The single highest-impact identity-protection action a UK fraud victim can take. £25 for 2 years. Sets a marker on your credit file that forces lenders to verify any application made in your name. Setup takes about 15 minutes.
Last reviewed: 12 May 2026 · ScamSupport research
What CIFAS Protective Registration does — in 60 seconds
CIFAS (the Credit Industry Fraud Avoidance System) is the UK’s national fraud-prevention service. Banks, credit-card companies, mortgage lenders, mobile-phone operators, utility companies and most major UK financial institutions check the CIFAS database when someone applies for a product in your name.
A Protective Registration tells every CIFAS member: “Treat any application in this person’s name with extra caution and verify identity directly with them.” When a fraudster tries to open a credit card or apply for a loan using your stolen details, the lender receives a CIFAS warning at the application stage and is required to make additional identity checks. Most fraud attempts are stopped before the account is opened.
Cost: £25 for 2 years of cover. Effective from: within 24 hours of registration. Renewable: indefinitely.
Ready to set it up? The walkthrough below is the exact 6-step process. Most UK fraud victims complete it in 10–15 minutes if they have ID and proof of address ready.
CIFAS Protective Registration is open to anyone who:
Is a UK resident (England, Scotland, Wales, Northern Ireland).
Is 16 years of age or older.
Has reason to believe their personal details may be used fraudulently — this includes being the victim of a scam where you shared bank details, ID, or personal information.
You do not need a previous fraud incident on your file. Many UK consumers set up Protective Registration preventively, particularly after a data breach notification.
2
Gather the documents you’ll need 2 min
Have these ready before starting the online form:
Photo ID — UK passport, UK driving licence (photocard), EU/EEA national ID card, or other government-issued photo ID.
Proof of address — dated within the last 3 months. Bank statement, utility bill, council tax bill, mortgage statement, or HMRC correspondence. Tenancy agreements are accepted if dated and on letter-headed paper.
Debit or credit card — for the £25 fee. Any UK card works; no preference between debit and credit.
5 years of previous addresses — CIFAS asks for your address history. Most people remember this; if not, your credit report (free at Experian, Equifax, TransUnion) has it.
You can pause the application and resume within 7 days if you don’t have everything ready.
3
Start the online application 5 min
Open cifas.org.uk/services/individuals/protective-registration directly in your browser. Verify the URL begins with https://www.cifas.org.uk — nothing else. Several phishing sites impersonate CIFAS; always type the URL yourself.
Click Apply now. The form asks for:
Your full legal name (as it appears on ID).
Date of birth.
Current address and 5 years of previous addresses.
Contact phone number and email address.
Reason for the registration — pick “I have reason to believe my identity may be used fraudulently” or “I have been a victim of identity theft or fraud” as appropriate.
4
Verify your identity 3 min
CIFAS uses electronic identity verification first — an automated check against your credit file and electoral roll record. About 80% of applicants pass this stage in under 2 minutes.
If electronic verification fails (common reasons: recent address move, sparse credit history, or you’re under 18), you’ll be asked to upload:
A clear photo or scan of your photo ID.
A clear photo or scan of your proof-of-address document.
Manual review typically completes within 2 working days. You can continue with the application even if manual verification is needed.
5
Pay the £25 fee 2 min
CIFAS uses Stripe for card payments. The page is hosted on Stripe’s secure servers; CIFAS doesn’t see your card details directly.
The £25 covers 2 years of Protective Registration. There’s no monthly subscription or recurring charge — you pay once, you’re covered for the period.
If you’re on a low income and unable to afford the fee, contact CIFAS at 0330 100 0180 (Mon–Fri 9am–5pm) or contact@cifas.org.uk to ask about hardship cases. They occasionally waive the fee in compelling circumstances.
6
Confirmation & lender awareness 24 hours
You’ll receive an email confirmation within minutes. The registration is then communicated to CIFAS’s 600+ member organisations within 24 hours.
Within 1–2 working days, your record is flagged at all three UK credit reference agencies (Experian, Equifax, TransUnion). From that point onwards, any credit application made in your name triggers additional verification at the lender.
You don’t need to do anything else. Your existing credit cards, bank accounts, mortgages and utility accounts continue working normally. The flag is invisible to you and to your existing providers.
