The problem with CIFAS fraud markers: who gets flagged and why the system fails them

CIFAS is the UK's national fraud prevention service. It was established in 1988 and now has more than 680 member organisations, including virtually every major bank, most lenders, most insurers, the majority of letting agents and a growing number of employers. When a CIFAS member suspects fraud, they file a case against the individual's details. That case is then visible to every other CIFAS member.

A marker typically remains on the database for six years. During that time, most members will decline your application automatically, without ever telling you that a CIFAS record is the reason. You may receive a vague rejection letter. You may receive nothing. The system does not require them to explain.

The types of markers and what they mean

CIFAS markers are not all the same. The database categorises cases by type, and understanding the difference matters both for challenging a marker and for understanding why it was filed.

Misuse of Facility is the most common category. It covers situations where an account, product or service was used in a way that breaches the terms. This is the marker most commonly associated with money mule activity: someone used their account to receive or move money linked to criminal activity. Critically, this category applies regardless of whether the account holder knew what was happening or not.

Fraud by False Representation covers lying on applications: inflating income on a mortgage application, providing false employment details, misrepresenting your situation. This one is more clearly deliberate.

Facility Takeover is actually filed when someone else takes control of your account, making the victim the named subject. People who have had their accounts hijacked by third parties have ended up on CIFAS as the subject of a fraud case, rather than being treated as a victim of one.

The money mule problem

The fastest-growing category of CIFAS case in recent years is money mule recruitment, and the demographics are stark. According to CIFAS Fraudscape 2025, under-30s accounted for 61% of all money mule cases in 2024. Thousands of people in this age group are flagged every year, many of them for activity they did not fully understand when it happened.

The typical story is familiar. Someone is approached by a person they know, or contacted online, and asked to receive money into their account and transfer it on. They are told it is for a legitimate purpose. A business that needs a quick transfer. A friend with a frozen account. An online relationship. They agree without understanding what they are getting into, the money moves through, and some weeks or months later their account is closed with no explanation.

The bank has filed a CIFAS case. The marker is now on the database. The person did not profit. In many cases they were themselves a victim of a scam. The CIFAS system treats them the same as an organised fraudster.

Research from Cifas itself has acknowledged this issue. Their fraud reports consistently note that many mule recruits are "victims who were exploited rather than willing participants." The database does not have a category for that distinction.

Who is most affected

The impact of a CIFAS marker is not spread evenly across the population. The people most likely to end up with a marker are disproportionately young, from lower-income backgrounds, and from communities with less financial literacy or less experience of formal banking.

Research by Cifas and independent academics has found consistent patterns. Young people are more likely to be recruited as money mules because they are more likely to be targeted by recruitment methods that work online: social media approaches, romantic scams, job offers with suspicious payment structures. Communities with less access to financial education are less likely to recognise a mule recruitment attempt for what it is before agreeing to it.

Immigrants are also overrepresented. Arriving in a new country with limited knowledge of the banking system, under financial pressure, and sometimes targeted specifically because of their unfamiliarity with how UK fraud prevention works.

The six-year marker lands on people who are already more financially vulnerable than average. It then takes away bank accounts, rental applications, employment in regulated industries, access to credit, phone contracts on standard terms. It compounds an existing disadvantage rather than applying pressure to those most able to absorb it.

What a marker actually blocks

The reach of CIFAS is wider than most people realise until they try to do something and get rejected. Every major high street bank is a member. Most mortgage lenders. Most insurers. A large and growing number of letting agents, landlords and employers in regulated industries. The 680+ member count understates the actual reach because each member may use CIFAS data across all of their products and subsidiaries.

Practically, a CIFAS marker means: almost no chance of a standard bank account at a high street bank; significant difficulty renting privately; barriers to employment in finance, the public sector, and any regulated role requiring a financial background check; rejections from most standard credit products; refusals or large deposits demanded for utility accounts.

You may be able to open a basic bank account with some providers. Basic accounts are a legal requirement under the Payment Accounts Regulations 2015, and some providers are more willing than others to look at applications from people with fraud markers. But the standard financial services most people take for granted are largely closed.

The absence of a rehabilitation framework

Criminal convictions in the UK have rehabilitation periods. Spent convictions do not have to be disclosed after a certain time. The Rehabilitation of Offenders Act 1974 exists precisely because society acknowledged that permanent punishment was neither just nor useful.

CIFAS markers have no equivalent. The database does not distinguish between a person involved in organised fraud as a willing participant and a nineteen-year-old who was duped into receiving a transfer. Both receive a six-year marker. The system has no built-in concept of rehabilitation or graduated consequence.

There are routes to challenge a marker, but they are fragmented, slow and difficult to navigate. The process requires completing a Subject Access Request (SAR) to understand what data is held; contacting the organisation that filed the marker to dispute it directly with them; obtaining their final response before escalating to CIFAS; and, if still unresolved, taking the matter to the Information Commissioner's Office (ICO) or the Financial Ombudsman Service (FOS). The FOS handles complaints involving fraud markers where financial businesses have shared information with fraud prevention agencies.

Most people navigate this without professional support, carrying the burden of gathering evidence, understanding technical filing categories, and escalating through institutions with no incentive to make it easy. The burden of proof rests entirely on the person who was flagged.

What the Financial Ombudsman found

The Financial Ombudsman Service upholds around 31% of CIFAS-related complaints brought against financial institutions. That figure tells you two things: a meaningful share of markers that reach the FOS were not placed correctly, and the institutions that placed them did not expect to be challenged.

In one published decision (reference DRN-3428367), the FOS found that Monzo had closed a customer's account and registered a CIFAS marker against her without making any inquiries with her first. She had been contacted on social media by someone who asked her to facilitate some transfers. The FOS concluded she was almost certainly an unwitting participant and directed Monzo to remove the marker. The FOS has stated explicitly: "CIFAS markers can have severe effects and must not be added without serious consideration."

A Which? investigation found multiple similar cases: people whose markers were removed on review because the institution had "failed to consider if the customer was themselves the victim of an attempted identity theft or fraud." In several cases, banks were directed to remove markers and pay compensation. The markers had been in place for months or years before anyone looked at them seriously.

What needs to change

The UK Treasury Committee has published reports on financial exclusion and de-banking that touch on CIFAS. The FCA's ongoing work on access to financial services acknowledges the problem. But systemic change is slow, and millions of people are navigating the consequences of a system that has not caught up with the reality of who gets caught by it.

There is no quick fix for this. The CIFAS database serves a genuine purpose: fraud costs the UK economy billions of pounds a year, and a shared fraud prevention database is a rational response. The problem is not the existence of the database. It is the absence of nuance, the lack of a rehabilitation pathway, and the automatic, unexplained application of a marker's consequences across every area of a person's financial life for six years.

Until that changes, the practical question for most people with a marker is: what can you actually do? How do you prove that your current financial behaviour is not what happened then? How do you build a record that institutions can use when the standard credit infrastructure is closed to you?

That is the problem Equiscore is working on. Not a policy fix, but a practical infrastructure layer that lets people build and share verified evidence of their current financial behaviour, separate from what the fraud prevention databases say about the past.