Cifas markers and Protective Registration

Cifas Protective Registration is a service for people who have been victims of identity fraud, or who have good reason to fear becoming one. For a fee of £30 for two years, Cifas places a warning flag alongside your name and personal details in its secure National Fraud Database¹. When anyone, including you, applies for a financial service such as a loan using your details, the organisations that are Cifas members carry out extra checks to confirm the applicant really is you².

The service does not freeze your credit, does not appear on your credit report, and does not affect your credit score³. What it does is slow things down: because lenders take extra care, your own credit applications can take a little longer to be approved³. This page explains what Cifas is, what the warning flag does in practice, what a Cifas marker is and how it differs from Protective Registration, and how to find out or challenge what Cifas holds about you.

Why people register: identity fraud in the UK

Identity fraud is not a rare event. Cifas recorded 444,000 fraud cases in 2025 in the UK National Fraud Database, the highest ever recorded and up 6% on the previous year, which works out at roughly 1,200 or more cases per day being logged by major UK fraud prevention systems⁷. Fraud on loan accounts has been a growing problem for over a decade: Cifas recorded a 55% annual increase in fraud on loan accounts in 2013⁸.

Cifas itself is a not-for-profit fraud prevention membership organisation, which facilitates data sharing among its 400 members⁹. Those members include financial companies and public authorities who share information about fraudulent activity¹⁰. The scale of the problem has been shifting towards particular products: Cifas has reported spikes in identity fraud cases involving personal store cards, bank accounts, credit cards and motor insurance, and has warned that people over 60 were particularly likely to be targeted¹¹.

Often the first sign that someone has stolen your identity is not a fraud alert but a refusal. The Information Commissioner's Office lists as a warning sign of identity theft that "You are refused financial services, credit cards or a loan, despite having a good credit rating"¹². Other people discover the problem only when they are chased for a debt that is not theirs¹¹. If any of this has happened to you, Protective Registration is one of the steps worth knowing about, alongside reporting the fraud, checking your credit report and reporting lost or stolen documents to their issuers¹³. Our guide to identity fraud and your credit file covers the wider steps.

Cost: £30 for two years

Protective Registration costs £30 and lasts for two years¹. Which? describes the service as "costing £30 for two years"¹, and its news reporting on identity fraud likewise points people towards Cifas protective registration so that members carry out extra checks¹¹. Debt advice charities describe it as a service for a small fee that aims to reduce the risk of further identity fraud³.

The £30 buys two years of the warning flag being live against your details. There is a fee to use the service, as the Information Commissioner's Office confirms in its guidance on data breaches and identity theft¹³. Nothing in the guidance suggests the fee is means-tested or refundable, so treat the £30 as the full price of the two year period.

It is worth being clear about what the £30 is not buying. It is not an insurance policy, and it is not a guarantee that no fraudster will ever open an account in your name. It is a flag that tells any creditor using Cifas's information to carry out extra checks when your details are used to apply for credit or goods³. Whether a particular lender sees the flag depends on whether that lender is a Cifas member, which is covered later in this page.

For comparison with other protective registrations people sometimes confuse it with: registering a lasting power of attorney costs £92 in England and Wales, and £151 in Northern Ireland. Those are separate services with separate purposes, and have nothing to do with fraud prevention.

Applying for credit with a warning flag in place

Once you have registered, Cifas members carry out extra checks to see when anyone, including you, applies for a financial service such as a loan using your details². The flag sits against your name and other personal details on the National Fraud Database⁴, and it is flagged up if someone applies using your address¹⁴.

The practical effect is that a genuine application of your own takes longer, because the lender has to satisfy itself that the person applying is really you. Debt advice guidance is explicit that "due to the extra checks, it can make your credit applications take a little longer"³. If you are about to apply for a mortgage, a car finance deal or anything else where timing matters, it is worth knowing that the flag applies to your applications as much as to a fraudster's.

There is an important rule on the other side of this. A Cifas member is not allowed to refuse an application, or cancel a service you are getting, such as an overdraft agreement, just because there is a warning on your credit reference file¹⁰. Citizens Advice sets this out in its guidance on how lenders decide whether to give you credit¹⁰. The flag is a prompt for caution, not a black mark that closes the door.

The flow above shows the process from the lender's side. The application is made, the member sees the flag, extra checks follow, and only then is a decision taken. The final box matters most for consumers: the flag alone is not a reason to refuse¹⁰. If a lender does refuse you purely because of the flag, that is a complaint you can take up, as covered in the disputes section below.

It does not freeze your credit or change your credit score

Protective Registration is often described as freezing your credit. It does not do that. Using Cifas does not affect your credit score, but due to the extra checks it can make your credit applications take a little longer³. A Cifas marker alleging fraudulent activity "will not appear on your credit report or directly affect your credit score"⁵.

This distinction matters because people sometimes pay for the service expecting a lock on their file. There is no lock. Applications can still be made in your name; what changes is that Cifas members are prompted to check them more carefully². If you want to understand what a genuine freeze would involve, our page on freezing your file covers what is and is not possible in the UK.

The same principle applies to other information rights. Asking for information, such as requesting a copy of a credit agreement or making a request for your personal information, will not affect your credit file¹⁷. Getting debt advice does not affect your credit file either¹⁹, and debt solutions charities stress there is no impact on your credit score from taking advice²⁰. Checking your own report is likewise harmless, as our page on checking your own score explains.

What does affect your score is the underlying fraud, not the flag. If a fraudster has opened accounts in your name and run up missed payments, those entries can appear on your credit report and damage it until they are corrected. Our guides on what affects your credit score and how to correct wrong information on your credit report cover that process. Protective Registration is a preventive step, not a remedy for damage already done.

