A CIFAS marker doesn't arrive with a letter explaining itself — often the first sign is a bank account application that gets rejected for no clear reason.
What CIFAS actually is
CIFAS runs the UK's National Fraud Database, a shared system that banks, lenders, and other financial institutions use to flag accounts or applications associated with suspected fraud. A "CIFAS marker" placed against your name can cause other institutions to decline your applications for bank accounts, credit, insurance, or even certain jobs — often without ever telling you directly why.
How long a marker lasts
Marker duration depends on its type:
- Victim of Impersonation marker: 13 months.
- Protective Registration marker (one you can voluntarily apply for yourself after being a victim of identity fraud): 2 years.
- First Party Fraud, Facility Takeover, or Misuse of Facility markers: up to 6 years.
Finding out if you have one
You have a free right under UK GDPR to submit a Data Subject Access Request (DSAR) directly to CIFAS to find out whether a marker exists against your name, and if so, which institution placed it and why. CIFAS must respond to a DSAR within one month.
The actual challenge process
- Contact the institution that placed the marker first. CIFAS itself doesn't investigate the underlying facts — the member institution that filed it does, and only that institution can remove or amend it.
- Ask for their evidence and explain your case, particularly if the marker resulted from identity theft rather than anything you actually did.
- If the institution won't remove it, ask CIFAS to review the case through its own internal dispute process.
- If you remain unsatisfied, escalate to the Financial Ombudsman Service, which can order a marker removed if it finds it was placed unfairly or without sufficient evidence.
What this means practically
- Submit a free DSAR to CIFAS if you suspect a marker is blocking your applications — you have a right to know.
- Direct your challenge at the institution that placed the marker, not CIFAS itself — that's who controls the actual data.
- If you were a genuine victim of identity fraud, say so clearly and provide any police reference or evidence you have.
- Escalate to the Financial Ombudsman Service if the institution and CIFAS's internal review both fail to resolve it fairly.
Sources
- CIFAS — submitting a Data Subject Access Request. cifas.org.uk/dsar
- Financial Ombudsman Service — complaints about fraud markers and CIFAS data. financial-ombudsman.org.uk