection, a card declined at the counter, a property purchase that stalled at the bank. The instinct is to reach for the simplest answer: "how long until this goes away?" And the answer they want is twelve months.

That answer is wrong, but the truth isn't a sentence either. Malaysian credit reporting is two separate systems with two separate retention rules — CCRIS CCRIS at Bank Negara, and CTOS CTOS as a private bureau — each storing different categories of data for different lengths of time. AKPK enrolment, bankruptcy, and court records are each their own special case.

The fair reading is that some things fade quickly, some things take a couple of years, and lenders weigh recent conduct far more heavily than old conduct even when both are technically visible. The harder reading is that nothing is gone in twelve months — and anything that touched the courts or the Insolvency Department stays until you resolve it, and for about two years after.

CCRIS — How Long Each Record Type Stays

CCRIS is the Bank Negara database. Every BNM-regulated lender reports into it monthly. Within CCRIS, different sections of your file have different retention rules — which is where most of the confusion comes from.

Outstanding credit and repayment conduct

Active facilities — your current home loan, car loan, credit cards, personal loans — stay visible as long as they are open. The payment conduct grid shows the last 12 months, and BNM labels the column "Instalment in Arrears for Last 12 Months" — because it is a count, not a capped code. Bank Negara's explanatory notes define it as "0 (no arrears), 1 (1 instalment in arrears), 2 (2 instalments in arrears) etc.", and BNM's own sample report shows a facility running 5, 4, 3, 2, 1, 0 across consecutive months. So 3 does not mean "three or more" — if you are five instalments behind, it shows a 5. Older months drop off the grid.

This is where the "12-month" myth comes from, and it's only true for this one section. If you missed a payment 14 months ago and have been clean since, that specific code is no longer in the visible grid. But the facility itself is still there, and so is everything else in your CCRIS file that has a different retention rule.

Closed facilities

This is the rule most often got wrong, including in earlier versions of this guide. A closed facility does not sit on your CCRIS for a further 12 months. Bank Negara's own CCRIS FAQ states that "the CCRIS Report only shows outstanding or active accounts, pending credit application, and approved credit applications for the last 12 months." A fully settled and closed facility is neither outstanding nor active, so once your lender reports the closure it stops appearing.

The 12 months in that sentence attaches to credit applications, not to closed accounts — which is almost certainly where the "12 months after closure" idea comes from.

Two practical points follow. The update is on the lender's reporting cycle, not BNM's: BNM says the record "will be updated by the participating financial institution by the next reporting date, i.e. not later than 10th of the following month", and that BNM itself "only collects credit information from financial institutions and does not update any records" — so a stale entry is a matter for your bank, not for BNM. And settling arrears is not the same as closing the facility: where you bring an account current rather than closing it, BNM says your regularised account shows in the month of settlement but "the information on number of installments in arrears for the last 12 months will be displayed". The arrears history inside the 12-month window does not vanish just because you paid.

Special Attention Accounts

This is the section most readers worry about. A Special Attention Account flag is triggered when a facility becomes impaired — BNM's term for a loan the lender "has placed under special monitoring" — typically 90+ days overdue, though the exact trigger varies by product and lender. The flag stays as long as the lender keeps reporting the account that way. It is not on a calendar timer.

Once the arrears are cleared and the lender updates BNM, the status changes — usually to "regularised" or, if the facility is closed, to "settled." The historical flag itself may still appear in conduct history within the 12-month rolling window, but the active flag is removed. Some lenders are slow to submit the regularisation update; this is one of the most common CCRIS dispute scenarios. If the flag persists after you've settled, contact the lender's credit administration department in writing.

Settled defaults

What happens after you settle depends on whether the facility stays open. If you bring the account current but keep it open, the facility remains visible: the status updates in the month of settlement, but the arrears history that preceded it still sits in the 12-month conduct grid until it rolls off — lenders see both the problem and the recovery. If settling closes the facility entirely, the rule above applies: once the lender reports the closure, the facility stops appearing on the report. Either way, lenders read a settled default very differently from an open one.

Credit applications

Every time a lender pulls your CCRIS for an application, the application is recorded. This section shows the last 12 months of applications — institution, facility type, amount and status. Bank Negara defines it as approved applications plus those still pending a decision, so there is no "rejected" entry to worry about. Older ones drop off automatically. A flurry of recent applications — five or more applications in the last few months — is read by most lenders as a signal of financial stress, regardless of whether each one was approved.

CTOS — Court Records, Civil Cases and Defaults

CTOS is a different animal. It is operated by CTOS Data Systems Sdn Bhd, a private Bursa-listed company, and it sources data from a much wider field than just BNM-regulated lenders. CTOS adds:

• Court records (writs, summonses, judgments)
• Civil case filings
• Bankruptcy orders and discharges
• Trade references (commercial defaults reported by businesses)
• Directorships and corporate roles
• A proprietary credit score in the 300–850 range

CTOS retention is governed by the Credit Reporting Agencies Act 2010 (CRA Act 2010). Section 25(1) sets the limits, and it runs three different clocks, from three different events — the common shorthand that "everything clears two years after settlement" is wrong for two of them:

Only the third runs from settlement. And s.25(1)(d) carries an escape that matters: a court action older than two years may still be reported "unless the current status of the court action has been ascertained and is included in the credit report" — so an updated status can keep it visible.

