Application fraud

Fraud at the point of application

Application fraud is fraud committed during the process of applying for credit, as opposed to fraud committed later on an existing account. It covers a spectrum of behaviour, from an applicant exaggerating their income to secure a loan they could not honestly obtain, through to organised criminals using wholly fabricated or stolen identities to extract funds with no intention of repaying. For UK lenders, it is one of the most significant fraud risks precisely because it occurs before any relationship or payment history exists to draw on.

The challenge is that the application is often the lender's first and only contact with the applicant. There is no established behaviour to compare against, so the lender must judge, from the information presented and the data it can verify, whether the applicant is who they claim to be and whether what they have stated is true.

Common forms

Application fraud takes several recognisable shapes, and distinguishing between them matters because the response differs.

• Identity theft, where a fraudster uses a real person's stolen details to apply for credit in their name
• Synthetic identity fraud, where a fictitious identity is built from a mix of real and fabricated data and nurtured over time
• First-party fraud, where a real applicant misrepresents their own circumstances, such as inflating income or concealing debts
• Facilitated or coached applications, where a third party manipulates an application on someone's behalf

Detection and verification

Defending against application fraud relies on layering several checks rather than any single test. Identity verification confirms that the applicant exists and is who they claim to be, using sources such as the electoral roll, documentary and biometric checks, and increasingly Open Banking, which can confirm that the applicant controls a bank account in the stated name. Device and behavioural signals can flag applications that show the hallmarks of automated or coordinated fraud.

Data consistency is central. Fraudulent applications often contain small contradictions: an address that does not match other records, income that is inconsistent with observed banking activity, or application details that match patterns seen in known fraud. Cross-referencing the application against bureau data, shared industry fraud databases and the applicant's own verified bank data helps surface these discrepancies before a decision is made.

Balancing fraud control with good outcomes

The difficulty for a lender is that fraud controls operate on the same journey as genuine customers. Checks that are too aggressive create friction, decline legitimate applicants and harm conversion; checks that are too light let fraud through. The aim is to apply proportionate verification, concentrating effort where risk signals are present rather than treating every applicant as a suspect.

This balance also connects to the Consumer Duty and to responsible lending more broadly. The same data that helps detect fraud, particularly verified income and spending from Open Banking, also supports a fair affordability assessment, so a well-designed application process can address fraud and affordability together. Done well, strong application-fraud control protects the lender from loss and protects genuine customers from identity abuse, while keeping the honest applicant's journey as smooth as possible.