As Malaysia's fintech and credit landscape matures, regulators are shifting focus toward consumer protection, fair lending conduct and conduct-based oversight for non-bank credit providers. Central to that transformation is the Consumer Credit Oversight Board (CCOB) — a new authority set to become the cornerstone of Malaysia's consumer credit regulatory architecture.1
What is the CCOB?
The Consumer Credit Oversight Board (CCOB) is a statutory, independent authority established under the upcoming Consumer Credit Act (CCA) to regulate and supervise non-bank credit providers and credit service providers in Malaysia. It succeeds the CCOB Task Force, which was formed in July 2021 by key authorities including the Ministry of Finance (MOF), Bank Negara Malaysia (BNM) and the Securities Commission Malaysia (SC) to drive the enactment of the CCA.1
The CCA is expected to be gazetted and implemented in early 2026, laying the legal foundation for the CCOB to come into full operational force.2
In essence, the CCOB will function as the competent authority for licensing and supervising consumer credit businesses that are currently unregulated — from Buy Now, Pay Later (BNPL) providers and leasing firms to debt collection agencies and impaired loan buyers.1
Why the CCOB Matters
The rapid growth of fintech credit products — particularly BNPL — has outpaced existing regulatory frameworks in Malaysia. With an estimated 6.5 million BNPL users in the first half of 2025, regulators have flagged the need for stronger oversight to protect vulnerable consumer segments.2
Historically, credit activities by non-banks have been governed by a patchwork of laws with varying levels of consumer protection. The CCOB and CCA aim to unify these scattered frameworks into a single, coherent regulatory regime, enhancing clarity for businesses and better safeguards for consumers.1
Core Objectives of the CCOB
At its core, the CCOB is built around three strategic objectives:
1) Protect Consumer Rights & Promote Fair Lending
The CCOB will enforce fair conduct standards across all licensed non-bank credit providers — ensuring practices like transparent pricing, responsible credit assessments, and ethical debt-collection. It will authorise and supervise firms to ensure they act in the best interests of credit consumers.1
2) Create a Unified Regulatory Framework
Prior to CCOB, different ministries and agencies regulated credit providers in isolation. Under the CCA's phased approach, the CCOB will progressively absorb regulatory functions from other bodies, enabling a coordinated and consistent supervisory model.1
3) Digital-First Supervisory Model
Unlike traditional regulators, the CCOB is being designed as a digital-based regulator, deploying digital tools and supervisory technology (SupTech), including real-time data analytics and AI, to monitor industry practices and risks efficiently.1
How CCOB Will Work: The Phased Transition1
The transformation of consumer credit oversight will be staged over several years, ensuring a smooth transition for regulated entities:
Phase 1 (2025–2027)
- CCOB becomes the competent authority for currently unregulated credit providers.
- Existing ministries and agencies continue overseeing their respective sectors.
- CCOB issues guidelines and begins licensing non-bank credit businesses.
Phase 2 (2028–2030)
- Regulatory functions from the Ministry of Domestic Trade and Cost of Living (KPDNHEP) and the Ministry of Housing and Local Government (KPKT) transfer to CCOB.
- Key legacy laws like the Moneylenders Act and Pawnbrokers Act are repealed and subsumed under the CCA.
Phase 3 (2031 Onwards)
- CCOB is expected to play a central role in Malaysia's envisioned Twin Peaks regulatory model, where market conduct and prudential supervision are clearly separated.
Looking Ahead: The Next 5 Years
Between 2026–2031, the CCOB's responsibilities will expand from licensing and supervising unregulated non-bank credit providers to becoming the custodian of a holistic consumer credit market conduct regime:
• Aggressive Licensing & Standards Enforcement
Once the CCA is enacted, CCOB will begin issuing mandatory guidelines and impose fit-and-proper requirements, minimum standards of conduct and ongoing compliance obligations for all licensed credit providers, including BNPL companies.
• Robust Consumer Risk Monitoring
The Board will monitor credit risk exposures, debt accumulation trends and vulnerable consumer segments, using technology and data analytics to intervene where consumer harm is likely.
• Integrated Market Conduct Surveillance
Through digital platforms and reporting systems, CCOB will gather real-time data from market participants, facilitating better surveillance, early warning signals and compliance enforcement — reducing the incidence of unfair and predatory credit practices.
• Industry and Public Engagement
Expect increased engagement with industry stakeholders and the public, including periodic publications on enforcement, regulatory developments, and educational initiatives to strengthen financial literacy.
Conclusion: A Regulatory Pivot for Malaysia's Credit Economy
The Consumer Credit Oversight Board represents a paradigm shift in Malaysia's financial regulatory architecture. By bringing transparency, accountability, and advanced supervisory capabilities to non-bank credit, the CCOB aims to protect consumers while enabling responsible innovation in the fintech credit space. As its remit expands over the next five years, the Board will be central to balancing industry growth with consumer protection in an increasingly digital credit economy.