Six and a half million active buy-now-pay-later accounts exist in Malaysia right now, and the finance ministry's official position is that this is fine.
Not fine like "no problem exists." Fine like "the problem is small enough that the system as a whole won't break." That distinction matters more than almost anything else in this article, so hold onto it, because it's the whole trick.
What "contained" actually means
In August, the Ministry of Finance told parliament that RM3.8 billion is currently outstanding across BNPL accounts, that 168,967 users are behind on payments, and that the overdue amount, RM121.8 million, works out to about 0.2% of Malaysia's total household debt. Deputy Finance Minister Lim Hui Ying called the exposure "manageable."
She's right, and it doesn't matter, because "manageable" was never a statement about you. It's a statement about the banking system. A number is contained when it can't tip over an economy. Your specific RM3,000 across four apps was never being measured for whether it tips over you.
This is the first thing conventional money advice gets backwards: it borrows the language of macro-stability ("the market is healthy," "debt levels are contained") and lets you assume that language was describing your household. It wasn't. Nobody at the ministry has your name in a spreadsheet. You do the containing, personally, one missed instalment at a time.
The part that makes this different from a loan
A bank loan shows up on a shared record. Apply for a second one and the new lender can see the first. That's not a courtesy, it's the entire point of a credit bureau: no single institution can see your whole exposure, so they all report into one place that can.
Buy-now-pay-later was built, deliberately or not, without that visibility. Atome, ShopeePayLater, and Grab PayLater have historically operated outside CCRIS, Bank Negara's central credit registry. You could hold an active instalment plan on all three at once, and not one of them would know the others existed. Neither, in any meaningful sense, would you, because your phone shows you four separate "RM52 due Friday" notifications, not one number that says what you actually owe across all of them combined.
Malaysia's Consumer Credit Act 2025, passed by the Dewan Rakyat on 21 July 2025, is the fix for exactly this. It creates a new regulator, the Consumer Credit Commission, and requires BNPL providers to get licensed and report into proper credit channels. Licensing rules took effect 1 June 2026. Providers were given six months to comply.
Read that date again. The compliance deadline is 1 December 2026. Right now, this month, the systems meant to close that visibility gap are still being built. Whatever you think of as the "old, blind" version of BNPL, check your phone: that's still the version running under your thumb today.
What the "0% interest" actually costs when it goes wrong
BNPL doesn't call its fee structure interest, because interest is a word that makes people hesitate before they tap "confirm." It calls it a late fee. Functionally, for the two weeks it applies to, it behaves like a short-term interest rate, and the honest way to see that is to annualise it the same way you'd annualise any other borrowing cost.
Take Atome's own published structure: up to RM23 per missed payment, plus up to RM7 more depending on how you funded it, so call it RM30 on a typical RM50 instalment, unpaid for a normal two-week late window.
That last number isn't a real, compounding APR. Treat it as a simple annualisation, the same rough method used to show why a payday loan is worse than the fine print makes it look. The question it answers is blunt: measured the way every other borrowing cost gets measured, is this fee small? No.
Here's what the same math looks like across the three biggest players, so you can see it's not one company being unusually aggressive:
Ryt's is the most honest of the four, and notice why: Ryt PayLater is issued by a licensed bank, so it has to report to CCRIS and disclose a real rate. It's the one option here already living in the world the Consumer Credit Act is trying to build for everyone else by December.
The cope, named directly
"It's not really a loan, it's just how I pay for things now." I've heard some version of that sentence from almost everyone who uses BNPL for more than groceries. Call it a category error rather than a lie, one the app design is built to keep you making.
A loan has an application, a rate, and a single number you owe. BNPL has a checkout button, a smiling "Pay in 4" badge, and four separate, small-looking commitments that never get summed for you anywhere in the interface. Removing the sum is not a bug. A dashboard that showed "you currently owe RM2,140 across three apps" would convert fewer sales than four screens that each say "just RM53.50 today."
If you're in the 88%, none of this changes your life. If you've ever opened a BNPL app and felt a flicker of "wait, how many of these do I actually have running," this article was written for that flicker. Trust it.
Do this in the next 24 hours
- Right now, before you do anything else: open every shopping and payment app on your phone (Atome, Shopee, Grab, Lazada, your bank app) and screenshot the outstanding balance on each one. This costs ninety seconds and it's the single step everyone skips.
- Add those screenshots up. Write the total somewhere you'll actually see again, not a mental note, a real number on a real note. It's the figure none of the four apps will ever show you on their own.
- If that number is larger than you expected, cancel autopay on the newest plan you opened, the one you're least emotionally attached to, and pay it off manually this week instead of letting it run.
- Pick one BNPL app you'll keep, if any, and delete the rest from your home screen (just the app, not the account). That one-tap access is what turns a five-second impulse into a fifth open loan.
- Calendar the payment date for every remaining instalment with a reminder two days early, not on the day. Being late here is less a discipline failure than a gap in the app's design, one you're patching by hand until December 2026 does it for you.
Become a subscriber receive the latest updates in your inbox.