Back to home

Mortgage Fraud Red Flags: A Broker's Checklist for 2026

By Casefile

Mortgage Fraud Red Flags: A Broker's Checklist for 2026

The most useful mortgage fraud red flags are mismatches: income that does not fit the job, documents that do not agree with each other, and applicants who resist ordinary questions. This guide sets out the red flags UK brokers meet most often, what the FCA expects you to do about them, and how to build checks into the file so they happen every time.

TL;DR

  • Most red flags show up as inconsistencies between documents (payslips, bank statements, tax records, ID), not in any single document.
  • The FCA expects brokers to test whether income is believable and to avoid accepting applicant information at face value.
  • Red flags cluster. One oddity may have an innocent explanation, but several together justify escalation.
  • Fixed checks, a documented approval step and an audit trail protect the adviser and the firm better than instinct.
  • Concerns about fraud must be reported. Do not leave this to the lender.

Table of Contents

What counts as mortgage fraud in a broker's file

Mortgage application fraud takes place when false or altered documents, or misleading information, are given to support an application. It is not always organised crime. Cifas research from January 2024 found that 16% of 2,000 UK adults surveyed said they, or someone they know, had misled mortgage companies about their salary. It also found that 14% did not think giving lenders misleading information was illegal.

That second figure matters for brokers. Many clients who inflate income, leave out a loan or hide a rental plan do not see it as fraud. The adviser's file is often the only place where the difference is caught.

The FCA's guidance for intermediaries lists the behaviours it treats as fraud risks, including encouraging applicants to inflate income, giving false employment details, and using false documents. See the FCA page on reporting mortgage fraud for the current wording and reporting routes.

Document red flags

Documents are where most fraud is first visible. The checks below work on any file, whatever the lender.

1. Payslips that do not fit the rest of the file

This is the answer to the common question of how to spot fake payslips. No single feature proves a fake. Look for combinations:

  • Net pay on the payslip with no matching deposit on the bank statement, or a deposit that is round or different each month.
  • Tax, National Insurance and pension deductions that do not fit the gross figure or the tax code.
  • Year-to-date totals that do not progress sensibly from one month to the next.
  • Employer name, address or payroll format that changes between months.
  • Fonts, alignment or spacing that differ within one page, or file metadata showing editing software.
  • Pay that is high for the stated job title or sector.

The strongest test is the wage deposit match: does the amount on the payslip land in the account, from the named employer, on the expected date? Manual matching across three months for two applicants is slow, which is why it is often skipped.

2. Bank statements with gaps or edits

  • Missing pages, or running balances that do not reconcile after a transaction.
  • Statements supplied as screenshots or re-typed PDFs rather than downloaded originals.
  • Credits described as salary that come from a personal account or from a person rather than an employer.
  • Regular payments to loan providers, credit cards, childcare or another property that do not appear on the application. These are undeclared commitments, and they are the most common reason a lender query arrives after submission.
  • Large one-off deposits with no explanation, particularly just before the application.

3. Self-employed income and tax records

For sole traders and company directors, compare SA302s and tax year overviews with accounts and bank activity. Warning signs include figures that differ between documents, a recent sharp rise in profit with no explanation, and accountant references that are vague or hard to verify. Our guide to tax return verification for mortgage brokers covers the cross-checks in more detail.

4. Identity and address evidence

  • Utility bills or council tax letters that are old, cropped or from providers that do not serve the stated address.
  • Different spellings of a name, or different dates of birth, across documents.
  • Address history that does not agree with credit file, payslips and bank statements.
  • An applicant who cannot easily produce original ID or is reluctant to meet or be seen on a video call.

5. Signs of tampering in the file itself

PDFs that were created or modified shortly before upload, by software that is not a bank or payroll system, deserve a second look. So do scans where parts of a page are sharper than the rest, or where numbers sit slightly off the baseline. These are prompts for a question to the client, not conclusions.

Application and behavioural red flags

The FCA's guidance points brokers to check whether a client's income is believable for their employment and whether the requested mortgage fits the property's location. Beyond documents, these patterns appear most often.

