This is the most common question people have. Many people believe they can't challenge their marker because they did something wrong. But doing something wrong is not the same as committing fraud.
A CIFAS marker needs clear, relevant and rigorous evidence of fraud, and the Financial Ombudsman Service looks for evidence of deliberate dishonesty, not negligence, not mistakes, not poor judgement, not being a victim. In Misuse of Facility cases, it has said the institution needs evidence you were knowingly involved. If they can't prove that, the marker shouldn't be there, regardless of what you did or didn't do.
The distinction that matters
CIFAS Principle 4 requires reasonable grounds to believe fraud was committed, clear, relevant and rigorous evidence, and conduct that meets the criteria of the case type. The Financial Ombudsman Service adds the question of whether you were deliberately dishonest. Here's what that means in practice:
- Negligence is not fraud: being careless, failing to spot a scam, or not reading the fine print is not deliberate dishonesty.
- Naivety is not fraud: trusting the wrong person, falling for a convincing offer, or not recognising warning signs is not criminal intent.
- A T&C breach is not fraud: breaching the bank's terms and conditions (sharing your account, missing payments, using a product incorrectly) does not justify a CIFAS marker. Only deliberate dishonesty does.
- An honest mistake is not fraud: incorrect information on an application due to error, misunderstanding, or outdated data is not deliberate falsification.
- Being a victim is not committing fraud: if you were deceived, manipulated, or tricked, you are the victim, not the perpetrator.
- Financial hardship is not fraud: taking on credit with genuine intent to repay, then being unable to due to job loss, illness, or changed circumstances, is not fraud.
The burden of proof lies entirely with the institution. You do not need to prove your innocence. They must prove your knowing participation with dishonest intent, and they must have held that evidence at the time they filed the marker.
Common situations where people think they're at fault
"I allowed someone to use my account"
Whether it was a partner, family member, or someone who offered you a "job", allowing access to your account is a breach of the bank's terms, but it is not fraud on your part. The fraud was committed by the person who used your account for criminal purposes. If you didn't know the funds were criminal, you're not a knowing participant. The system argues that the marker should reflect the fraud, which was committed by the third party, not you.
"I moved money through my account for what I thought was a job"
Money mule recruitment is sophisticated. People are recruited through job ads, social media, messaging apps, and relationships. If you genuinely believed you were doing legitimate work, you were deceived, and being deceived is not the same as committing fraud. The system builds your challenge around the distinction between being tricked and being dishonest.
"I put wrong information on an application"
Incorrect information on an application is extremely common: outdated addresses, estimated incomes, forgotten debts, broker errors. The institution must evidence deliberate falsification with intent to deceive, not simply that information was inaccurate. An error, a misunderstanding, or outdated data is not fraud.
"I couldn't repay what I borrowed"
Taking on credit and then being unable to repay is financial hardship, not fraud. The institution must prove you never intended to repay at the time of application. If circumstances changed after you applied (job loss, illness, divorce, cost of living), that proves genuine intent at the time. Financial difficulty should be handled through debt recovery, not a CIFAS marker.
"I was going through a mental health crisis"
Mental health conditions (depression, anxiety, bipolar disorder, gambling addiction, compulsive spending) can impair financial decision-making. Actions taken during a mental health episode may lack the deliberate intent the Financial Ombudsman Service looks for. Under FCA Consumer Duty, the institution has heightened obligations to identify and support vulnerable customers. Filing a marker against someone in crisis is itself a failure of those obligations.
"I was pressured or forced into it"
If someone coerced you (through threats, emotional manipulation, blackmail, domestic abuse, or gang intimidation), your actions were not freely chosen. The Domestic Abuse Act 2021 recognises coercive control as a criminal offence. The Modern Slavery Act 2015 establishes that victims should not be treated as perpetrators of offences they were forced to commit. The system argues that actions taken under duress lack the free will needed for "deliberate dishonesty".
"I shared my login details with someone I trusted"
Sharing credentials with a partner, family member, or friend is extremely common. If that person then exceeded what you permitted (using the account for fraud, taking money, running up debt), the fraud was committed by them, not you. The system argues the marker should be reclassified from adverse (you as perpetrator) to protective (you as victim of takeover).
How the system handles it
During registration, the system asks specific questions about what happened. Your answers determine:
- Which legal arguments apply: the system identifies the specific grounds for your challenge based on your marker type and circumstances
- Whether vulnerability defences apply: if mental health, coercion, addiction, financial hardship, or learning difficulties are factors, the system invokes FCA Consumer Duty and additional legal protections
- Whether procedural failures occurred: in many cases, even where the user was involved, the institution failed to follow proper procedures (no contact before filing, no investigation, no consideration of vulnerability)
- What evidence would strengthen your case: recruitment messages, chat logs, medical records, police reports, proof of hardship
Many people who believe they were at fault discover that the institution didn't follow proper procedures. Even when the underlying conduct is questionable, procedural failures and GDPR violations can be enough to force removal.
You don't have to be innocent
The system doesn't require you to be blameless. It requires the institution to meet the threshold for keeping the marker: clear, relevant and rigorous evidence of fraud, held at the time of filing, and, in the Financial Ombudsman Service's approach, evidence of deliberate dishonesty.
If you were naive, careless, manipulated, pressured, struggling financially, or simply made a mistake, the marker may not be justified, even if something went wrong. The system builds your challenge around your specific circumstances and the specific failures in how the marker was filed.