Court records and judgments

Civil judgments — bank suits, debt recovery actions, possession orders — are sourced from public court records. Under s.25(1)(d) of the CRA Act 2010, a credit reporting agency shall not include information about a pecuniary action in court more than two years after the date of commencement of the proceedings — "unless the current status of the court action has been ascertained and is included in the credit report."

Note what the statute does not say: the clock is not tied to settlement. Settling still matters enormously, because the status that gets reported is then a satisfied one rather than an outstanding judgment, and because the underlying debt is on the s.25(1)(e) clock, which does run from final settlement. But do not plan on a judgment vanishing two years after you pay it — the statutory clock started when the suit did, and an agency that keeps the status current may keep reporting it.

Trade references and commercial defaults

A trade default reported by a supplier or commercial creditor — distinct from a bank facility — can also appear on CTOS under the CRA Act 2010 framework, dropping off about two years after it is settled. These typically affect business owners and directors more than salaried employees, but anyone who has acted as a guarantor for a commercial debt may find a trade reference attached to their file.

CTOS Score

The CTOS Score itself is a computed value, not a stored event, so it doesn't have a retention period in the same sense. It moves as the underlying data moves — clear a default, settle a judgment, build clean conduct, and the score improves over months and years. There is no manual "reset."

For the underlying mechanics of CCRIS versus CTOS, see What Is CCRIS in Malaysia. For the very common "I'm blacklisted" confusion, bank blacklist Malaysia — the truth is worth a few minutes.

AKPK Enrolment — How It Appears and How Long

AKPK's Debt Management Programme (DMP) is the national formal restructuring route — Bank Negara established the agency for exactly this — and, and the way it appears on CCRIS is widely misunderstood.

During the programme

Once you enrol in a DMP, AKPK negotiates a restructured repayment plan with your participating creditors. The facilities included in the DMP are flagged on CCRIS as being under AKPK management for the duration of the programme. This flag is visible to lenders and most major banks will not approve new credit while it is active — a reality you should plan around if you're enrolling.

A DMP has no fixed tenure — it is customised to your debt and income, and commonly runs for several years. The flag stays for the whole period, and the conduct codes during the DMP reflect the restructured payment schedule, not the original one. Get your projected end date in writing from your counsellor rather than working off a typical range, because that date is what determines when the flag comes off.

After graduation

When you complete all scheduled payments and graduate from the programme, AKPK closes the file with each creditor. The AKPK flag is removed from CCRIS once the lenders submit the closure update. The facilities themselves either become closed (if fully settled through the DMP) or revert to normal active reporting.

This is the moment many readers expect their credit to be "back to normal." It isn't, quite. The conduct history during the DMP remains visible in the 12-month rolling grid until those months roll off. The Special Attention history that preceded enrolment may also still be visible.

We give no month count for when lending resumes, and you should be wary of anyone who does. No Malaysian lender publishes a post-DMP waiting period, and this site previously carried three different windows in three different guides — which is a good sign that none of them was measured. What actually gates a post-DMP application is usually the thin file: the programme leaves you with no active credit, so there is nothing recent for an underwriter to read. The signal worth acting on is six or more consecutive clean months on a fresh facility, typically one secured card used lightly and paid in full. Secured products (home loans, hire purchase) are often reachable earlier, given collateral and income. The post-DMP rebuild guide sets out the sequence.

For the full mechanics of how AKPK works and what enrolment actually involves, see the AKPK debt management programme guide. For what comes next, what happens after AKPK DMP covers the post-graduation rebuild in depth.

Bankruptcy — Pre and Post 2017 Amendments

Personal bankruptcy in Malaysia is governed by the Insolvency Act 1967, significantly reformed by the Insolvency (Amendment) Act 2017 (in force 6 October 2017, which also renamed the former Bankruptcy Act 1967). The 2017 amendments meaningfully changed the timelines, so the answer to "how long does bankruptcy stay on my record" depends on when the bankruptcy order was made.

Bankruptcy orders after the 2017 amendments

Under the 2017 reforms, most personal bankrupts are eligible for automatic discharge after 3 years from the date they submit their statement of affairs to the Director General of Insolvency (DGI), provided they meet the target contribution set by the DGI and render a proper account of their affairs. The automatic discharge mechanism was a deliberate response to the previous regime, under which discharge could take far longer and required either DGI consent or a court application.

Discharge means you are no longer legally a bankrupt. Most restrictions lift — you can hold directorships again (with limits), travel without DGI permission, and so on.

What stays visible after discharge

This is where readers are often surprised: discharge is not instant deletion.

