What is CIFAS?

CIFAS is a not for profit membership association dedicated to the prevention of financial crime and staff fraud. CIFAS provides a range of fraud prevention services to its Members, including a fraud avoidance system used by the UK's financial services companies and public authorities.

How does CIFAS work?

The CIFAS fraud avoidance systems allow Members to exchange details of applications for products, services or employment, which are considered to be fraudulent, because the information provided by the applicant fails verification checks. Members can also exchange information about accounts and services which are being fraudulently misused or fraudulent insurance and other claims. CIFAS Members also exchange information about innocent victims of fraud to protect them from further fraud. This exchange of information is referred to in a clause on application/proposal/claim forms/employment application (hereafter referred to as “application”) forms and/or contracts and agreements telling you how your data may be used. CIFAS information is not used to assess the individual’s ability to obtain an account, product, facility, insurance policy or employment. It is only used to prevent fraud. CIFAS is not a Credit Reference Agency.

Members of CIFAS are required to operate effective in-house procedures to enable fraud or attempted fraud to be identified and classified. Basic information on each case is filed on the CIFAS database. The information is then transferred electronically to a number of Participating Agencies (Callcredit, Equifax, Experian, Experian Decision Analytics and Synectics Solutions Ltd – please see below).

When a Member searches the CIFAS database through one of the Agencies, the Member is made aware of the need to investigate by means of a flagged warning. The Member is then required to conduct an investigation into the case and not just reject the application or account/product/facility/insurance policy/employment, as it may be a genuine application rather than one submitted by a fraudster. This warning does not mean that the individual has been blacklisted. It means that extra precautions should be taken to ensure that the application or facility that has prompted the check is genuine and this protects the individual from further fraud.

For example, a typical illustration of how the system works would show that:

We are committed to doing all we can to prevent financial crime and staff fraud. CIFAS helps to prevent thousands of frauds every month, and this helps to keep the price of goods and services down. CIFAS also prevents fraudsters obtaining employment within organisations.

How does CIFAS protect you?

CIFAS goes to great lengths to ensure that innocent victims of fraud are protected. Provided that their current address is known and the letter used will not alert the fraudster, in all impersonation cases, CIFAS Members are obliged to send a mandatory letter to the innocent victim advising of the CIFAS warning, and how it will prevent further impersonation activity.

A CIFAS warning against an innocent victim warns other CIFAS Members to carry out further checks which may include seeking confirmation of identity to confirm they are not dealing with the fraudster. While this may cause some inconvenience for the victim, it ensures that they do not find themselves being chased for money they do not owe.

How is CIFAS information used?

A CIFAS Member that receives a CIFAS warning from the system is not allowed automatically to refuse an application or to close a facility because of the warning. They are required to make further enquiries to confirm your personal identification details before making a decision. If they identify a fraud, they will normally not proceed with an application or may review a facility or employment. However, there are occasions when, even though a CIFAS warning is present and your personal identification details have been properly confirmed, your application will not be approved. This is because your application is still subject to the Member’s standard checks and decision-making policies and you may not meet them. You may ask the Member why they have declined your facility. The Member will normally be able to provide you with an explanation and provide you with details of any credit reference agencies or fraud prevention agencies they have used.

Who are the Fraud Prevention Agencies?

CIFAS members use one or more of the following fraud prevention agencies in the UK:

Experian Ltd: Consumer Help Service, PO Box 9000, Nottingham, NG80 7WP
Tel: 0844 481 8000  www.experian.co.uk

Equifax plc: Credit File Advice Centre, PO Box 1140, Bradford, BD1 5US
Tel: 0870 010 0583     www.equifax.co.uk

Callcredit Ltd: Consumer Services Team, PO Box 491, Leeds, LS3 1WZ
Tel: 0870 060 1414 www.callcredit.co.uk

Experian Limited - Experian Decision Analytics: Seabank House, Wight Moss Way, Southport, PR8 4HQ
Tel: 0844 481 8000 www.experian-da.com

Synectics Solutions Ltd: Customer Helpdesk, Synectics House, The Brampton, Newcastle-under-Lyme, ST5 0QY
Tel: 01782 664 000 www.synectics-solutions.com

What are your Rights?

You have a right to request a copy of any information held about you under the Data Protection Act 1998.

For a fee from £2 you can obtain a copy of your credit file (which gives details such as your name, address, current credit commitments, payment records, etc) from the credit reference agencies. If you want to see your credit file then you should write to the credit reference agencies Experian Ltd (Nottingham), Equifax plc and Callcredit Ltd at the addresses listed above, enclosing the relevant fee. If you believe any of the data is incorrect, the details you receive from the agencies will explain how you can set about having it corrected. You may also be able to add a note to your record, which could help you.  If there is a CIFAS Protective Registration or a Victim of Impersonation marker against your name to protect you, you will be able to see this on your credit file.

For a fee of £10 you are entitled to request a copy of any information held about you by any organisation on computer or in some manual files. This is known as a Subject Access Request.  If you wish to request a copy of any data held about you by CIFAS, please follow the procedure as explained on the Subject Access Request form and send your completed form to the address below.

The Compliance Officer
CIFAS
6th Floor, Lynton House
7-12 Tavistock Square,
London
WC1H 9LT

Our response will include only CIFAS data and not public information, payment history data or other fraud information.

If you want to know what other fraud information is held against your name, you should write to the organisation that processed your application or insurance claim to enquire which fraud prevention databases they consulted. They are obliged to provide you with full details including the addresses to write to.  The responses from those organisations will not include any CIFAS data.

How do I complain about a CIFAS warning?

In the first instance you should write to the CIFAS Member who dealt with your application or facility. CIFAS Members operate their own internal complaints procedures and can either send you details of the procedure or advise you what to do.

If you and the CIFAS Member are unable to reach an agreement on your complaint, you should request a letter from the CIFAS Member confirming that the complaints procedure has been completed or exhausted. Sometimes this is known as a “Final Response Letter”. If you then decide you want to take your complaint further you may ask CIFAS to investigate your complaint. (CIFAS cannot become involved in a complaint until the ‘Final Response Letter’ has been issued.) CIFAS will contact the CIFAS Member and review the details of your complaint. CIFAS does not have the power to recommend financial awards, but CIFAS will confirm whether the CIFAS Member adhered to the correct procedures. For full details of the CIFAS complaints procedure please either click here to view the complaints page or write to CIFAS and request a copy of the complaints procedure at the above address.