Plastic card fraud was the most common form of identity fraud recorded in the UK last year, accounting for more than a third of all cases logged in 2025, according to new research.
The study, conducted by cyber security experts at Inflection Point, analysed the latest Cifas data to identify how identity criminals most commonly use stolen personal information. Plastic card fraud topped the list with 87,818 cases, representing 36.29% of all identity fraud recorded. Despite its name, plastic card fraud does not only relate to credit cards. It can involve credit, debit, and store cards when someone’s personal or account information has been compromised. For consumers, unfamiliar card payments can be one of the clearest warning signs that something is wrong. Small transactions can be easy to overlook, making regular statement checks particularly important.
Bank account fraud was the 2nd most common type, with 63,678 cases making up 26.31% of the total. Combined, plastic card and bank account fraud make up more than 6 in 10 identity fraud cases in the data. Criminals who obtain enough personal information may try to access an existing account or use someone else’s identity to apply for financial products. Unexpected correspondence from a bank, unfamiliar transactions, or notifications about accounts a person does not recognise can all be warning signs.
Communications fraud ranked 3rd, with 27,659 cases accounting for 11.43% of the total. This can include criminals using another person’s identity in connection with mobile phone or other communications accounts. Phone numbers are now tied to everything from banking apps to email accounts and security verification, so consumers should take unexpected changes to their mobile account seriously.
Online retail followed with 17,794 cases, or 7.35% of the total. Online shopping accounts can contain considerable information that may be useful to fraudsters, including saved payment methods, addresses, names, and phone numbers. Reusing the same password across multiple websites can also increase the risk if login details are exposed elsewhere.
Insurance was the 5th most common category, accounting for 16,461 cases (6.80%), while a further 14,220 cases (5.88%) involved loans. Insurance applications can require particularly detailed personal information, including addresses, employment details, vehicle information, and other identifying data. Consumers should therefore be cautious about unexpected insurance documents, policy changes, or correspondence relating to products they do not recognise.
A further 13,022 cases (5.38%) fell into an “other” category, while asset finance accounted for 1,236 cases (0.51%). Mortgage identity fraud was the least common category in the study, with only 43 cases recorded during 2025, equivalent to 0.02% of the total.
| Rank | Sector | Cases 2025 | Percentage of all cases 2025 |
|---|---|---|---|
| 1 | Plastic card | 87,818 | 36.29% |
| 2 | Bank account | 63,678 | 26.31% |
| 3 | Communications | 27,659 | 11.43% |
| 4 | Online retail | 17,794 | 7.35% |
| 5 | Insurance | 16,461 | 6.80% |
| 6 | Loans | 14,220 | 5.88% |
| 7 | Other | 13,022 | 5.38% |
| 8 | Asset finance | 1,236 | 0.51% |
| 9 | Mortgage | 43 | 0.02% |
| Total | 242,003 | 100.00% |
Iain Godding, Founder of Inflection Point, commented on the findings: “Card and bank account fraud stand out because between them they make up such a large proportion of the identity fraud being recorded. For most people, these are also the accounts they use every day, so it is worth keeping an eye on them rather than assuming you would immediately notice if something was wrong.”
“An unfamiliar payment is an obvious warning sign, but identity fraud does not always start with somebody taking a large amount of money. Sometimes the first clue can be a small transaction, a letter about an account you never opened, a new phone contract you do not recognise, or an unexpected change to an insurance policy.”
“That is why checking your statements and accounts regularly matters. If something looks unfamiliar, even if the amount is small, it is better to investigate it than ignore it.”
“People should also remember that criminals do not necessarily need your physical bank card to commit identity fraud. Information such as your name, address, phone number, date of birth, and account details can all be useful if enough of it ends up in the wrong hands.”
“Be particularly careful with unexpected calls, texts, and emails asking you to confirm personal or financial details. A message can look convincing and still be fraudulent. Instead of using the number or link you have been sent, contact the organisation separately using details you know are genuine.”
“It is also worth checking your credit report occasionally, as this can help uncover accounts or applications made using your details that might otherwise go unnoticed. The sooner something suspicious is spotted, the more quickly you can contact the relevant provider and take steps to secure your accounts.”
Cifas data confirms that 242,003 identity fraud cases were recorded across the UK in 2025, with bank accounts and insurance seeing notable rises compared with the previous year. Overall identity fraud filings fell slightly year on year, but still accounted for more than half of all fraud risk cases reported to the National Fraud Database. Consumers are advised to monitor statements closely, avoid reusing passwords, and treat unsolicited requests for personal information with caution to reduce the risk of identity theft and related financial crime.