Account Takeover CIFAS Marker Removal
If someone gained access to your account and committed fraud, you're the victim. Banks often file the wrong marker — here's how we challenge it.
78,000+ cases
Account takeover cases in 2025. SIM swap attacks — a common takeover method — increased 38% year-on-year.
What Is a Account Takeover CIFAS Marker?
An Account Takeover CIFAS marker (Category 8) is filed when someone gains unauthorised access to your bank account and uses it to commit fraud. The critical issue is the victim vs perpetrator distinction: if your account was taken over, you are the victim — not the perpetrator. In 2025, there were over 78,000 account takeover cases, with SIM swap attacks up 38% year-on-year.
Why Account Takeover Markers Are Challengeable
Victim, Not Perpetrator
If your account was taken over, you are the victim. Banks should not file a perpetrator marker against you. If they did, it's a categorical error that can be corrected or removed.
Unauthorised Access
If you can prove you didn't authorise the transactions, the marker is challengeable. Bank security failures, SIM swaps, and phishing attacks all indicate you were the victim.
Bank Security Failures
If the bank's security failed to prevent the takeover, they bear responsibility. Filing a fraud marker against the victim is disproportionate and challengeable.
Common Scenarios That Trigger This Marker
SIM Swap Attacks
A fraudster transferred your phone number to a new SIM, intercepted your 2FA codes, and accessed your bank account. SIM swaps increased 38% in 2025.
Phishing Victims
You were tricked into revealing your login details via a convincing phishing email or text. The fraudster used your credentials to access your account.
Bank Security Breach
The bank's own security was compromised, allowing fraudsters to access your account. The bank filed a marker against you despite their own failure.
Malware Infection
Malware on your device captured your banking credentials. The fraudster used them to take over your account and commit fraud.
How We Challenge Your Account Takeover Marker
Our proven 5-step process for challenging account takeover CIFAS markers.
Report to Action Fraud
File a report with Action Fraud and obtain a police crime reference number. Report any SIM swap to your mobile provider.
Submit a DSAR
File a Subject Access Request to see what transactions the bank attributes to you and what security logs they hold.
Prove Unauthorised Access
Compile evidence showing you didn't authorise the transactions — device logs, location data, SIM swap records, phishing reports.
Draft Formal Complaint
We draft a complaint demonstrating you were the victim of account takeover, not the perpetrator, requesting marker removal.
Escalate to FOS
If the bank refuses, we escalate to the FOS, which has ruled consistently that victims of takeover should not carry fraud markers.
Real Account Takeover Case Examples
Anonymised case studies of account takeover CIFAS markers we've successfully challenged.
SIM Swap Victim — Marker Removed
6 weeksScenario: A client's phone number was SIM-swapped, allowing a fraudster to intercept 2FA codes and access their bank account. The bank filed a CIFAS marker against the victim.
Outcome: We provided the SIM swap report from the mobile provider and Action Fraud reference. The bank removed the marker after accepting the client was the victim.
Phishing Victim — Marker Reclassified
8 weeksScenario: A client was tricked by a convincing phishing email and their account was taken over. The bank filed a perpetrator marker.
Outcome: We provided the phishing report, Action Fraud reference, and device logs showing unauthorised access. The bank reclassified the marker and eventually removed it.
*Case examples are anonymised to protect client privacy. Outcomes are not guaranteed and depend on individual circumstances.
Account Takeover CIFAS Marker FAQ
Device logs, location data, IP address records, SIM swap reports from your mobile provider, and an Action Fraud report all serve as evidence that you didn't authorise the fraudulent transactions.
An Action Fraud report with police crime reference, SIM swap records (if applicable), phishing reports, device logs, and any correspondence showing you reported the unauthorised access to the bank promptly.
Yes. If you can prove the account was taken over without your authorisation, the marker should be removed — not just reclassified. The FOS has ruled that victims of takeover should not carry fraud markers.
Even if the bank claims you were negligent (e.g., fell for a phishing email), negligence is not fraud. A 6-year fraud marker for a victim is disproportionate and challengeable.
The bank has 8 weeks to respond. With strong evidence (Action Fraud report, SIM swap records), many cases resolve at the bank stage. FOS escalation takes 3–6 additional months if needed.
Ready to Challenge Your Account Takeover Marker?
From £249 to start — money-back guarantee. Our team has successfully challenged account takeover markers and can help you too.
Or £249 deposit + 6 monthly payments of £75 · No credit check · ICO registered
Related CIFAS Marker Types
See how we challenge other types of CIFAS markers.