
Make your money go further
Find the best deals, avoid scams, and grow your savings with our expert guidance. From only £4.99 a month.
Join Which? MoneyCancel anytime.
While fraudsters are able to abuse vast numbers of bank accounts to launder their victims’ stolen money, innocent people are being caught up in the counteroffensive.
Individuals are turning to the ombudsman for help after being wrongly flagged as money launderers and shut out of their bank accounts, our investigation has found.
In the year 2022-23, the Financial Ombudsman Service (FOS) received 1,389 new complaints about the closure of current accounts (that’s a minimum, according to the FOS, which says the figures aren't exact).
It upheld 25% of these, agreeing with aggrieved customers that their providers had acted unfairly.
But having your account closed is just the start. We've found how an effective bank blacklist can leave you unable to get a bank account, mortgage or even a mobile phone contract for up to six years.
Scams in which victims are tricked into making bank transfers to con artists (known as authorised push payment, or APP scams) have been on the rise for several years.
More than 200,000 instances were recorded last year, which is an increase of 6% on the year before, according to banking association UK Finance.
To make these scams work, fraudsters need bank accounts to receive the money, before it can be dispersed elsewhere.
They come by these accounts in various ways, such as by using ‘money mules’ who give fraudsters the use of their accounts.
While some mules are paid-up accomplices, others may not know why money is being moved through their account, have been conned by someone posing as an employer, or are vulnerable and being manipulated.
Fraudsters can obtain accounts through other means, notably by applying for accounts in the names of unsuspecting strangers, or even by cultivating fictitious identities with fake utility bills.
Credit reference agency Experian says one in 100 current account applications are identified by banks as fraudulent, with individuals knowingly giving false information.
Banks shouldn’t let fraudulent accounts be opened in the first place, but closing them is a vital weapon in the fight against fraud. That's assuming they target the right accounts.
An upheld complaint about a bank closing an account very rarely results in accounts being reopened. Typically the customer receives compensation and an apology, but the account will remain closed.
Banks normally must give 30 days’ notice of an account closure. In cases of suspected fraud there’s no minimum notice requirement. Customers could have just days to make alternative arrangements.
If losing your account wasn’t bad enough, banks can take a further, much graver, step, of recording a marker against your name on the Cifas National Fraud Database. This identifies you as a possible fraudster to all member firms, including hundreds of banks, credit providers, insurers and telecoms firms.
Whenever you apply for a product or service with another member, they will check the database for fraud markers. And while the database isn’t technically a blacklist – members are free to make their own decisions about which customers they take on – the reality is that with a marker, many providers are likely to reject you.
Find the best deals, avoid scams, and grow your savings with our expert guidance. From only £4.99 a month.
Join Which? MoneyCancel anytime.
In most cases, Cifas markers are applied correctly and prevent scammers simply resuming their antics with a new provider.
But if you’re among the small number where they are unjustly applied, the results can be catastrophic, leaving you unable to get new bank accounts, mortgages or even phone contracts for the six-year life of the marker (unless it’s challenged).
Perhaps the most extraordinary aspect of Cifas markers is that your provider doesn’t have to tell you if it’s recording one. This means you may only discover its existence after having applications to other firms declined. And this in itself can dent your credit score.
Cifas is able to behave in this way because it’s a membership body for the financial industry. It has no statutory footing and little oversight beyond the FOS, which mainly scrutinises individual decisions.
The numbers are shocking:
Again the FOS data is previously unpublished and not verified in the same way as its other data. The FOS told us that this number was a minimum, but that the overall number of Cifas-related complaints has dropped over the past five years, though uphold rates have remained fairly consistent, currently at 31%.
The 'uphold rate' for individual banks and providers - indicating what percentage of a firm's decisions have been overturned by the FOS - varies from year to year, and so it is difficult to pinpoint a consistent 'worst offender'. Having an account shut down unfairly is not an experience limited to customers of a particular provider.
In the FOS’s decisions database, we found examples of innocent customers unfairly marked as fraudsters. In one case, this was because the bank had ‘failed to consider if [the customer] himself was the victim of an attempted identity theft or fraud’. It paid the customer £100 compensation.
