Malaysia now has a single consumer-credit regulator. The Consumer Credit Act 2025 — Act 873 — was gazetted on 31 December 2025 and came into force on 1 March 2026, and with it the Government established the Suruhanjaya Kredit Pengguna, the Consumer Credit Commission, per the Ministry of Finance release carried by the CCOB Task Force. Minister of Finance II Amir Hamzah Azizan framed it as building “a transparent and responsible credit system”.
The headline is consolidation. The detail worth reading is the split.
Two regimes, not one
SKP’s own authorisation guidance states that the framework “comprises two regimes: licensing for credit businesses and registration for credit service businesses”. Licensing covers credit business, conventional and Islamic, plus buy now pay later schemes, factoring and leasing. Registration covers credit service business, impaired loan or financing acquisition, debt collection, and debt counselling and management. That is the regulator’s published breakdown, not an interpretation of it.
So the entity that lends to you is licensed. The entity that chases you for the arrears is registered.
A licence and a registration are not the same instrument, and nothing on the authorisation page as we read it suggests they carry identical entry tests. For a borrower, that asymmetry lands on the awkward half of the transaction. Collection is the stage where pressure, contact and privacy go wrong, and it is the stage sitting on the lighter of the two regimes.
Who is a credit consumer
The perimeter is drawn around the borrower, not the lender. SKP defines a credit consumer as an individual taking credit for personal, domestic or household purposes, a micro or small enterprise borrowing up to RM300,000, or an individual acting as a social guarantor. Above RM300,000, a small enterprise falls outside.
There is also a third route. An entity whose credit or credit service business does not involve credit consumers must file an annual declaration with SKP under section 79 of the CCA, stating that it does not lend to credit consumers, that it will re-declare each year, and that it will seek authorisation if it ever intends to serve one.
What is still moving
The ministry release says licensing and registration requirements took effect on 1 June 2026, with a six-month transition period for industry to apply. Treat any app or agency claiming SKP authorisation today as a claim to check rather than a fact: we have not verified any named firm against an SKP list of authorised entities, and nor should you take one on trust. The habit is the same one we set out for checking a pindar licence in Indonesia: go to the regulator’s own list, never the app’s own copy.
Borrow only from lenders licensed in your own jurisdiction, and verify with the regulator directly rather than trusting an app listing.