TL;DR: Every UK credit reference agency (Experian, Equifax and TransUnion) must give you a free basic “statutory” credit report. It shows six years of accounts, payment history, credit searches, financial links and public records, but not a score. Request it online or by post; have six years of addresses ready. After a breach or scam, check all three for accounts and searches you don’t recognise.
What a statutory report is
According to Checkmyfile, your statutory credit report is the basic credit record each agency holds about you. It’s your legal right to see what lenders see, rooted in the Consumer Credit Act 1974 and data protection law, and the basic version "must be free for life." Agencies can charge for extras like scores and explanations, but you don’t need those to spot fraud.
What’s in it
- credit accounts, balances, limits and payment history;
- financial associations (people you share credit with);
- hard searches from credit applications;
- notices of correction;
- public records: electoral roll addresses, insolvencies, County Court Judgments.
How to request it
From Checkmyfile’s guide:
| Agency | Online | By post | Note |
|---|---|---|---|
| Experian | Request a passkey, which is posted to you, then log in (experian.co.uk/consumer/statutory-report.html) | Print the application form and send it to the support centre in Nottingham | Allow time for the passkey to arrive |
| Equifax | Register with your address history, then view online or download a PDF | Form to the customer service centre in Leicester | Asks for card details but says it won’t charge; postal reports sent within a month |
| TransUnion | Online form with your details and address history (transunionstatreport.co.uk) | Write to the team in Hull |
Have your middle names and six years of addresses, including old postcodes, ready. Missing details cause delays, and identity checks mean you might not get instant access, especially the first time.
What’s not included
The free report doesn’t give you:
- a credit score;
- explanations of how each item affected your borrowing;
- tracking tools or improvement advice.
Agencies can charge a monthly fee for those extras. You don’t need any of them to spot fraud.
Why you should check all three
Lenders don’t all report to the same agency, so the three reports can differ. A fraudulent account might show on Equifax and not Experian. Checkmyfile also notes that new information can take 4 to 6 weeks to appear, because lenders report to the agency and the agency then processes it. If you’ve just been targeted, check again a month or so later.
What to look for after fraud or a breach
- accounts you didn’t open (cards, loans, phone contracts, catalogue accounts);
- hard searches from lenders you never applied to;
- addresses you’ve never lived at;
- financial links to people you don’t know.
Found something? Contact the lender, dispute it with the agency, and report it to Report Fraud. Add context with a notice of correction, and consider Cifas Protective Registration.
How often to check
At least once a year, and straight away after a breach notice, a lost wallet or a scam call where you shared details. Free credit-score apps can supplement this, but the statutory report is the official baseline.
The early warning
Many identity fraud cases start with leaked personal data. A free email exposure check tells you whether your email is in breach data, a good prompt to check your credit file.
Frequently Asked Questions
Is a statutory credit report free in the UK?
Yes. Each credit reference agency must provide a free basic statutory report.
Does a statutory report include my credit score?
No. It shows your credit history, searches and public records, but not a score.
What do I need to request one?
Your full name including middle names and six years of address history with postcodes.
How long does a postal statutory report take?
Checkmyfile says Equifax sends a postal report within a month if your request succeeds.
Should I check all three agencies?
Yes. Lenders use different agencies, so fraud may show on one and not another.