CIFAS Protective Registration
A UK fraud-prevention service that flags a consumer's address on shared databases, prompting extra identity checks before credit is granted at that address.
Also known as: CIFAS, CIFAS flag
Last reviewed: 10 June 2026
CIFAS (Credit Industry Fraud Avoidance System) is the UK's main fraud-prevention membership organisation, operating shared databases that financial institutions and other organisations consult to detect fraud. A Protective Registration is a voluntary flag that consumers can place on their own record — currently costing £25 for two years — to indicate that their personal details may have been compromised.
When a lender, insurer, or mobile phone company checks a CIFAS-flagged address during an application, they are alerted to take extra verification steps. This makes it harder for a fraudster using stolen personal details to successfully open a new account. It does not block legitimate applications but does mean they take slightly longer.
The Protective Registration is different from an Impersonation flag, which CIFAS members place when they detect that someone has already used your details fraudulently. Victims of identity theft can request copies of their CIFAS file via a subject access request to understand what, if anything, is recorded about them. The service is often recommended alongside a credit freeze for comprehensive identity protection in the UK.
Examples
- After receiving a suspicious loan approval letter, a consumer adds a CIFAS Protective Registration to her address; subsequent fraudulent applications for credit at that address are flagged and rejected.
- A victim of identity theft finds an Impersonation marker on their CIFAS file and uses it as evidence when disputing fraudulent accounts.