• MdI deregistration: The Malaysian Department of Insolvency removes your name from the active bankrupt list after discharge. The MdI bankruptcy search at search.mdi.gov.my no longer returns you as a current bankrupt.
• CTOS retention: Under the CRA Act 2010, CTOS removes a bankruptcy record about 2 years (24 months) after full settlement of the bankruptcy — you'll need a release letter from the Malaysian Department of Insolvency (MDI), and CTOS updates within 14 working days of receiving it. Until then the record stays visible, updated to show the discharge.
• CCRIS: Historical facilities that contributed to the bankruptcy — defaulted loans, settled-via-DMP facilities, Special Attention history — follow their own CCRIS retention rules. Many of these facilities are closed by the time of bankruptcy, so they tend to drop off CCRIS on the ordinary closed-facility timeline.

Practical credit rebuild after discharge

Most major banks will not lend to a recently discharged bankrupt. The realistic rebuild window starts after discharge, not at discharge — and it typically involves small secured products (a secured credit card, a small hire purchase with substantial deposit) before larger unsecured facilities become accessible. A clean 24-month conduct history post-discharge is roughly the minimum threshold for serious lender reconsideration on unsecured products.

For step-by-step rebuild tactics that work in this window, see rebuilding credit after default.

Pre-2017 bankruptcies

If the bankruptcy order pre-dates the 2017 amendments, the older discharge framework may apply — discharge by DGI certificate, by court order, or by lapse of time without automatic eligibility. The CTOS retention rules apply similarly, but the route to discharge itself is different. Anyone in this position should consult MdI directly or a licensed insolvency practitioner; this is not territory for self-help reading.

What Lenders Actually Look At (vs What's Visible)

Here is the gap that most credit-anxiety conversations miss: what's on your file and what a lender weighs are not the same thing.

A modern Malaysian bank's underwriting model heavily weights recent conduct — typically the last 6 to 24 months — and progressively discounts older events. A two-year-old default that's been settled, followed by clean repayment on a small secured card, is a very different application from a six-month-old default settled last week. Both may be visible on CTOS. The underwriting weight is dramatically different.

This is why a headline retention figure can sound discouraging but isn't quite the whole story. The visibility period and the practical-impact period are different things:

The right read is not "I have to wait the full visibility window." The right read is "the older the event, the lighter the weight — provided what I'm doing now is clean."

This cuts both ways. If you have a clean 5-year history and one missed payment three months ago, the recent miss carries disproportionate weight in the assessment because it's recent. Recency works for you and against you with the same logic.

How to Plan a Realistic Rebuild

If you're starting from a damaged file, here is the rough trajectory based on how lenders actually weigh recent conduct:

Months 0–6. Stabilise. Every active facility paid on time, every month. Auto-debits from a buffered account. No new credit applications in this window — new applications on top of existing damage make the file look worse.

Months 6–12. First signs of differentiation in the 12-month conduct grid. Some lenders may consider small secured products in this window — a secured credit card, a small hire purchase with substantial deposit.

Months 12–24. Conduct grid is now majority clean if you've held the line. Unsecured products start becoming accessible, particularly with lenders you already have a relationship with. AKPK graduates often see meaningful options open in the back half of this window.

Months 24–36. Clean 24-month grid plus the natural roll-off of older events means the file is materially different from where it started. Most lenders are willing to engage seriously on most product categories, provided income and DSR support the application. Post-bankruptcy applicants typically need to be in this window before serious unsecured options reappear.

None of this is automatic. A single missed payment at month 14 doesn't reset the whole rebuild, but it does cost ground on that specific facility's conduct code.

Use the debt service ratio calculator before applying for anything — applying for credit your DSR can't support generates a rejection that adds an application to the file without producing the credit. And if your current situation isn't stable enough to even start the rebuild, talk to AKPK first — counselling is free, and they will tell you honestly whether a DMP or a different path makes more sense.

Key Takeaways

• CCRIS retention is 12 months for the conduct grid and for credit applications, and until the lender updates for Special Attention flags. Closed facilities are not retained for a further 12 months — BNM states the report shows only outstanding or active accounts, so a closed facility drops out once your lender reports the closure (by the 10th of the following month at the latest).
• CTOS removes litigation, judgments, defaults and bankruptcy records about 2 years (24 months) after the matter is fully settled under the CRA Act 2010 — the record stays while the matter is open, and the clock runs from settlement, not from the original action.
• AKPK enrolment is flagged for the duration of the DMP (tenure is set case by case, commonly several years), then the flag is removed on graduation. No lender publishes a post-graduation waiting period — let the conduct grid decide, and treat six or more consecutive clean months on a fresh facility as the signal to re-apply.
• Bankruptcy is eligible for automatic discharge after 3 years (from submission of the statement of affairs) under s.33C as amended in 2023 — but the Director General of Insolvency can suspend that discharge by up to two years if you have not met your obligations, so five years is the ceiling. Full detail in the bankruptcy CCRIS guide. Earlier amendments, and the CTOS record is removed about 2 years after full settlement. Practical credit rebuild starts after discharge, not at discharge.
• Lenders weight recent conduct heavily and discount older events progressively. A two-year-old settled default with clean repayment behind it reads very differently from a six-month-old one.
• A realistic rebuild trajectory is 12 months for early signs, 24 months for unsecured-product re-access, 36+ months for materially diminished weight of older events.
• Nothing on CCRIS or CTOS is permanently sealed against time — but nothing is gone in twelve months either.