Upholding another case, the FOS said the bank was justified in closing an account but hadn’t ‘done enough to show that [the customer] was complicit in fraud and so it unfairly recorded the fraud prevention marker against her’. The FOS added ‘a marker shouldn’t be registered against someone who was unwitting; there should be enough evidence to show complicity.’ It ordered the bank to remove it.
Someone who’s very familiar with wrongly applied Cifas markers is Tim Thomas, one of the directors at corporate protection law firm Richardson Lissack. The company represents around 40-60 clients a year in disputes over account closures and Cifas markers.
He describes the ability to record Cifas markers as ‘almost unfettered power’ and if matters aren’t resolved by the FOS ‘the only recourse is to sue for inaccurate use of personal data, and that’s extremely expensive.’ Thomas believes there’s ‘no scrutiny [of Cifas] at all’ as it’s an industry body funded by its members. ‘It has no statutory remit.’
Generally, he says, he is most successful in dealing with banks directly. But this path can be anything but smooth, and in one instance, it took two years to get something removed from the database for his client.
In his experience, people can find themselves subject to unjust markers for all sorts of reasons – sometimes because they’ve naively given out their bank details to a friend. In other cases, owners of small businesses are maliciously accused of fraud by scammers hoping to claim a refund while keeping the high-value goods they had ordered. Such accusations and chargeback requests can see a genuine account shut down.
Sometimes money appears to arrive into an account from an unusual source, and, Thomas says, banks don’t ask questions at the time of receipt, they just leap to conclusions.
‘There’s a degree of racial profiling,’ he adds. ‘I have come across this frequently with Nigerian clients of impeccable standing but who might do things in a slightly unusual way.’
He describes how the difficulty of obtaining sterling can lead to genuine business funds passing through informal networks of acquaintances within the West African diaspora, raising a false alarm at the destination bank.
Cifas has not specifically created a blacklist but the relying parties, who are trying to stop fraudsters, can use it as such.
Due to the lack of other available fraud data from sources, such as online social media platforms and telecoms firms, there is a risk the banks using Cifas data put an overemphasis on existing limited sources and raise red flags without performing extra checks.
This is why Which? is calling for the government and the Information Commissioners Office (ICO) to ensure that there is a route to sharing data about suspicious behavior and actual fraud to disrupt fraudsters.
Our campaign to bring fraud into the scope of the Online Safety Bill includes requiring social media platforms to use data sources as part of checks to stop scam adverts.
Wider sharing makes it more important than ever that consumer protection is at the heart of these initiatives, and that organisations can be held accountable when innocent people are labelled as criminals.
There needs to be a route for customers to understand why they’re being denied service – and challenge decisions, with minimum paperwork and cost, while stopping genuine crooks getting through.
Cifas told us it prevented £1.6bn of fraud in 2022, protecting ‘citizens, businesses and the public purse’. Key to this is ‘prevention activity [relating] to misuse of a banking facility [as] these money flows facilitate scams [and] other serious crimes harming the most vulnerable... including people trafficking and human slavery’.
It added it was ‘proud to operate in full compliance with legal requirements and with openness and transparency, including a publicly available Legitimate Interests Assessment and Ethics and Corporate Social Responsibility Policy’.
It highlighted its own complaints procedure for those wishing to dispute markers, adding that ‘Cifas cases overturned by the FOS remain extremely low when compared to the 409,000 cases recorded by our members in 2022.’
Banking industry body UK Finance told us protecting customers from fraud was its ‘absolute priority for the banking and finance industry. Any decision to close an account is only taken after extensive review and analysis of the activity on the account and each case is dealt with individually.
‘Banks are required to adhere to legal requirements when assessing criminal activity and in every case, the bank must always ensure the customer is treated fairly.’
It highlighted its anti-muling education campaign (moneymules. co.uk) and urged customers to ‘never share Pins, passwords or passcodes with anyone or allow your bank account to be used by someone unless you know and trust them.’
Our emails will alert you to scams doing the rounds, and provide practical advice to keep you one step ahead of fraudsters.
Sign up for scam alerts