Key takeaways

  • A marker filed against you can be held for up to six years. That is a ceiling, not a fixed term.
  • “Victim” markers, which protect you after identity fraud, are held for 13 months from the date of submission.
  • Protective Registration is separate: 24 months, and it does not renew on its own.
  • You can ask Cifas what it holds on you.

How long can a CIFAS marker stay on the database?

Cifas’s fair processing notice for the National Fraud Database says that if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.

Note the words “up to”. Neither Cifas page says every marker runs the full time.

Are victim markers different?

Yes. If your identity was misused, a Victim of Impersonation or Victim of Takeover marker may be added to protect you. Cifas says these remain in place for 13 months from the date of submission.

Cifas says a credit report will only show its victim markers, so a marker filed against you will not appear on one. Our guide on what a CIFAS marker is explains why that catches people out.

What about Protective Registration?

Protective Registration is a service you apply for. Cifas describes it as a warning flag against your name and personal details, which prompts member organisations to carry out extra checks when your details are used in an application.

Cifas says it costs £30 for two years, stays in place for 24 months unless you ask for it to be removed, and does not affect your credit score. It does not renew on its own: to continue it you have to reapply. You can ask to update your details or remove it at any time.

What happens when the time is up?

Cifas’s National Fraud Database Principles say members must not hold data indefinitely. Once it has served its purpose, it must be deleted securely and permanently.

The Cifas pages we checked do not describe how deletion at the end of the retention period is carried out, or whether a member has to review a case before then. You can ask Cifas what it holds on you: see how to check if you have a CIFAS marker.

These periods are the ones Cifas states for its own databases. The pages we cite do not say how long a bank or lender keeps its own internal records about you.

Can a CIFAS marker be removed before it expires?

Cifas says that if the organisation that registered the marker upholds your complaint, it can remove your details from the Cifas system. The steps are in how to get a CIFAS marker removed.

Where can I get advice?

If you are unsure where you stand, you can find a solicitor in our directory. FraudMarkers is independent and is not affiliated with any firm listed.