In 2025, the National Fraud Database recorded an unprecedented 444,000 fraud cases. This staggering figure represents the highest annual total ever reported by Cifas, highlighting the enormity of the challenge faced by the industry. The UK’s Fraud Strategy 2026–29 acknowledges the scale of this problem, focusing primarily on the most visible threats such as unauthorised payments, fake IDs, and anomalous transactions. However, a significant portion of fraud, often overlooked, occurs much earlier in the process: at the point of application.
Application fraud is frequently missed, not due to weak controls, but because applications are assessed individually. This siloed view can make even coordinated criminal activity appear legitimate. This was clearly demonstrated in the Bounce Back Loan scheme during the pandemic, where multiple or fabricated applications were submitted by the same actors. These slipped through lender-specific checks contributing to a whopping £11bn in fraudulent losses.
The State of Application Fraud Today
Application fraud encompasses a broad spectrum. At one end, you have first-party fraud that involves genuine individuals providing false information deliberately to secure credit. At the other end, there’s sophisticated third-party fraud that includes identity theft, impersonation, and synthetic identities. In both cases, false, manipulated, or stolen information is submitted for products like loans, motor finance, mortgages, and credit cards.
According to Experian UK’s Fraud and FinCrime 2025 Report, one-third of organisations experienced first-party (33%) or identity theft (34%) fraud, emphasising the prevalence of application-stage deception. Furthermore, Experian’s Fraud Index Q4 2025 revealed a significant shift towards first-party behaviour, accounting for 29% of all cases in the quarter.
Why Application Fraud Often Appears Legitimate
Fraudulent applications are increasingly mirroring genuine customer behaviour. Criminals employ a range of techniques, including stolen or synthetic identities, data manipulation, and manufactured personas, to bypass automated checks. Often, fraudulent applications only contain minor inconsistencies, just enough to avoid scrutiny but not enough to trigger hard failures.
The advent of AI has further complicated this issue. Criminals can now use AI to generate highly convincing applications at scale, complete with realistic identity documents, digital signatures, and behavioural patterns. Furthermore, AI can generate hundreds of near-identical applications, each with slight variations that mimic natural customer behaviour.
Closing the Gap Between Policy Ambition and Front-line Decisions
The need for greater collaboration and intelligence sharing is widely recognised. However, for it to be effective, it must begin at the earliest point in the customer journey. Tactics continue to evolve, and criminals continue to improve their methods. A proactive, intelligence-led approach at the application stage is essential. Only by sharing insights can the industry expose patterns that no single organisation can see alone.
Conclusion
Application fraud remains the industry’s most persistent blind spot. Not because it is invisible, but because it is rarely viewed in the right context. Only by sharing intelligence can patterns be revealed. To protect customers, reputations, and financial stability, the industry must move from isolated reviews to collective insight. The fraud is already hiding in plain sight. The question is whether we are looking together.
Dave Rossi, Managing Director at National Hunter
