What to do if…
your credit file is suddenly frozen or locked and you did not request it
Short answer
Treat this as possible identity fraud or account takeover until you can confirm otherwise. Pull your statutory credit reports from all three UK credit reference agencies and contact the agency (and the lender/agent) to find out exactly what restriction was applied and why.
Do not do these things
- Don’t click “unlock/fix” links in unexpected emails/texts or from pop-ups in apps you didn’t install.
- Don’t keep reapplying for credit to “test it” — that can create extra searches and confusion.
- Don’t pay a third party who claims they can “remove” fraud markers or fix your credit file quickly.
- Don’t email ID documents to a number/address you got from an unsolicited call, text, or search ad.
What to do now
-
Pause and confirm where the “locked/frozen” message is coming from.
If a lender/landlord/agent told you: ask which credit reference agency they checked (Experian, Equifax, or TransUnion) and whether they can do manual/alternative ID checks while you sort the file. Ask them to pause the application rather than re-run it repeatedly. -
Get your statutory credit report from all three UK credit reference agencies.
Do this even if only one organisation mentioned a lock — different lenders check different agencies. As you read each report, look for:- accounts you don’t recognise
- recent hard searches you didn’t authorise
- new addresses, name variations, or linked/financial associates you don’t recognise
- any fraud warnings/markers
-
Check for “simple mismatch” triggers that can look like a lock.
On each report, verify your name spelling, date of birth, address history, and electoral register information shown. If your current address or address dates are wrong, fix the underlying record (for example, by updating the account/provider that supplied it, or your local council for electoral registration). -
Contact the credit reference agency that shows the restriction and ask what type it is.
Say: “My credit file appears restricted/locked and I did not request this. Please confirm what the restriction is, when it was applied, and the safest way to regain access or remove it.”
If they say an online account set it, treat it like an account takeover and follow their official recovery process. -
If you suspect an account takeover, secure your “reset points” first.
- Change your email password (and turn on two-factor authentication).
- Then change passwords for banking and any credit/finance apps.
- Check email rules/forwarding (attackers sometimes hide confirmations).
-
If your report shows a fraud marker/flag you didn’t expect, get the facts before trying to “remove” anything.
- If it appears linked to a fraud-prevention database entry, make a data subject access request to see what is held about you.
- Contact the organisation that filed the marker (usually shown on your report) and ask for their fraud team process to challenge anything incorrect.
-
If you see any sign of identity fraud, report it through the right UK route and keep the reference.
- England, Wales, Northern Ireland: Report Fraud (online/phone).
- Scotland: report to Police Scotland (non-emergency route).
Keep the reference number — you may need it when disputing entries with credit agencies and lenders.
-
Contact any lender/company shown on your reports that you don’t recognise.
Ask their fraud team to stop processing, close any account opened, and confirm what they need from you. Keep a simple log: date/time, who you spoke to, and what was agreed. -
Optional: add “extra friction” only if you’re at heightened risk.
If you’re worried your details are being repeatedly used, Protective Registration can prompt extra ID checks at many member organisations. It’s optional, costs money, typically lasts a fixed period, and can make genuine applications slower — consider it only after you’ve checked your reports and understand what’s happening.
What can wait
- You do not need to buy credit monitoring today to deal with a sudden lock.
- You do not need to “fix your score” immediately; stopping misuse and correcting records comes first.
- You do not need to decide right now whether to take out new credit elsewhere; first stabilise the file and confirm what caused the restriction.
Important reassurance
A “locked” credit file often comes from automated fraud-prevention checks, identity mismatches, or an account-security setting — it doesn’t automatically mean you’ve done anything wrong. Slowing down and verifying across all three agencies is the fastest way to regain control.
Scope note
These are first steps to stabilise the situation and prevent immediate harm. Clearing incorrect entries and restoring normal credit checks can take follow-up with the specific credit reference agency and any lender/provider involved.
Important note
This guide is general information for urgent first steps, not legal or financial advice. Processes vary by company and by your circumstances. If you can only do two things right now, do these: get all three statutory reports, and contact the agency that shows the restriction to confirm exactly what it is and how it was triggered.
Additional Resources
- https://www.reportfraud.police.uk/
- https://www.gov.uk/government/news/report-fraud-new-service-from-city-of-london-police
- https://www.ico.org.uk/for-the-public/credit/
- https://www.cifas.org.uk/pr
- https://www.cifas.org.uk/dsar
- https://www.experian.co.uk/consumer/statutory-report.html
- https://www.equifax.co.uk/Products/credit/statutory-report
- https://www.transunion.co.uk/consumer/get-your-credit-report