Identity Theft on Your Credit File: What to Do Before Car Finance

If a credit report shows a loan you never took out, making another car finance application will not put it right. First establish whether the entry is genuinely unfamiliar, then report suspected impersonation to the lender and the credit reference agency.

If someone may also have access to your bank or email account, protect those accounts immediately. You can work on the credit-file corrections alongside that security response.

First response: secure any compromised accounts

If there is any sign that an existing bank or payment account has been accessed, contact that provider immediately. Deal with compromised email too, because it can be used to reset other passwords.

• Change affected passwords to unique ones and enable stronger sign-in protection where available.
• Report lost or stolen identity documents to the issuing organisation.
• Check contact details on your genuine accounts for changes you did not make.
• Save suspicious messages and correspondence as evidence without interacting with their links.

Report the fraud through Report Fraud in England, Wales or Northern Ireland. In Scotland, contact Police Scotland. Keep the reference with your lender case numbers so you can supply the same clear account of events when asked.

Investigate the entry, then open a fraud case

Download or save your credit reports from Experian, Equifax and TransUnion. Their records can differ, so checking only the score in one app may miss the problem. Reviewing your own reports does not require you to apply for credit.

Look for unfamiliar accounts, hard searches, addresses, payment arrears and financial connections. An organisation's legal name may differ from its trading name, so investigate an unfamiliar entry rather than immediately assuming that every name you do not recognise is fraudulent.

For each disputed item, record the organisation, account or search date, partial reference and reason it appears wrong. Save a dated copy of the report before the record changes.

Use the organisation's official website or an established contact number. Do not rely on the telephone number in a suspicious demand or follow a login link in an unexpected message.

Tell its fraud team that you did not apply for or authorise the account. Ask for a case reference, the documents it needs and confirmation of how it will handle collection activity while investigating. Supply information through the secure route it specifies.

If a debt collector contacts you, tell it that the account is disputed as identity fraud and provide the investigation reference. Keep copies of the correspondence. Do not ignore court paperwork or other formal notices; get advice promptly if these arrive.

Your report should say that you did not authorise the borrowing and when you discovered it. Explain whether you also hold a genuine account with that business, so the two are not confused. Never provide passwords or PINs as evidence.

Get the records corrected at each agency

Ask each agency showing the disputed information to investigate it with the organisation that supplied it. Reporting the issue to your own bank does not automatically correct a different lender's entry on every credit file.

When an entry is confirmed as fraudulent, ask the lender which records it will remove or correct, including associated searches, defaults and incorrect personal details. Request written confirmation and then check the updated reports.

This process concerns information created by impersonation. Accurate defaults on genuine borrowing need a different response; they cannot be removed by describing them as fraud.

Would extra identity protection help?

Cifas Protective Registration alerts participating organisations that your identity is at increased risk. It prompts extra checks when someone applies using your details. It does not lower your credit score, but a genuine application may take longer while the lender confirms it is you.

It is a preventative service, not insurance and not a mechanism for deleting an existing fraudulent debt. Check its current terms and charge before choosing it. A victim-of-impersonation marker is also different from an allegation that you committed fraud.

Your credit reference agency may offer additional measures, such as a password notice of correction. Ask how the measure works when you genuinely need credit. Do not remove sensible protection merely because someone promises it will make a car application quicker.

Applying for car finance while a case is open

If the purchase can wait, obtain the correction confirmations and inspect the updated reports first. That makes it easier to separate any genuine eligibility issue from the effects of fraud.

If you need a car urgently, tell the broker or lender before a full application. Ask whether it can review the fraud evidence, which reports it uses and whether a soft search is available. A soft-search eligibility check does not guarantee acceptance or bypass identity checks.

Repeated applications will not make an incorrect entry disappear. They can create additional search records and make the situation harder to follow. Our guide to car finance searches explains the distinction.

Before proceeding, retain the correction letters and a clear list of anything unresolved. A rising score is not proof that every fraudulent entry has been corrected.