Buy Now Pay Later Fraud in the United Kingdom
How fraudsters exploit UK buy now pay later services to make purchases using stolen identity data, leaving victims liable for unfamiliar debt.
Part of: Buy Now Pay Later Fraud
Last reviewed: 13 July 2026
Buy now pay later (BNPL) services have grown rapidly across the United Kingdom, letting shoppers split online purchases into interest-free instalments with only light identity checks at checkout, since most BNPL products were historically unregulated consumer credit under UK law. This light-touch onboarding is exactly what fraudsters exploit: using a victim's stolen name, address, and date of birth, they can open a BNPL account or make a purchase in the victim's name at a UK retailer, leaving the real person to discover unfamiliar instalment debt on their credit file.
Because BNPL borrowing has only recently started coming under closer regulatory oversight from the Financial Conduct Authority (FCA), and because dispute processes vary between providers, UK victims of BNPL fraud can face a confusing path to clearing their name — needing to contact the BNPL provider, the retailer, and credit reference agencies separately to unwind fraudulent instalment plans opened using their identity.
How this scam works on the United Kingdom
A fraudster who has obtained a UK victim's personal details — often through a phishing scam, a data breach, or a stolen physical document — uses them to create an account with a UK BNPL provider or check out on a retailer's website using the BNPL option, entering the victim's name and address but a delivery address or contact detail the fraudster controls.
Because many BNPL checks focus on light identity verification rather than a full credit check, the transaction can be approved quickly, and goods are shipped to the fraudster while the instalment repayment obligation is recorded against the victim's name. The victim typically finds out only when a missed-payment notice, debt collection letter, or a change in their credit report appears weeks later.
Some UK-specific variants involve fraudsters using a victim's details to open several small BNPL purchases across different retailers and providers simultaneously, spreading the fraud across multiple accounts to stay under detection thresholds before the victim notices any single unusually large transaction.
Common red flags
- You receive a payment reminder or missed-instalment notice from a BNPL provider you never signed up with
- Your credit report shows a new BNPL account or credit search you don't recognise
- You receive delivery confirmation emails for goods you never ordered, sent to an address that isn't yours
- A debt collection letter references a purchase or retailer you have no record of dealing with
- You've recently been affected by a data breach or phishing scam involving your name, address, and date of birth
- Multiple small BNPL transactions appear across different retailers within a short period, none of which you made
How to protect yourself
- Check your credit report regularly with UK credit reference agencies (Experian, Equifax, TransUnion) to catch unfamiliar accounts early
- Contact the BNPL provider immediately to report the account or transaction as fraudulent and request it be frozen
- Report the fraud to the retailer where the purchase was made, since they may be able to halt shipment or reverse the order
- Place a notice of correction or fraud alert with UK credit reference agencies while the dispute is resolved
- Report the identity theft to Action Fraud, the UK's national fraud and cybercrime reporting centre
- Freeze or monitor accounts more broadly if your data was part of a known breach, since BNPL fraud often accompanies wider identity theft
How to report it
- Report to Action Fraud (actionfraud.police.uk), the UK's national reporting centre for fraud and cybercrime
- Contact the BNPL provider directly (e.g., through their fraud or dispute team) to report and freeze the fraudulent account
- Notify Experian, Equifax, and TransUnion UK to flag the fraudulent account and consider a protective registration service such as CIFAS
- Report to the retailer involved so they can investigate the order and shipping details
Frequently asked questions
Am I liable for BNPL debt taken out fraudulently in my name in the UK?
You should not be held liable for genuinely fraudulent debt, but you will likely need to formally dispute it with the BNPL provider and provide evidence (such as a police/Action Fraud reference) that the account was opened without your knowledge or consent.
How do I fix my credit file after BNPL fraud in the UK?
Contact the BNPL provider to have the fraudulent account removed and request the UK credit reference agencies (Experian, Equifax, TransUnion) update your file accordingly; registering with CIFAS's Protective Registration service can also add an extra layer of monitoring.
Are UK BNPL providers regulated the same way as credit cards?
Regulation has been tightening, but historically many BNPL products sat outside the same Financial Conduct Authority consumer credit protections as credit cards, which is part of why identity verification has been lighter and fraud has been able to slip through more easily.
Can I get a refund for goods shipped fraudulently under my name?
You are generally not liable to pay for goods you never ordered or received; report it to both the BNPL provider and the retailer, and recovery of any payment already made may depend on the payment method and timing — pursue both channels rather than assuming one will resolve it alone.
How did the fraudster get enough information to pass BNPL checks?
Commonly through phishing scams, data breaches, or stolen physical mail containing your name, address, and date of birth — details that are often sufficient to pass a BNPL provider's lighter identity checks compared to a full credit application.