What happens when someone tries to open an account in your name
Fraudster submits an application for credit/account in your name to a CIFAS-member lender.
Lender performs a routine CIFAS database check during application processing.
Lender contacts you directly (phone, email, sometimes letter) to confirm whether the application is genuine.
If the application is fraudulent, you tell the lender and they decline it.
The lender flags the fraud attempt back to CIFAS and reports it under the National Fraud Database, adding to industry-wide intelligence.
You may receive multiple verification calls over the 2-year period — this is the registration working as intended. Banks and lenders see the marker, contact you, you confirm whether each application is genuine.
Protective Registration vs other CIFAS services
Service
Cost
Best for
CIFAS Protective Registration
£25 for 2 years
Most fraud victims. The standard, well-tested option.
CIFAS Protective Registration Plus
£35 for 2 years
Plus the online tools to monitor your record. Modest upgrade.
Free Adverse Notice (formerly Free Standalone)
Free
Only available if a CIFAS member specifically advises you to apply — e.g. after they detected fraud on your account. Not for general consumer use.
CIFAS Membership (organisations)
From £3,000+ / year
Businesses with their own fraud-prevention needs. Not for consumers.
What to do alongside CIFAS Protective Registration
Protective Registration is the highest-leverage single step, but the full post-fraud identity-protection setup includes:
Order your free statutory credit reports from Experian, Equifax and TransUnion. Review for unfamiliar accounts or applications. Set a calendar reminder to repeat every 3 months for the next year.
Report to Report Fraud at 0300 123 2040 if you haven’t already — obtains a crime reference number.
Notify HMRC at 0300 200 3300 if your National Insurance number was compromised. HMRC adds a marker to your tax record so any unusual employer/self-assessment activity triggers additional checks.
Notify DVLA at 0300 790 6802 if your driving licence number was compromised. They can re-issue if needed.
Replace any compromised ID document — passport reissue costs £88.50; provisional driving licence costs £43. Worth it if you uploaded a clear photo to a phishing site.
Set up multi-factor authentication on your bank, email, and major online accounts. If MFA is already on, rotate the recovery codes.
Frequently asked questions
Does CIFAS Protective Registration affect my credit score?
No. The marker is administrative only — it does not affect your credit score, credit rating, or any creditworthiness calculation. It changes the verification process for lenders but not the underlying score.
Will it affect new applications I genuinely want to make?
Lenders will perform additional identity verification — usually a phone call to confirm the application is yours. The application can still go through normally; it just takes 1–2 extra days. Most consumers find this is a small price for the protection.
What happens after 2 years?
You’ll receive a renewal reminder 30 days before expiry. Renewal costs the same as the initial registration (£25 for 2 more years). If you don’t renew, the marker is removed and your credit file returns to its previous state.
I’m on a low income. Are there free alternatives?
Three options:
Contact CIFAS directly at 0330 100 0180 and ask about hardship waivers — they sometimes waive the fee in compelling circumstances.
Ask the bank or lender where the fraud occurred to apply a CIFAS “Adverse Notice” on your behalf. Some lenders offer this free to fraud victims as part of their fraud-resolution process.
Free credit-report monitoring from Experian, Equifax and TransUnion offers some protection at no cost. It’s reactive rather than preventive (you find out after a fraudulent application has been made, not before), but it’s a useful complement or partial substitute.
I’m not in the UK. Is CIFAS available?
CIFAS Protective Registration is UK-only. For other jurisdictions:
Ireland: contact the Garda Síochána economic crime bureau and the Irish Credit Bureau.
US: contact one of the three major credit bureaus (Equifax, Experian, TransUnion) to set up a credit freeze or fraud alert.
Other EU countries: contact your national consumer credit bureau equivalent.
How do I know if my registration is active?
Log into your CIFAS My Account portal at cifas.org.uk using the credentials from your sign-up email. The dashboard shows the status, start date, and renewal date.
Related ScamSupport pages
Identity Theft Recovery Walkthrough — personalised UK recovery plan that sequences CIFAS alongside credit-file pulls, mobile port-out lock, Companies House check and SARs
ScamSupport is not affiliated with CIFAS. This walkthrough is independent guidance based on the publicly documented CIFAS Protective Registration process as of 12 May 2026. Always verify the latest fees and process directly with CIFAS before applying.