The Flag Behind the Closure: Challenging a Cifas Fraud Marker in 2026

A letter closing a bank account often gives little away. The stated reason may be a commercial decision, a risk assessment, or a failure to meet terms. For some UK customers, however, the real trigger is invisible: a Cifas marker on the National Fraud Database. The marker is not a criminal record. It is a piece of shared intelligence that member organisations can use when assessing risk. Yet its practical effect can be severe: one bank closes an account, another declines a current account, and a third asks questions at onboarding. In 2026, understanding the marker and how to challenge it is essential.

What a Cifas marker is, and what it is not

Cifas is a not-for-profit fraud prevention organisation. Its members include banks, lenders, insurers and other regulated firms. The National Fraud Database lets members share information about suspected fraud and misuse. A marker can cover categories such as misuse of facility, false identity, account takeover or application fraud. It means a member has recorded a suspicion or concern. It is not a court finding, a conviction or a regulator's decision. That distinction matters because a marker can be corrected or removed if the information is wrong, unfair or out of date.

How a marker can close accounts at more than one bank

The de-banking pipeline is not one decision. It is a series of decisions by different firms using shared data. The original bank may close an account, file a marker and tell the customer little. A second bank may see the marker when the customer applies for a new account. It may decline the application, close an existing account or ask for more information. A third bank may do the same. None of this is automatic, and each firm should make its own assessment. But in practice a marker can follow a customer across the market, turning one closure into a prolonged exclusion from mainstream banking.

What banks must tell you

UK data protection law gives individuals a right of access to their personal data. That includes information about a Cifas marker, the category, the date and the member that filed it, subject to limited exemptions. A bank may withhold some detail where disclosing it would prejudice the prevention or detection of crime. It should not refuse everything as a matter of course. Ask the bank in writing whether it has filed a marker, which Cifas category applies, and what correction route it offers. If the bank refuses, ask for its reasoning and make a complaint.

Requesting your Cifas data

Submit a subject access request to both the bank and Cifas. It is free. Include proof of identity and enough information to locate your records. The organisation should respond within one month, although it may extend that period by up to two months for complex requests. Ask for all personal data, including marker details, the filing member, dates, internal notes, decision logs and records of sharing. Keep copies of the request and the response. The Cifas response should help identify which member filed the marker. Cifas can explain its process, but it does not adjudicate the underlying dispute; the filing member must correct its own data.

Common appeal mistakes

Many challenges fail because they are aimed at the wrong target or built on emotion rather than evidence. Frequent mistakes include sending an angry letter without a timeline, challenging Cifas instead of the bank that filed the marker, and failing to obtain the subject access request before arguing. Other errors are missing the bank's complaint deadline, denying everything without explaining what happened, failing to provide proof of address or identity, and not asking for a specific correction. If impersonation is suspected, a police crime reference and evidence of address history can be important. Verbal assurances are not enough; ask for confirmation in writing.

A step-by-step challenge route

1. Secure the evidence. Gather closure letters, declined application letters, statements, correspondence and a simple timeline of events.

2. Request data from the bank and Cifas. Ask specifically for any Cifas marker, its category, the filing member and the date.

3. Identify the filing member and the marker category. This tells you which firm must correct the record.

4. Build a factual challenge. If the marker relates to impersonation, provide a crime reference, identity documents, address history and evidence that transactions were not yours. If it relates to misuse of facility, explain the transactions, who had access and any supporting evidence. Ask for the marker to be removed or corrected.

5. Send a formal complaint to the bank's fraud or complaints team. State the outcome you want: removal, correction, confirmation in writing and, where appropriate, compensation for direct costs. Keep the reference.

6. Escalate to the Financial Ombudsman Service if the bank does not resolve the complaint within eight weeks or sends a final response you do not accept. The ombudsman can consider whether the bank acted fairly and whether the marker should be corrected. Complaints normally need to be brought within six months of the final response.

7. Seek specialist advice. Citizens Advice, Money Advice Trust services, Law Centres and solicitors can help with evidence and wording. For complex cases, a specialist fraud or data solicitor may be appropriate.

8. If the data remains inaccurate, consider the Information Commissioner's Office. The ICO does not usually award compensation, but it can assess whether a firm has handled personal data properly. Legal advice may be needed if losses are significant.

What success looks like

Success may not mean an immediate return to the same bank. It may mean the marker is corrected or removed, the filing bank confirms the change, and other providers can reassess. Keep that confirmation. When applying elsewhere, be ready to explain the history briefly and provide evidence. A corrected marker is not a guarantee of an account, but it removes a hidden barrier.

The bottom line

A Cifas marker is not a lifetime ban, but it will not shift without a structured challenge. The customer who obtains the data, identifies the filing member and presents evidence is in a much stronger position than one who simply protests. In 2026, the route is demanding but real: subject access request, formal complaint, ombudsman and, where necessary, specialist advice.