Loan Rejected in Malaysia: Can You Find Out Which Credit Agency Was Used?

Decision checklist with sample wording

From rejection message to the right report

1. Keep the application reference and rejection message. Ask the lender whether its decision was based on a report supplied by a credit reporting agency.
2. Suggested wording: 'If this decision was based on a credit reporting agency's report, please confirm that and identify the agency under section 28 of Act 710.'
3. If an agency is named, contact that agency for access to your information or report. Be ready to establish your identity and check any prescribed copy fee.
4. If you identify an error, send a written correction request specifying the entry, the problem and the supporting documents. Keep the request and proof of receipt.
5. Check the route: PPK regulates credit reporting agencies, not CCRIS. For an agency-related complaint, use PPK's official complaint screening page; recheck the live channel before submitting.

Why this matters

Why this matters: after a rejection, buying reports at random is not a substitute for finding out which agency supplied the report behind the decision. Section 28 gives you a focused starting point: ask the credit provider to identify the agency where its unfavourable action was based on that agency's report.

Keep two questions separate. The first is who supplied the credit report. The second is whether the information in that report needs correcting. Identifying an agency does not itself prove an error, and correcting information is not the same as obtaining a promise of credit. This guide concerns those information rights, not a particular borrower's eligibility.

What the law says

What the law says: section 28 of the Credit Reporting Agencies Act 2010 applies when a credit provider takes an 'unfavourable credit action' against a customer based on a credit report. On the customer's request, it must disclose that the action was based on the agency's report and identify the agency from which that report was obtained. Make the request; do not assume the disclosure happens automatically.

The definition in section 2 extends beyond a completely rejected application. It includes denial or revocation of credit, an unfavourable change to existing credit terms, and refusal to grant credit in substantially the amount or on substantially the terms requested. But the report-based condition still matters. Section 28 does not, by its wording, promise disclosure of every internal assessment or compel a lender to grant credit.

Access is a separate step under section 30. Identity and information-location requirements matter, prescribed fees can apply to copies, and the section contains refusal grounds, including third-party information and confidential commercial information. Do not treat access as an unconditional entitlement to the lender's whole file. Ask the named agency for its current access requirements rather than sending personal documents to an unverified intermediary.

If information is inaccurate, outdated, incomplete, irrelevant or misleading, section 31 provides a written correction-request route. Explain what is wrong and what correction is sought. An agency may refuse where reasonable identity or supporting information is missing, or it is not satisfied that the information is wrong or the proposed correction accurate. A request is not an automatic deletion instruction.

How does this impact me?

Hypothetical: your loan is refused and the lender confirms that an agency report was used. Ask it to identify that agency, then request access there. If the report mixes your information with someone else's, identify the disputed entry and provide documents supporting the mismatch. Section 29 requires reasonably practicable measures to avoid incorrect matching; this example does not predict the agency's findings.

Hypothetical: you seek a particular amount but receive an offer on substantially different terms. That can fall within the statutory definition of unfavourable action. Ask whether an agency report formed the basis before assuming section 28 applies. If the issue concerns CCRIS instead, PPK's official FAQ says CCRIS is supervised by Bank Negara Malaysia, not PPK.

Key lessons

Key lessons: build a traceable sequence—decision, request to lender, agency identified, access request, then any supported correction request. As practical record-keeping, retain the report version, dated correspondence, delivery acknowledgements and documents relevant to the exact disputed entry. These are suggested working records, not a statutory checklist or a reason to circulate your complete financial history.

For an agency practice that may breach the Act, section 35 allows a written complaint to the Registrar about your credit information. Name the agency and describe the specific practice. The official PPK complaint page screens whether the matter concerns credit reporting. A complaint does not guarantee an investigation or outcome: section 37 permits refusal in specified circumstances, including anonymous complaints and certain old matters.

Bottom line

Bottom line: ask the lender a precise question, not merely 'Why am I blacklisted?' If its unfavourable decision was based on an agency report, section 28 gives you a route to the agency's identity. Use that answer to check the information through the proper access and correction channels without assuming that a report, a complaint or a correction determines the lending outcome.

Detailed steps

• Send the section 28 request through the lender's own established correspondence channel, identifying the application or decision. Keep a dated copy and any reply.
• Approach the identified agency directly. Confirm its live identity-verification requirements and any prescribed copy fee before sharing documents or paying.
• For an error, put the correction request in writing and attach relevant supporting records. Separate your explanation of the error from a demand that the lender approve credit.
• For an agency-related rights complaint, consult the official PPK complaint screening page listed in the sources. Channel checked on 18 October 2026; recheck it before use.