For most of its life in Malaysia, Buy Now Pay Later lived in a regulatory gap. It wasn’t a bank, wasn’t quite an e-wallet, and wasn’t a licensed moneylender — so it answered to almost no one, even as Malaysians ran up billions of ringgit in instalments on it. That era is ending on a fixed date, and if you use Atome, SPayLater, GrabPay PayLater or any similar service, the change is worth understanding.
What actually changed
The Consumer Credit Act 2025 was gazetted on 31 December 2025 and came into force on 1 March 2026. It created a new regulator, the Consumer Credit Commission (CCC), to oversee non-bank credit that previously fell between ministries. BNPL is squarely in scope. From 1 June 2026, BNPL providers — along with leasing and factoring companies — must hold a CCC licence to operate, with a six-month transition window to get compliant.
In plain terms: the “wild west” phase is over. A BNPL operator that isn’t licensed by the CCC after the transition period is no longer operating legally, the same way an unlicensed moneylender isn’t.
Two protections you didn’t reliably have before are now built into the law: providers must give you clear terms in plain language (interest, fees, repayment schedule, penalties), and they must run an affordability check before extending credit, rather than approving anyone with a phone.
The “0% interest” that isn’t free
BNPL’s headline is true and misleading at once. The instalments genuinely carry no interest if you pay on time. The business runs on two things: merchant fees, and your late payments. Miss a due date and the late fee — often a fixed ringgit charge per missed instalment — becomes the real price of the product. Stack a few of those across several apps and a “0%” purchase can cost more than a moneylender loan would have.
| BNPL feels like… | But it is… |
|---|---|
| A payment option at checkout | A credit agreement — you are borrowing money |
| Free because it’s 0% | Free only on perfect repayment; late fees are the model |
| Separate small commitments | One combined monthly obligation across every app you use |
| Lighter than a credit card | Often with weaker grace periods and faster penalties |
Using BNPL without getting hurt
- Count your apps. The danger isn’t one BNPL plan; it’s five running at once, each invisible to the others. Write down every active instalment in one place.
- Only split what you could pay in full today. BNPL is a cash-flow tool, not a way to afford something out of reach. If you couldn’t buy it outright this month, splitting it doesn’t change that — it defers it.
- Diarise every due date. The entire cost case for BNPL collapses the moment you miss one. Auto-pay from a funded account beats memory.
- After June 2026, check the licence. The CCC is required to publish a list of licensed credit providers. A provider not on it is a red flag.
Through the 1 June to 31 December 2026 transition, expect some providers to tighten approvals, change fees, or exit. If a BNPL plan you rely on suddenly changes its terms, that’s the new law landing — read the updated agreement rather than tapping “accept.”
The bigger picture
Why regulators stepped in when they did
BNPL grew explosively in Malaysia precisely because it sat outside the rules that bind banks and moneylenders. By the second half of 2025, the numbers were hard to ignore: billions of ringgit in outstanding balances and millions of active accounts, many held by younger users who didn’t always register that they were taking on credit at all. That combination — rapid growth, light oversight, and consumers who underestimated the commitment — is what pushed the Consumer Credit Act 2025 over the line.
The Act doesn’t ban BNPL or make it “safe” by itself. It brings BNPL under a real regulator with licensing, conduct standards, clear-disclosure rules and affordability checks. The product is the same; the guardrails are new. That shifts more responsibility onto providers — but the person who has to manage the instalments is still you.
- Consumer Credit Act 2025: in force 1 March 2026
- BNPL licensing requirement takes effect 1 June 2026
- Regulator: the new Consumer Credit Commission (CCC)
- New duties on providers: plain-language terms + affordability checks
How '0%' becomes expensive across several apps
Miss two due dates across two apps (busy month, forgot)
————————
Late fees stack per missed instalment, per app
'Free' purchases now carry real ringgit penalties
Combined, can exceed what a small loan would have cost
The danger isn’t one plan — it’s several running in parallel, each invisible to the others. List every active BNPL plan in one place and treat the total as the single monthly commitment it really is.
Tips for using BNPL without the pain
Safe-BNPL checklist
- Every active BNPL plan listed in one place
- Each purchase is something you could pay in full today
- All due dates diarised or on auto-pay
- Late-fee schedule read and understood
- Provider licensed by the CCC (from June 2026)
- Combined monthly BNPL total within your budget
Frequently asked questions
Is BNPL regulated in Malaysia now?
Yes. Under the Consumer Credit Act 2025 (in force 1 March 2026), BNPL providers must be licensed by the new Consumer Credit Commission, with the licensing requirement taking effect 1 June 2026.
Is BNPL really interest-free?
The instalments carry no interest if you pay on time. The business runs on merchant fees and your late payments — so miss a due date and the late fee becomes the real cost.
What happens to BNPL providers that aren’t licensed?
After the transition period, operating without a CCC licence isn’t legal. The Commission is required to publish a list of licensed providers, so you can check.
Does BNPL affect my credit?
As BNPL comes under formal oversight, expect more consistent conduct and disclosure. Treat every plan as the credit commitment it is, and don’t let several stack up unseen.
Is BNPL better than a credit card?
It can be simpler for spreading a known purchase, but often has weaker grace periods and faster penalties. Neither is ‘safer’ — both are credit you must repay on time.