Consumer Credit Act 2025 · Updated to 31 Dec 2025 · Part IX · Enforcement
106. Power of Regulatory and Supervisory Authority to take action
Feedback & supportA person has committed a breach under this Act if the person fails to comply with or give effect to—
person
“person” includes an individual, any sole proprietorship, corporation, statutory body, local authority, society, trade union, co-operative society, partnership and any other body, organization, association or group of persons, whether corporate or unincorporate;
any provision of this Act;
any regulations made under this Act; or
any order, direction, standards or guidelines, condition, restriction, specification or requirement under this Act.
A Regulatory and Supervisory Authority shall have regard to the following matters in determining the appropriate action to be taken in each case:
the effectiveness of the action to be taken under this Act;
the proportionality of the action to be taken with the breach committed;
the deterrence of future breaches of similar nature by other persons; and
any other matter that is considered as relevant in the opinion of the Regulatory and Supervisory Authority.
Consumer Credit 99
If the Regulatory and Supervisory Authority is of the opinion that a person has committed a breach and it is appropriate to take action against that person, the Regulatory and Supervisory
Authority may, subject to section 131, take any one or more of the following actions:
make an order in writing requiring the person in breach—
to comply with or give effect to; or
to do or not to do any act in order to ensure compliance with, such provisions, regulations, order, direction, standards or guidelines, condition, restriction, specification or requirement referred to in subsection (1);
except for a breach of any provision as set out in
Schedule 7, impose a monetary penalty in such amount as the Regulatory and Supervisory Authority considers appropriate, but in any event not exceeding five hundred thousand ringgit;
reprimand in writing the person in breach or require the person in breach to issue a public statement in relation to such breach, if it is in the opinion of the Regulatory and Supervisory Authority that such breach is relevant for the information of the general public;
make an order in writing requiring—
the person in breach to take such steps as may be directed by the Regulatory and Supervisory
Authority to mitigate the effect of such breach;
or
a credit provider or credit service provider to remedy the breach including making restitution to any other person aggrieved by such breach;
or
100
make an order in writing to remove the person in breach from office or that the person in breach be barred from becoming a chief executive, director, partner or be involved directly or indirectly in the management of a credit provider or credit service provider, for such period of time as may be specified by the Regulatory and Supervisory Authority which shall not exceed a period of five years.
If a breach is committed by a body corporate or unincorporate, any action under subsection (3) may be taken against—
body corporate
“body corporate” means a person incorporated by or under any written law, and includes a corporation or statutory body, public authority or other authority, incorporated by or under a written law;
a person who is its director, controller, officer or partner, or was purporting to act in any such capacity; or
a person who is concerned in the management of its affairs, at the time of the breach unless that person demonstrates that the breach was committed without his consent or connivance and that he exercised all such diligence to prevent the breach as he ought to have exercised, having regard to the nature of his function in that capacity and to the circumstances.
Action under subsection (3) may be taken against the body corporate or unincorporate if a breach is committed by—
a person who is a director, controller, officer or partner of the body corporate or unincorporate, or was purporting to act in any such capacity; or
a person who is concerned in the management of the affairs of the body corporate or unincorporate.
For the purposes of subparagraph (3)(d)(ii), in determining whether or not any amount is to be paid by the credit provider or credit service provider, as the case may be, the Regulatory and Supervisory Authority shall have regard to—
credit provider
“credit provider” means a person who carries on a credit business where the person— (a) is licensed under Part V of this Act; (b) is permitted to do so under any other written law; (c) is subject to the Hire-Purchase Act 1967; or (d) is subject to the Consumer Protection Act 1999;
whether or not one or more persons have suffered loss or been otherwise adversely affected as a result of the breach; or
the profits that have accrued to such person in breach.
Consumer Credit 101
Any monetary penalty paid by a person in accordance with paragraph (3)(b) shall be paid into and form part of—
the operating fund of the Malaysia Co-operative Societies
Commission where the monetary penalty is imposed by the Malaysia Co-operative Societies Commission;
the Fund established under section 26 where the monetary penalty is imposed by the Commission; or
the Federal Consolidated Fund where the monetary penalty is imposed by other Regulatory and Supervisory
Authorities.
Where a person fails to pay a monetary penalty imposed under paragraph (3)(b) within the period specified by the Regulatory and Supervisory Authorities—
the penalty imposed may be sued for and recovered by the Malaysia Co-operative Societies Commission as a civil debt due to the Malaysia Co-operative Societies
Commission;
the penalty imposed may be sued for and recovered by the Commission as a civil debt due to the Commission;
or
the penalty imposed by other Regulatory and Supervisory
Authorities may be sued for and recovered by the Government as a civil debt due to the Government.
Where a person fails to remedy the breach including making restitution to any other person aggrieved by the breach under paragraph (3)(d), notwithstanding any other written law, the Regulatory and Supervisory Authority may sue for and recover such sum as a civil debt due to the person aggrieved by the breach.
Nothing in this section shall preclude the Regulatory and
Supervisory Authority from taking any of the actions that it is empowered to take under this Act against the person in breach.
this Act
“this Act” includes any subsidiary legislation, standard or guidelines and notification made under this Act;
102