A CIFAS marker sits on the National Fraud Database, separate from your credit file. That is why most people only discover one when a bank refuses them, closes an account without explanation, or declines a loan they would otherwise qualify for.
The good news is that you have a legal right to see exactly what is held about you. Under UK GDPR you can make a subject access request (a DSAR) to CIFAS, free of charge, and they must respond within one calendar month.
Step 1 — Gather your identity documents. CIFAS will not release data until they are satisfied who you are. Have a clear copy of your passport or driving licence, plus a recent proof of address (bank statement, council tax bill or utility bill dated within the last three months).
Step 2 — Open the CIFAS subject access request page. Go to cifas.org.uk and find the 'Subject Access Request' section under the individuals area. There is an online form; a postal route is also available if you prefer.
Step 3 — Complete the form accurately. Provide every name you have used, your date of birth, and all addresses from the last six years. Markers are matched on name, date of birth and address, so an incomplete address history is the single most common reason a DSAR comes back showing nothing when a marker does in fact exist.
Step 4 — Upload your ID and submit. You will receive an acknowledgement with a reference number. Keep it. The 30-day clock starts from the date CIFAS has enough information to identify you, not the date you first made contact.
Step 5 — Read the response carefully. If a marker exists, the response tells you four things that matter: the member organisation that filed it (your bank or lender), the case type (first-party fraud, misuse of facility, application fraud, or a victim-of-impersonation protective registration), the date it was loaded, and how long it will stay — usually six years.
Step 6 — Request the evidence from the bank, not CIFAS. CIFAS only hosts the database; the member organisation owns the decision. Send that bank a separate DSAR asking for the fraud investigation file, call recordings, internal notes and the evidence relied on to meet the CIFAS filing standard.
What if nothing shows? A nil response means no marker was matched against the details you supplied. If you are still being refused accounts, the problem may be your credit file instead — check Experian, Equifax and TransUnion, all of which offer free statutory reports.
What not to do. Do not keep applying for accounts while you investigate. Every refusal creates more data a bank can later cite to justify the marker, and a run of hard searches damages your credit file independently of the CIFAS entry.
Your next step. If your DSAR confirms a marker, the filing standard is strict: the bank must hold evidence that would support a report to the police. In practice many markers — particularly misuse-of-facility entries mislabelled as first-party fraud — do not meet it. Send us your DSAR response through our free eligibility check and we will tell you honestly whether the marker is challengeable.