A credit score is a single number that summarises how risky an individual is as a borrower. A credit profile is a set of yes or no risk indicators that shows whether specific problems exist on a person's credit record, such as defaults, judgments or debt review. A credit report is the complete underlying file, containing every account, payment history and adverse listing in full detail.

The simplest way to hold the distinction is this. The score tells you how risky someone is. The profile tells you what is wrong. The report tells you the whole story.

Choosing between them is not only a question of how much information you want. Each carries a different cost, a different turnaround, and, most importantly, a different legal basis under the National Credit Act 34 of 2005 (NCA). Running the wrong one, or running the right one for the wrong reason, creates regulatory exposure that many businesses do not realise they are carrying.

This guide explains what each service returns, when to use it, and what South African law requires before you may request it.

What is a Credit Score?

A credit score is a numerical expression of credit risk, calculated from an individual's borrowing and repayment behaviour. A higher score indicates a lower likelihood of default.

In the South African market, a score check typically returns two separate figures, and understanding the difference between them matters.

The National Loans Register (NLR) score is derived from the register of unsecured credit agreements, historically centred on the micro-lending market. It reflects loans that are not backed by collateral.

The Credit Providers Association (CPA) score is derived from a broader dataset covering both secured and unsecured agreements, including positive and negative account information supplied by the major banks, finance houses, retailers, telecommunications providers and insurers.

An individual can present quite differently across the two. Someone with a clean record at the banks but a pattern of short-term unsecured borrowing will score better on one than the other, which is precisely why both are returned rather than one.

A score check requires only an identity number and a stated reason for the enquiry. It is the fastest and cheapest of the credit services, and it is the right choice when the decision in front of you is binary and low-value.

Its limitation is that a score explains nothing. It will not tell you whether a low score reflects one old judgment, an active debt review, or simply a thin credit file. For anything requiring a reasoned decision, a score alone is insufficient.

What is a Credit Profile?

A credit profile sits between the score and the full report. Rather than a number, it returns a structured set of risk indicators drawn from the credit record.

A profile check confirms whether the individual is under debt review, whether adverse credit accounts are present, whether there are defaults or judgments against them, whether a trace locator has been placed on the record, and whether the person is recorded as indigent. It also indicates whether the individual currently holds active directorships, which is a useful cross-check when the person in front of you is presenting as an individual but may have corporate exposure.

The profile answers the question a score cannot: not how risky is this person, but what specifically is on their record. It does this without requiring anyone to read through a full credit report, which makes it well suited to high-volume decisioning where a human reviews only the exceptions.

One point is essential. A credit profile requires the consent of the subject before the enquiry is made. This is not a commercial preference, it is a legal requirement, and the reason is explained below.

What is a Credit Report?

A credit report is the complete file. It returns every aspect of an individual's credit risk profile together with their personal details, including the full account-level history that the score and the profile summarise.

This is the service to use where a decision is significant enough to require the reasoning behind the risk, not merely the conclusion. Lending decisions, high-value credit obligations, comprehensive due diligence and dispute investigations all justify the full report.

It is also the most expensive of the credit services and produces the most information to review, so using it as a default for routine checks is both costly and, from a data minimisation standpoint, difficult to defend.

The full report carries one restriction that businesses breach more often than any other. Where the enquiry is made for an employment purpose, it may only be requested for a position that requires honesty in dealing with cash or finances, and the job description must be clearly defined. Running a credit report on a candidate whose role has no financial responsibility is not a grey area. It is outside the prescribed purpose. For the wider employment screening picture, refer to our guide: How to Screen Employees for Criminal Records and Driver's Licences in SA.

Where Does a Credit Snapshot Fit?

There is a fourth service that the three-way comparison tends to omit, and for many businesses it is the most practical of the set.

A credit snapshot pulls data from several providers to produce a consolidated view, returning a blended credit score alongside quantified exposure: total outstanding debt, total monthly instalments, amount in arrears, overdue balance, and counts of sequestrations, rehabilitation orders, default listings, administration orders, fraud notices and credit enquiries.

Two features distinguish it. The first is that it quantifies rather than merely flags. A profile tells you defaults exist; a snapshot tells you how many and how much. The second is that it surfaces whether the individual is recorded as a perpetrator by the South African Fraud Prevention Service, which pulls fraud intelligence into what is otherwise a credit enquiry. For more on that dataset, refer to our guide: SAFPS Report vs SAFPS Snapshot: Choosing the Right Fraud Intelligence Service.

