If someone opens an account in your name, tell the lender at once that the account is fraudulent and dispute it in writing, then report it as fraud and check your credit files. This is identity theft, when someone uses your personal details to apply for credit or services as if they were you. Act in the first day if you can. Quick disputes limit further borrowing, create a paper trail, and help lenders block related applications.
Table of Contents
- Tell the lender and report the fraud
- Have you checked all three credit files?
- Should you add extra identity checks?
- Lock down passwords, money and mail
- What if a data breach supplied your details?
Tell the lender and report the fraud
Contact your bank or the lender involved immediately, say you did not open the account, and dispute it in writing. Citizens Advice guidance says most UK banks can be reached securely through their fraud teams by hanging up and dialling 159, described in Citizens Advice banking security guidance.
Also report the case to Report Fraud, the City of London Police service formerly called Action Fraud, online or on 0300 123 2040. According to GOV.UK news, people in Scotland should report to police on 101, as explained in the Report Fraud announcement.
- Note the account number, date found, and lender name
- Keep copies of letters, emails, and reference numbers
- Do not pay the debt or agree a repayment plan
Have you checked all three credit files?
Ask Experian, Equifax and TransUnion for your files and say you are an identity-theft victim. Ask what accounts, searches or linked services you do not recognise, following the approach in the Action Fraud victims' checklist and Citizens Advice material. One lender may check only one agency, so fraud can show in one file and not the others.
Look for hard searches, new current accounts, loans, credit cards, phone contracts, and unfamiliar addresses or aliases. Dispute each unfamiliar entry with the agency and the lender that supplied it. Keep the dispute dates and ask when the record will be corrected.
Should you add extra identity checks?
Consider Cifas Protective Registration, which places a flag on the National Fraud Database. Cifas says registration costs £30 for two years and tells lenders to make extra identity checks before granting credit in your name. This does not guarantee refusal of fraudulent applications, but it prompts closer review.
It suits people whose documents, post, or breach-exposed details may still be circulating. Keep the registration dates. Renew before expiry if the risk remains, such as continued misuse of your address or National Insurance number.
Lock down passwords, money and mail
Change compromised passwords first, then enable two-factor authentication on email, banking and other financial accounts. The Action Fraud victims' checklist also advises checking other accounts and staying alert for mail theft or fraudulent redirection. Email is the priority because password resets often go there.
Use a new, unique password for email, then work through banking, shopping, phone and government accounts. Contact Royal Mail if letters go missing, arrive opened, or a redirection you did not request appears. Ask household members whether they requested changes before assuming theft.
What if a data breach supplied your details?
Contact the organisation that held the data, ask what happened and what it is doing, and keep copies of its replies. The ICO advises escalation to it if the reply is inadequate, described in ICO steps after a data breach. A breach complaint and a fraud dispute are separate tasks.
The lender decides whether the account is fraudulent; the data holder answers for its security. Financial recovery usually depends on the lender's fraud process, the Financial Ombudsman, or a court claim requiring proof of breach, causation and loss. ICO complaint information says the ICO can investigate and fine but does not award compensation.
You Might Also Like
- Legal Aid Agency Data Breach: What Providers Should Know About Bank Account Details
- Government Data Breach News FAQ for September 2026: Source-Checked Answers to Common Questions
- Government Data Breach News 2026 Guide: exposure, response, and recovery; Key Facts and Questions to Ask