The rules banks work to, what they must tell you, and what you can do if a decision was handled badly.
Bank Negara Malaysia sets the rules that every licensed bank in the country operates under. Most of those rules are written for the bank’s compliance department and will never concern you. A few of them change what you can expect during an application, and what you can do when something goes wrong. Those are the ones worth knowing.
This is a plain reading of what the rules mean in practice for an SME applying for bank financing. It is general information, not legal advice, and where a specific situation matters you should take proper advice on it.
A surprising number of business owners believe that if a bank declines them unfairly, Bank Negara can step in and reverse it. It cannot, and it will not.
Credit decisions belong to the bank. A bank is entitled to decline an application for any commercial reason, or for no stated reason at all, provided it has not broken a rule in how it dealt with you. BNM regulates how banks behave, not which businesses they choose to lend to. Understanding that distinction saves a great deal of wasted effort, because it tells you that the route back from a decline runs through fixing the application, not through complaining about it.
What BNM does regulate is conduct: what a bank must disclose to you, how it must treat you, how it must handle your complaint, and how it must deal with your data. Those are real obligations and they are enforceable.
BNM’s product transparency and disclosure requirements mean a bank cannot present a financing product to you as a set of numbers with the detail buried. Before you commit, you are entitled to a clear statement of what the facility costs and what it obliges you to do.
In practice this means you should receive a product disclosure sheet, or an equivalent document, setting out the key terms in a standard format. It should tell you:
If you have been quoted a rate and nothing else, ask for the disclosure document before you sign anything. A bank that is reluctant to produce one is telling you something.
The headline rate is rarely the whole cost. Arrangement fees, commitment fees on undrawn limits, annual review fees, legal and valuation costs, and stamp duty all sit outside it. Two offers at the same rate can differ materially once those are counted, and the cheaper headline is not always the cheaper facility. Ask for the total cost over the full tenure, in ringgit, and compare that.
BNM’s expectations on the fair treatment of financial consumers run through the whole relationship, not just the sale. The principles that matter most to an SME borrower are straightforward. Products should be suitable for the customer they are sold to. Information should not be misleading. Staff should not be incentivised in ways that work against you. Complaints should be handled properly.
There is also a broader expectation of responsible financing, which is the reason a bank will interrogate your ability to repay rather than simply lend against security. When a credit officer asks uncomfortable questions about your cash flow, that is not obstruction. It is the bank doing what it is supposed to do, and a bank that lends to a business that cannot service the debt has failed you as much as itself.
You are entitled to be told the outcome of your application. What you are not automatically entitled to is a detailed explanation of the credit reasoning behind it, and in practice most declines come back as a general reference to credit policy.
That is frustrating but it is not a breach. Banks are cautious about reasons partly because a stated reason can be argued with, and partly because the real reason sometimes involves information they are not free to share.
You can still ask, and it is worth asking politely and specifically. A question like "was this about the conduct on the account, the trading history, or the sector" is much more likely to get a useful answer than "why was I declined". Relationship managers will often tell you more than a letter will, because they would rather you came back in six months in better shape than never came back at all. Working out the real reason before the next application is the single most valuable thing you can do after a decline, and it is the subject of the six reasons Malaysian banks decline SME applications.
There is a defined route, and it runs in order. Skipping a step wastes time.
One thing worth being clear about: a complaint about how you were treated is separate from an appeal against the decision. The first has a route. The second does not, and the only real appeal against a decline is a better application.
Everything you hand over in an application is personal data or confidential company information, and both are regulated. Banks operate under BNM’s requirements on customer information as well as the Personal Data Protection Act 2010. You are entitled to know what is collected, what it is used for and who it is shared with, and you can ask for access to what is held about you.
This matters practically when you use an intermediary. Anyone preparing an application on your behalf is handling your audited accounts, your bank statements and your directors’ personal details. Ask them what their retention period is and who else sees the file. If the answer is vague, that is a reason for concern.
The rules give you a right to information, a right to fair treatment and a route for complaint. They do not give you a right to credit. So the practical response to all of this is not to lean on the regulations, it is to make the application strong enough that the question does not arise.
Read the disclosure sheet before you sign. Ask what the total cost is, not just the rate. Understand the security you are giving, particularly any personal guarantee. Know what is on your CCRIS and CTOS records before the bank does. And if you are declined, spend the effort on working out why rather than on contesting it.
If you would like a second opinion on a facility you have been offered, or on a decline you do not understand, talk to an adviser. SMEBox does not lend and does not set any of these terms. We read them with you.
No. BNM regulates how banks conduct themselves, not which businesses they lend to. A credit decision is commercial and belongs entirely to the bank. BNM can act where a bank has breached a conduct rule, for example by misleading you about the cost of a product or mishandling your complaint, but it does not sit as an appeal body over lending decisions.
Not in detail. You are entitled to the outcome, and banks generally give a general reason such as not meeting current credit criteria. It is still worth asking the relationship manager directly and specifically, because informal answers are usually more useful than written ones and most will tell you what would need to change.
It is an independent body that resolves disputes between financial consumers and financial service providers, free of charge to the complainant. Eligible small businesses can use it as well as individuals, subject to limits on claim size and on how long after the bank’s final response you can bring it. Check the current eligibility criteria before relying on it, and go through the bank’s own complaints process first.
Preparing and submitting an application on a client’s behalf is advisory work, not lending, and it does not require a lending licence. What matters is that the adviser does not hold itself out as a lender, does not promise approval, and handles your data properly under the Personal Data Protection Act 2010. SMEBox is an adviser and is not a lender. How we are paid sets out the commercial side of that.
If you want to work out what this means for your own application rather than in general, that is what the first conversation is for. It costs nothing and we will tell you if the answer is that you are not ready.
The most serious document most directors ever sign, and the one they read least carefully.
Two different systems, run by two different bodies, showing two different things. Most people confuse them.
The six reasons credit officers actually decline SME files, whether each one can be fixed, and roughly how long fixing it takes.