The number of credit enquiries is worth particular attention. A person who has been checked repeatedly across multiple credit providers in a short period is frequently a person applying for credit everywhere because they are being declined, which is a risk signal in its own right.

Which Service Should You Use, and When?

The practical decision comes down to what the result will be used for.

• Credit Score: Use for fast, low-value, binary decisions where you need a risk indication and nothing more, and where the cost of the check must stay minimal because you are running many of them.
• Credit Profile: Use when you need to know what is actually on the record but do not need account-level detail, particularly for structured decisioning that escalates only exceptions to a human reviewer.
• Credit Snapshot: Use when you need a consolidated commercial picture of someone's total exposure and affordability position, and where fraud indicators matter alongside credit risk.
• Credit Report: Use when the decision is significant, contested, or requires documented reasoning, and where you can justify collecting the full file.

What Does South African Law Allow?

This is where most businesses get into difficulty, because the rules are stricter and more specific than the commercial framing suggests.

Credit bureaux in South Africa are registered with and regulated by the National Credit Regulator (NCR) under the NCA. A third party may only access consumer credit information where it has a prescribed purpose set out in Regulation 18(4) of the NCA, or where the consumer has given explicit consent.

The prescribed purposes include an investigation into fraud, corruption or theft conducted by the South African Police Service or another statutory enforcement agency; fraud detection and fraud prevention services; considering a candidate for employment in a position that requires honesty in dealing with cash or finances; assessing the debtors book of a business; tracing a consumer by a credit provider in respect of an existing credit agreement; and developing a credit scoring system.

Regulation 18(5) then adds a further requirement. Where the report is required for the employment purpose, or for several of the other listed purposes, the consent of the consumer must be obtained before the report is requested.

This explains an apparent inconsistency that confuses many users. A credit score check does not require the subject's consent, while a credit profile does. The distinction is not arbitrary. It reflects which prescribed purposes each service is designed to serve, and it does not mean that a consent-free check is a check you may run for any reason you like.

The point deserves emphasis, because it is the single most common misunderstanding in this area. Not requiring consent is not the same as not requiring a lawful basis. Every credit enquiry in South Africa needs a prescribed purpose, which is why every one of these services asks you to state a reason for the enquiry. That stated reason is a legal declaration, not an administrative field.

POPIA sits alongside this rather than replacing it. Personal information collected must be adequate, relevant and not excessive for the stated purpose, which reinforces the argument against pulling a full credit report when a score would have answered the question.

Why Do Credit Scores Differ Between Bureaus?

A question that arises constantly, and the answer affects how results should be interpreted.

South Africa has several registered credit bureaux, and they do not use a common scoring scale. A score from one bureau cannot be compared directly against a score from another, because the ranges and the underlying models differ. A given number may sit in the upper band on one scale and the middle of another. Lender thresholds for what counts as an acceptable score are internal policy, not a legal standard.

The data behind the scores also differs, because not every credit provider reports to every bureau. This is the practical reason a score check returns both an NLR and a CPA figure rather than a single consolidated number.

Finally, credit records are not permanent. Regulation 17 of the NCA prescribes maximum retention periods after which a bureau must remove a listing automatically, and these vary by listing type. Paid-up judgments must be removed once proof of payment is provided. Consumers are entitled to a free credit report annually from each bureau and may dispute inaccurate listings, which bureaux must investigate within twenty business days. A record checked today may therefore look different in six months, which is an argument for checking at the point of decision rather than relying on a result obtained earlier.

Credit Information Services for South African Businesses

As South Africa's leading provider of world-class identity verification, KYC, AML screening and due diligence solutions, ThisIsMe gives businesses the full range of credit information services in one place. From fast NLR and CPA credit scores for high-volume decisioning, to credit profiles returning structured risk indicators, consolidated credit snapshots with blended scoring and SAFPS fraud indicators, and full credit reports for significant decisions, our credit services let you match the depth of the check to the decision in front of you. Combined with identity verification, bank account verification, affordability assessment and AML screening across our 45+ service ecosystem, ThisIsMe helps businesses assess credit risk accurately and lawfully. To experience our full suite of credit and verification solutions and find out how we can serve your business, contact our team here.