More than 220,000 fraud-risk cases were recorded to the UK National Fraud Database (NFD) in the first six months of 2026, with identity fraud accounting for 59%. The figures, revealed by fraud prevention service Cifas, mark the highest total volume of cases recorded throughout January-June.
The latest data shows that stolen personal information is a gateway to wider fraud. Identity fraud rose 9% to nearly 130,000 cases in the first half of 2026, with bank accounts and plastic cards the primary targets, accounting for 68% of all these cases. Cifas intelligence shows there are growing concerns around the criminal use of synthetic identities, AI-enabled impersonation and digitally manipulated documentation.
While most identity fraud victims are aged 61 and over, the largest uplift concerned 21-30-year-olds, where cases increased by almost a third (+32%). This highlights the threat younger consumers face, particularly through online and social media approaches.
Cases linked to money muling increased by 69% compared to the first half of 2025, with more than 13,000 recordings to the NFD. Mule activity now accounts for 30% of all cases of misuse of facility – where an account or product is misused by the genuine account holder – underlining its significant role in enabling wider crime.
The January-June 2026 figures also reveal people aged under 30 represent a majority (57%) of muling cases, with 17% aged under 21 – reinforcing the need for early intervention and education to help stop younger people becoming involved in this activity.
There was a 5% increase in facility (account) takeover reports, with nearly 40,000 cases recorded during the first half of 2026. Online retail and plastic card account takeovers also rose sharply, up by 84% and 59% respectively, highlighting the value of compromised accounts and payment facilities.
Meanwhile, unauthorised SIM swap cases saw a 402% uplift in the first six months of 2026, compared to the same timeframe in 2025. This reflects a growing trend of SIM swaps being used to intercept security codes, bypass account protections, and commit further fraud.
Mike Haley, CEO of Cifas, said “Identity fraud now accounts for nearly three in five fraud-risk cases recorded to the UK National Fraud Database, demonstrating how valuable personal information has become to criminals. Whether it is used to open accounts, take over existing facilities or support wider criminal activity, stolen personal data often provides the entry point.
“The findings also reinforce the importance of early intervention. As criminals continue to evolve their tactics and use digital channels to reach new audiences, education, awareness and prevention remain – particularly for younger people who are increasingly exposed to fraud risks.
“Greater reporting, stronger detection and cross-sector data and intelligence sharing are helping organisations build a clearer picture of the key threats. By working together and acting earlier, we can better protect consumers, support businesses and prevent fraud before it takes hold.”