Why your credit file matters after a scam

Your credit file is the record lenders, landlords, insurance companies and many employers reference when assessing you. Scam-related damage falls into four categories:

• Fraudulent accounts opened in your name: loans, credit cards, mobile contracts, mail-order accounts. The most damaging entries; if left unchallenged they become defaults and CCJs.
• Hard searches you didn’t initiate: every credit application leaves a search marker; multiple within a short window reduces your score. Criminal applications you never made can leave the same marks.
• Fraud markers placed against you: CIFAS markers, Notice of Correction entries, occasionally explicit fraud-warning flags. Some are placed in your defence (Protective Registration); others are placed wrongly.
• Addresses you don’t recognise: criminals add fake addresses to your file as stepping stones for further fraud. Need to be removed.

The three UK Credit Reference Agencies

The UK has three CRAs. Each holds a separate file. Lenders typically check one or two but not all three. A clean file at one doesn’t mean a clean file at the others. You need to check all three.

• Experian — the largest. Most lenders use Experian primarily. experian.co.uk. Statutory credit report £2; free monthly summary; CreditExpert paid tier with ongoing monitoring (~£15/month, cancel anytime).
• Equifax — equifax.co.uk. Statutory credit report £2; free CreditScore service with limited summary.
• TransUnion — transunion.co.uk. Statutory credit report £2. Free access via Credit Karma (creditkarma.co.uk) or ClearScore (uses Equifax).

Step 1 — Pull all three reports within the first week

1. Use the statutory disclosure route at all three CRAs (£2 each, ~£6 total) for the most complete file. Or use free monitoring trials if you don’t need historical depth.
2. Review systematically: addresses → accounts → searches → public information (CCJs, insolvency) → fraud markers.
3. Flag every line you don’t recognise: every account, every search, every address.
4. Document the date you pulled the file: useful for showing CRAs the file state at the time you discovered the fraud.

Step 2 — File a Notice of Correction

A Notice of Correction is a 200-word statement you can attach to your credit file explaining your position on a disputed entry. It’s free, and every lender pulling your file will see it.

For scam-related cases, the typical text:

File the Notice with each CRA separately. The CRA must add it within 28 days.

Step 3 — Dispute individual entries

For each suspicious entry:

1. Identify the lender or organisation that placed it. The CRA file shows this.
2. Contact the lender directly with a written dispute. Cite your Report Fraud reference. Identify the specific entry. Ask for fraud-write-off.
3. The lender must investigate. They typically have 28 days to respond. Where the entry is confirmed fraudulent, the lender writes off the debt and asks the CRA to remove the entry.
4. If the lender refuses: escalate via the lender’s formal complaint process. After 8 weeks, file with FOS. CIFAS marker + Report Fraud reference are decisive evidence.
5. Track the resolution: re-pull the CRA file 30-60 days after the lender confirms the write-off. Entries can take time to be removed.

Step 4 — Address removal

If criminals added an address to your file, request its removal:

• Contact each CRA with the address you want removed. Provide evidence: utility bills proving you never lived there, electoral roll evidence, employer/HMRC correspondence to your actual address.
• The CRA verifies and removes typically within 28 days.
• If the address is linked to an account in your name: that’s a fraudulent account; pursue via Step 3 first.

Step 5 — Hard-search disputes

Hard searches drop off your file automatically after 12 months. But you can dispute suspicious ones earlier:

• Contact the searching lender directly. Tell them you didn’t apply. They’ll typically agree to remove the search.
• Track the removal via re-pulling the CRA file.
• If the lender won’t remove: file with FOS citing wrongful processing of personal data.
• Heavy criminal-induced search activity may reduce your score: lenders sometimes apply scoring adjustments for clusters of recent searches. The score recovers as the searches age off, typically over 6-12 months.

Step 6 — Pair with CIFAS Protective Registration

The CIFAS marker (placed by you) prevents new fraudulent accounts being opened. Combined with the Notice of Correction (warning future lenders) and the disputed-entry remediation (fixing historical damage), this is the three-part defence.

See our CIFAS Walkthrough and identity theft recovery guide for the full sequence.

Step 7 — Ongoing monitoring (12-24 months)

The risk of new fraudulent activity persists. Set up monitoring:

• Free credit-monitoring services at all three CRAs. ClearScore (Equifax), Credit Karma (TransUnion), and Experian’s free CreditScore service together cover all three.
• Monthly file review: check for new accounts, searches, addresses. Most monitoring services email when anything changes.
• Quarterly statutory pulls for the first 12 months — these are the deepest checks.
• CIFAS file SAR every 6-12 months for the first 2 years — verify no new markers have been placed against you.
• Renew CIFAS Protective Registration at the 2-year mark if any residual risk remains.

If your credit score has dropped significantly

Recovery takes 6-24 months depending on damage:

• Once fraudulent entries are removed: score recovery is typically visible within 60-90 days as the CRAs reprocess.
• Hard-search clusters: full recovery in 12 months as searches age off.
• If there are CCJs from fraudulent accounts: removal requires the lender to confirm fraud + court application via Set Aside. Specific process; legal advice typically helpful for substantial cases.
• Build positive history alongside: continue using legitimate credit responsibly (small credit card paid in full each month) to demonstrate recovery.
• Don’t fall for “credit repair” services that promise to fix your file for a fee: there’s nothing they can do that you can’t do for free. Most are also follow-on scams targeting fraud victims.

Common scenarios

Multiple loan applications appearing on file — never applied

Classic identity-fraud pattern. Each application is a hard search; some may have become accounts. Dispute each via Step 3. File CIFAS Protective Registration immediately.

Mobile contract opened in your name

Common — mobile contracts are an easy target. The network’s fraud team typically writes off the debt quickly given Report Fraud reference. Removal from the credit file follows.

CCJ on your file from a debt you never owed

Serious. Apply to the court to have the CCJ set aside on grounds of fraud. Court fee applies but can be waived for hardship. Once set aside, file the order with the CRA for removal.

Score dropped 100+ points overnight

Likely a combination of hard searches plus a default. Pull the file, identify each cause, dispute the fraudulent ones. Recovery follows once removed.

Related scam guides

• How to report a scam
• How to freeze your credit file
• Identity stolen — recovery
• CIFAS Walkthrough
• Bank account frozen — how to challenge
• FOS complaint guide
• I've been scammed — what next
• Report Fraud reporting
• Bank refund after scam (PSR)