Nearly three in five (59%) fraud-risk cases linked to identity fraud, Cifas data shows

• Criminals are exploiting personal details to drive wider fraudulent activity
• Significant rise in muling cases reinforces need for early intervention
• Online retail accounts are heavily targeted; SIM swap threat grows

More than 220,000 fraud-risk cases were recorded to the UK National Fraud Database (NFD) in the first six months of 2026, with identity fraud accounting for 59%. The figures, revealed by fraud prevention service Cifas, mark the highest total volume of cases recorded throughout January-June.

The Fraudscape 2026 – 6 Month Update, released today (5 August), shows stolen personal information is a gateway to wider fraud. Identity fraud rose 9% to nearly 130,000 cases in the first half of 2026, with bank accounts and plastic cards the primary targets, accounting for 68% of all these cases. Cifas intelligence shows there are growing concerns around the criminal use of synthetic identities, AI-enabled impersonation and digitally manipulated documentation.

While most identity fraud victims are aged 61 and over, the largest uplift concerned 21-30-year-olds, where cases increased by almost a third (+32%). This highlights the threat younger consumers face, particularly through online and social media approaches.

Cases linked to money muling increased by 69% compared to the first half of 2025, with more than 13,000 recordings to the NFD. Mule activity now accounts for 30% of all cases of misuse of facility – where an account or product is misused by the genuine account holder – underlining its significant role in enabling wider crime.

The January-June 2026 figures also reveal people aged under 30 represent a majority (57%) of muling cases, with 17% aged under 21 – reinforcing the need for early intervention and education to help stop younger people becoming involved in this activity.

There was a 5% increase in facility (account) takeover reports, with nearly 40,000 cases recorded during the first half of 2026. Online retail and plastic card account takeovers also rose sharply, up by 84% and 59% respectively, highlighting the value of compromised accounts and payment facilities.

Meanwhile, unauthorised SIM swap cases saw a 402% uplift in the first six months of 2026, compared to the same timeframe in 2025. This reflects a growing trend of SIM swaps being used to intercept security codes, bypass account protections, and commit further fraud.

Mike Haley, CEO of Cifas, said: “Identity fraud now accounts for nearly three in five fraud-risk cases recorded to the UK National Fraud Database, demonstrating how valuable personal information has become to criminals. Whether it is used to open accounts, take over existing facilities or support wider criminal activity, stolen personal data often provides the entry point.

“The findings also reinforce the importance of early intervention. As criminals continue to evolve their tactics and use digital channels to reach new audiences, education, awareness and prevention remain – particularly for younger people who are increasingly exposed to fraud risks.

“Greater reporting, stronger detection and cross-sector data and intelligence sharing are helping organisations build a clearer picture of the key threats. By working together and acting earlier, we can better protect consumers, support businesses and prevent fraud before it takes hold.”

Download the Fraudscape 2026 - 6 Month Update

ENDS

Notes to Editors

For more information, please contact Hayley Paterson, Cifas Press and PR Manager, on 07494 751992 or press@cifas.org.uk.

About Cifas

Cifas is the UK’s leading not-for-profit fraud prevention service with nearly 800 members from across key economic sectors including banking, retail, insurance, and telecoms. Cifas protects businesses and individuals from fraud through the sharing of data and intelligence sharing between the private, public and third sectors. In addition to providing products and services – which helped businesses prevent more than £2.4 billion in fraud losses in 2025 – Cifas delivers specialist training through its Cifas Fraud and Cyber Academy and Digital Learning programme.

Website | LinkedIn | X

About Fraudscape

Fraudscape is Cifas’ annual report which combines data from its National Fraud Database and Insider Threat Database, alongside intelligence provided by Cifas members, partners, and law enforcement. Additionally, the 6 month Fraudscape update covers fraud-risk data and intelligence during January-June of that specified year.

Cifas fraud types explained

• Facility (Account) Takeover: When stolen personal details, often gained through fake emails or texts, are used to hijack and control someone’s existing account. 
• Identity Fraud: Stealing a person’s details and using them. 
• Misuse of Facility: Where an account or product is misused by the genuine account holder, such as money muling. 
• False Application: When false information is provided or key details are omitted in an application made by a genuine party. 
• Insider Threat: Where an employee abuses their position of trust to commit fraud against the organisation which employs them.

Contact us at press@cifas.org.uk