Identity Theft in the UK — What to Do Right Now
Identity theft happens when someone uses your personal information — your name, date of birth, address, or National Insurance number — to open credit accounts, apply for loans, or commit fraud in your name. It affects hundreds of thousands of UK residents every year. This guide covers the immediate steps you need to take and the organisations you need to contact.
Signs Your Identity May Have Been Stolen
- You receive bills, bank statements, or credit cards for accounts you didn't open
- Unfamiliar applications appear on your credit file
- Your credit score drops suddenly without explanation
- You're refused credit unexpectedly
- You receive letters from debt collectors for debts you don't recognise
- HMRC contacts you about employment or income you didn't have
Check Your Credit File
Your credit file is the first place identity fraud appears. In the UK you can check for free with Experian (experian.co.uk), Equifax (equifax.co.uk), and TransUnion (transunion.co.uk). You're entitled to a statutory credit report for free from each agency. Look for: applications you didn't make, accounts you didn't open, and addresses you've never lived at.
Report to Action Fraud
Report identity theft to Action Fraud at actionfraud.police.uk or call 0300 123 2040. You will receive a crime reference number — keep this. You will need it when you contact financial institutions and credit agencies.
Apply for a CIFAS Protective Registration
CIFAS is the UK's fraud prevention service. A Protective Registration adds a flag to your name and address in the CIFAS database. Any organisation checking before opening an account will see the flag and carry out extra verification. Apply at cifas.org.uk (small fee applies — currently £25 for two years). This is especially important if your personal details have been compromised in a data breach.
Contact the Affected Organisations
Contact any organisation where fraudulent accounts were opened. Ask them to close the account and confirm in writing it was fraudulent. Ask them to notify the credit reference agencies to remove the fraudulent entry. Keep records of every call, letter, and email.
Protect Going Forward
Protect yourself with a free Security Score
Get a personalised checklist to secure your accounts — free, no credit card required.
Get your free Security Score- Enable two-factor authentication on all financial and email accounts
- Use a unique password for every account
- Shred all documents containing personal information before disposal
- Consider a mail redirection check if you've recently moved — fraudsters exploit gaps in mail forwarding
Your Legal Rights
Under the Fraud Act 2006, identity fraud is a criminal offence. You are not liable for debts incurred fraudulently in your name — but you must report them. The credit reference agencies are legally required to investigate and correct fraudulent entries under the Consumer Credit Act 1974.
Frequently Asked Questions
I found an account on my credit file I didn't open. What do I do first?
Contact the lender directly to dispute the account — explain it was opened fraudulently and give your Action Fraud crime reference number. The lender must investigate and, if fraud is confirmed, remove the account from your credit file.
Will a CIFAS Protective Registration affect my ability to get credit?
It may slow down new credit applications slightly, as lenders will carry out extra identity checks. It does not prevent you from getting credit — it just ensures the lender verifies it's genuinely you applying.
My National Insurance number has been used fraudulently. Who do I contact?
Report to HMRC directly on 0300 200 3500 (Income Tax helpline). Explain that your NI number has been used without your consent. Also report to Action Fraud. HMRC will investigate and issue guidance specific to your situation.