Quick answer: Fair collection practice in Malaysia has long emphasized timely, clear written communication before aggressive recovery contact — including notifying borrowers and keeping records of authorization and outstanding amounts. Many lenders operationalize this as email / SMS / in-app notice first, then voice. Exact legal triggers depend on your license and contracts; this is the ops pattern that reduces surprise-call complaints and supports audits.
Related: BNM guidelines & AI · Calling hours
Why “call first” creates avoidable risk
Cold voice contact on Day 1 without prior digital notice often triggers:
- “I never got any reminder” disputes
- Wrong-party embarrassment
- Higher complaint rates even when the script is polite

A practical email-first ladder
| Step | Channel | Purpose |
|---|---|---|
| 1 | Email + SMS / app push | Soft overdue notice + pay link |
| 2 | Wait window (policy-defined) | Give time to self-cure |
| 3 | Non-interactive voice drop | Awareness if still unpaid |
| 4 | Interactive AI / human | RPC + P2P |
| 5 | Firmer path | Only after documented prior notices |
Align scripts with your delinquency journey.
What to put in the first notice (minimum useful set)
- Lender / brand identity
- Account reference (not oversharing to wrong inboxes)
- Amount / due context from system of record
- How to pay / dispute / hardship contact
- That calls may follow if unresolved
- Data protection notice pointer (PDPA)
How Suarify fits
Use CRM events: “notice_sent_at” must exist before dial eligibility. Suarify modes then run reminder → interactive → P2P only when the notice flag and calling hours clear.
FAQ
Is an email legally required before every collection call in Malaysia?
Requirements vary by entity and product. Many fair-treatment frameworks expect clear prior communication and documentation. Treat email/SMS-first as strong operational hygiene and confirm mandatory steps with counsel.
What if the email bounces?
Log bounce, try alternate consented channel, and do not assume voice can skip notice obligations your policy requires.
Can AI send the notice and make the follow-up call?
Yes — orchestration is the point: digital notice → wait → compliant dial with audit trail.
Also: OTP phone verification · Update T&Cs · Pillar
