Cifas

Cifas was established in 1988 by the Consumer Credit Trade Association (CCTA) under the acronym CIFAS: Credit Industry Fraud Avoidance System, although the company no longer operates under this acronym as the scope of its services has broadened. It was developed in association with the Office of Fair Trading, as well as the Information Commissioner's Office, who continue to this day to take an active interest in the development of Cifas.

Cifas is today run by a board of directors, that includes both independent directors who are not directly involved in the day-to-day running of the organisation, and the Chief Executive and Chief Operating Officer, who are. From 1988 to 2016 the majority of the directors were elected by participating organisations. They now participate in the governance of the organisation through an "Advisory Board".

Cifas' National Fraud Database allows participating organisations to exchange details of applications for products or services which are considered to be fraudulent, inconsistent or suspicious ( see https://www.cifas.org.uk/fpn ); exchange information about accounts and services which are being misused; and information about insurance and other claims that are considered to be fraudulent, inconsistent or suspicious.[4]

Organisations can also exchange information about innocent victims of fraud to protect them from further fraud.

The Internal Fraud Database allows participating organisations to exchange details of cases where an applicant or member of staff is considered to have acted fraudulently.[5]

Under the Data Protection Act, an individual has the right to make a Subject Access Request to Cifas, who will, in accordance with the Act and its exemptions, disclose data held on the individual where the law permits it. Cifas is not a Credit Reference Agency but is the Data Controller for Cifas data and responsible for its accuracy.

All warnings used to be examined by specialist fraud staff in participating organisations but automated systems may now be used to refuse a product or service without any investigation of a warning. Cifas says: "The ability to make automated decisions allows members to immediately decline facilities to subjects who are deemed an immediate fraud risk. This is another massive step forward in utilising the data from Cifas, freeing up resource from reviewing referrals that have already been deemed a high fraud risk." (https://www.cifas.org.uk/insight/fraud-risk-focus-blog/how-updated-principles-using-cifas-national-fraud-database-help-its-members)

Consumers who are disadvantaged by this change in practice, may complain to the Information Commissioner and seek financial compensation from both Cifas and the responsible organisations who supplied and used the information. Consumers may also complain to one of the Ombudsman Services who cover the organisations represented within Cifas. This includes the Financial Ombudsman Service, the Communications Ombudsman, the Public Services Ombudsman and the Local Government & Social Care Ombudsman. To complain to the Cifas Chief Executive by email go to this webpage https://ceoemail.com/s.php?id=ceo-977325&c=Cifas-Chief%20Executive

In 2014, the Immigration Act became law. Cifas was named as the sole provider of Home Office Immigration Data and launched the Cifas Immigration Portal (CIP) in December 2014.[6] All current account-providing banks and building societies in the UK are required to use the CIP to access the Home Office data on disqualified persons.[7] The data was implicated in the "Windrush Scandal". Complaints about this should be sent to The Home Office: Complaints Allocation Hub, UK Visas and Immigration, 20 Wellesley Road, 7th Floor, Lunar House, Croydon, CR9 2BY https://www.gov.uk/government/publications/current-account-closed-or-refused-based-on-immigration-status

Victims of identity fraud or people who are at risk of identity fraud can apply for Cifas Protective Registration for a £25 fee.[8] Protective Registration acts as a warning the organisation should (but they are not forced to) carry out additional checks to verify the identity of the applicant or customer. They may just refuse the product or service instead as they consider the fraud risk to be too high.

Cifas used to operate a Protecting the Vulnerable scheme that helped local authorities protect individuals subject to the Mental Capacity Act 2005 in their care. This was merged into another service in 2020.

"Not-for-profit" Cifas declared losses of £749,000 in 2017, a further loss of £578,000 in 2018 and a loss of £1,328,000 in 2019. Costs grew by 70% from £5.6 million to £9.6 million between 2016 and 2019. 2020's accounts are not yet available. Cifas is funded largely from levies on financial services suppliers and other participating organisations funded by customers, and public sector organisations that are funded by taxpayers.

The financial benefits of Cifas, reported by its participating organisations, have reduced from a high of £268 per £1 of subscription income, to £234 in 2018 and to £208 in 2019. Cifas had substantial Reserves built up over 20 years, but these have reduced to £6.7 million in the 2019 accounts. Of this £6.7 million, £3.9 million is said to be the minimum figure needed to operate a not-for-profit organisation of this size. With further losses expected during the coronavirus 2020/21 pandemic, Cifas will be heading towards insolvency in 2022/23 if nothing changes. The independent Board has a responsibility to run the organisation prudently and the new Chair will have to demonstrate that they are not asleep on the job and understand that not-for-profit also means not-for-loss. The alternative will be the largest members that contribute the most money, the big banks, either having to take back control to avoid the embarassment of insolvency or credit reference agencies being appointed to run the service for them. Whatever the future, the banks could be expected to appoint new leadership, halve the workforce to balance spending with income and protect the service on which they rely.

The 2019 accounts show that Cifas paid its current Chief Executive £246,093. The lowest paid staff are in outsourcers used by Cifas for telephone and clerical work who receive the national minimum wage. The Chief Executive receives 15 times more than these lowest paid workers.

Cifas employs staff in a variety of different functions that include information technology, data analysis, compliance, best practice, consumer relations, project management, sales and marketing, product development, training, administration, external relations and public relations, human resources and finance. There were numerous redundancies in 2017, 2018 and 2019, as well as recruitment to new positions.

Cifas works with fraud prevention, financial, public sector, academic and charitable organisations and law enforcement to raise awareness of fraud and promote best practice in fraud prevention. Collaborative partners include the City of London Police, CIPFA, the Home Office, Age UK, Fraud Advisory Panel and UK Finance.

MCGA

• Credit card fraud
• Identity fraud

• Official website
• Fraud Advisory Panel charity, corporate member organisations