Cifas markers: what they are and how lenders must treat them

A Cifas marker is different from Protective Registration, though the two are often confused. A marker may be added to your credit file to warn lenders that your identity has been compromised²¹. Where Protective Registration is something you choose to buy after a fraud or a scare, a marker is recorded by a member organisation, typically a victim of impersonation marker where someone has pretended to be you, or a marker reflecting a fraud the member itself has recorded.

Cifas is not a credit reference agency. It is a fraud prevention service used by financial companies and public authorities to share information about fraudulent activity¹⁰. The information it provides is only used to prevent fraud and not to make lending decisions¹⁰. That rule is the counterpart of the one above: members may use the marker to trigger checks, but they may not treat it as a reason in itself to say no¹⁰.

Because a marker will not appear on your credit report or directly affect your credit score⁵, you can go for years without knowing one exists. To find out, you must make a data subject access request to Cifas online using two forms of ID⁵. This is why people who are unexpectedly refused credit, despite a good rating, are sometimes advised to check with Cifas as well as with the three credit reference agencies¹². Our page on what to do if you are refused credit covers the wider steps.

Age UK's guidance on scams makes the same point from the prevention side: people worried about fraudsters pretending to be them can ask about Cifas Protective Registration, which puts a warning flag on your name²². Whether the flag is one you bought or one a member recorded, the mechanics of how members see and respond to it are the same.

Where Protective Registration does not protect you

The warning flag only works where the organisation checking the application is a Cifas member and consults the National Fraud Database. Cifas has 400 members⁹, which is a large number, but it is not every lender, retailer or service provider in the UK. An application made to a non-member that does not check Cifas data will not see the flag at all.

The flag also does nothing about fraud in accounts that already exist. If a fraudster has your card details, or has taken over an existing account, the warning flag on new applications does not stop them. The Information Commissioner's Office sets out the wider self-protection steps that sit alongside registration: report lost or stolen documents such as passports, driving licences, credit cards and cheque books to the issuer; check bank statements and your credit report; watch out for phishing; use strong passwords and multifactor authentication; and apply for Cifas protective registration¹³. Registration is one item on that list, not a substitute for the others.

Nor is it compensation. Protective Registration is not an insurance product, and losses from fraud are not recovered through it. If money is stolen, the route to recovering it runs through your bank or card provider, and through the Financial Ombudsman Service if the provider will not help. Note also that some financial products sit outside the Financial Services Compensation Scheme: FSCS guidance lists credit insurance and marine insurance claims as not eligible for FSCS protection²³. That is a separate protection from anything Cifas offers, but it is worth knowing where the safety nets stop.

Finally, the flag does not hide your credit file or stop searches. Lenders can still search your file, and you can still be searched by fraudsters. What changes is that members who see the flag pause and check. For the limits of what lenders can see and when, see who can see your credit report and do lenders need your permission for a credit search.

How to apply for Protective Registration

The application is made to Cifas directly. The Information Commissioner's Office advises: "Contact Cifas (the UK's Fraud Prevention Service) to apply for protective registration"¹³, and its identity theft guidance repeats the same instruction². Debt advice charities put it the same way: if you have been a victim of fraud, consider contacting Cifas and signing up for their Protective Registration, at which point a warning flag is placed against your details²⁴.

The steps, in order:

1. Report the fraud first if one has happened. Report lost or stolen documents to their issuers, and report the fraud itself to the relevant body¹³.
2. Contact Cifas through its website to apply for Protective Registration¹³.
3. Pay the fee of £30, which covers two years¹.
4. Let the flag work. Once registered, Cifas members carry out extra checks when anyone, including you, applies for a financial service using your details².

If you sign up to the service, Cifas will place a warning flag against your details²⁵, and that flag sits against your name and other personal details on the National Fraud Database⁴. There is a fee to use the service¹³, and the £30 for two years figure is the one given in independent guidance¹.

You can cancel before the two years are up, since the flag exists for your protection and you can ask for it to be removed. The fee is for the two year service, so cancelling early does not come with a refund of the unused part. If you still need the protection at the end of the two years, you register and pay again.

Help, disputes and complaints

If you think a Cifas marker against you is wrong, the first step is to see what Cifas actually holds. Because markers do not appear on your credit report, you must make a data subject access request to Cifas online using two forms of ID⁵. Asking for information in this way will not affect your credit file¹⁷.

Once you have made a request, the clock starts on the day it arrives. Organisations must respond no later than one calendar month, starting from the day they receive the request²⁶. For complex requests, or where you have made a number of requests, they can take up to an extra two months to respond⁶.

If you dispute the marker itself, you can complain to Cifas. Data protection law gives you the right to object to the use of your information²⁷, and organisations must acknowledge your complaint within 30 days, inform you of the progress of your complaint, and give you an outcome without an unjustifiable or excessive delay²⁷. If Cifas will not remove a marker you believe is wrong, you can complain to the Information Commissioner's Office, which oversees how organisations handle personal information²⁷.

Where a lender has treated you unfairly because of a flag, the rule is on your side: a Cifas member is not allowed to refuse an application or cancel a service you are getting, such as an overdraft agreement, just because there is a warning on your credit reference file¹⁰. A refusal on those grounds can be taken to the Financial Ombudsman Service, which is free to use.

Free, impartial help is available. MoneyHelper, the government-backed money guidance service, covers types of scam and what to do about them²¹. National Debtline and Business Debtline publish guides on dealing with fraud and on credit reference agencies for England and Wales and for Scotland²⁴. Citizens Advice explains how lenders decide whether to give you credit, including how Cifas fits in¹⁰. For the wider picture of your rights over your file, see your data rights over your credit file, and for correcting wrong entries with the credit reference agencies themselves, see how to correct wrong information on your credit report.