Kuala Lumpur, September 4, 2025 — Malaysia’s Dewan Negara has passed the Consumer Credit Bill 2025, laying the groundwork for a comprehensive regulatory framework governing the consumer credit industry—including buy now, pay later (BNPL) services. The bill, introduced by Deputy Finance Minister Lim Hui Ying, passed its second and third readings following debate by eight senators.
At the heart of the legislation is the creation of a Consumer Credit Commission (CCC), which will oversee licensing, enforcement, and industry conduct. Entities offering BNPL services—domestic or international—must now be licensed by the CCC to operate in Malaysia.
Key Provisions of the Bill
Deputy Minister Lim emphasised that BNPL operators will also be subjected to ongoing oversight. They must submit periodic reports to the CCC, and failure to comply will lead to enforcement actions.
Most notably, the bill mandates creditworthiness and affordability checks before extending any BNPL financing—ensuring that consumers are not stretched beyond their ability to repay.
The CCC will also have jurisdiction over previously unregulated credit or service providers, boosting industry professionalism. Oversight tools will include complaint analysis, mystery shopping, and web scraping to identify issues such as misleading advertising or unfair terms in loan agreements.
Enforcement Tools and Data Protection
The Consumer Credit Bill grants the CCC robust enforcement powers, allowing it to issue warnings and impose fines of up to RM500,000 per violation. It can also enforce corrective directives, suspend licenses, or revoke registrations of erring credit providers.
In recognition of rising concerns around data privacy, the CCC can also issue mandatory standards and guidelines for data handling. It will enforce compliance, closing gaps in consumer protection where data misuse or security lapses exist.
The Ledger Asia Concerns
This landmark legislation positions Malaysia among the growing number of countries proactively regulating the BNPL sector—a rapidly expanding form of consumer credit that had previously operated largely without supervision.
By requiring licensing, financial assessments, and oversight, the law aims to shield vulnerable consumers from unsustainable debt and unfair financial practices. The CCC’s authority to prosecute non-compliance and safeguard personal data aligns with broader global trends in consumer finance regulation.
Malaysia’s move underscores the country’s commitment to responsible finance, promoting safer consumption and setting a modern standard for digital credit governance in Southeast Asia.