SignalWhy it mattersSensible response
Income rises or changes between the first conversation and the applicationPossible inflation to meet affordabilityAsk for the source of the change and evidence from an independent document
Reluctance to disclose existing debtsUndeclared commitmentsCompare against bank statement payments and credit file
Intended use of the property changes, such as owner-occupation to lettingWrong product and misrepresentation to the lenderRecord the stated purpose and ask again at each stage
Property value or purchase price looks inconsistent with the area or recent salesPossible value inflationCheck against comparable sales and the valuation
Pressure to submit quickly, or to leave out detailsCommon in misrepresentation casesSlow down and document the conversation
Third party introducer with no due diligence on fileWeak control over the source of casesCheck the introducer before accepting work
Purchase between parties who know each other, or a seller who appears connected to the buyerNon-arm's-length transactions need extra scrutinyAsk about the relationship and record the answer

The introducer problem

The FCA's fraud guidance in FCG 4 treats treating due diligence as solely the lender's job, or relying only on the Financial Services Register to vet third parties, as signs of poor control. If cases reach you through packagers, estate agents or other introducers, keep a record of how you vetted each one and review it periodically, including for introducers who send few cases.

Why combinations matter

The National Crime Agency's indicators for the legal sector make the same point for conveyancing: its list stresses that indicators should not be treated in isolation, and that a combination of factors strengthens suspicion. The same document lists, among others, significant early repayment of a mortgage before maturity, large swings in property value and the use of false documentation. A late-arriving payslip is nothing. A late-arriving payslip, a changed income figure and a reluctant client is a pattern.

Red flags after the offer: payment diversion

Fraud can also target your client after the mortgage is agreed. Payment diversion fraud involves criminals impersonating solicitors, estate agents or buyers to redirect purchase funds. The NCA reports that Action Fraud received 143 reports of this fraud between April 2024 and March 2025, with average losses of £82,000.

Tell clients to treat these as warnings:

  • An email, text or call asking them to change bank details.
  • Urgent pressure to make a large or unusual payment.
  • Payment instructions from an address that is almost, but not exactly, the usual one.

The NCA's payment diversion fraud information sheet describes sending a small test payment to the new details before the full transfer, rather than relying on a phone call alone, because phone contact can be targeted too. Put this in your client onboarding pack.

What the FCA expects brokers to do

The FCA's consolidated examples of good and poor practice in mortgage fraud are a useful audit of your own process. In outline, the regulator wants to see:

  1. Risk-based checks. Anti-fraud resource is directed where the risk is highest, not spread evenly.
  2. No face-value acceptance. Information from the applicant is tested, not just recorded.
  3. Reporting. Failing to report relevant information is poor practice. The FCA page for intermediaries sets out what to report and how, and says you are responsible for reporting wider suspicions.
  4. Proportionate, documented policy. UK Finance's Failure to Prevent Fraud guidance sets out six principles, beginning with senior-level commitment ("tone from the top") and risk assessment. Whether the guidance applies to your firm depends on its size and structure, so check the current rules or take compliance advice.

Suspicious Activity Reports are part of this. The National Crime Agency says SARs help identify emerging typologies, and its SARs in Action bulletin covers an alert on international mortgage abuse issued in March 2026. If you think a client has committed fraud, speak to your compliance officer or MLRO before you say anything to the client, so you do not risk tipping them off.

Building the checks into the workflow

A checklist only works if it runs on every file. A process that depends on an adviser's attention at 5.30 pm on a Friday will miss things. Five controls make the difference:

  1. Request the right documents up front. The list should depend on how the client is paid: employed, self-employed, contractor, director, or a mix. Missing documents are easier to spot when the requirement is clear from the start.
  2. Collect documents in one place. Email attachments and photographs sent over messaging apps are difficult to trace and easy to alter.
  3. Cross-check automatically. Match payslip net pay to bank deposits, compare declared and visible commitments, and compare names, addresses and dates across documents.
  4. Route flags to a reviewer. A flagged file should go to a named person with the authority to ask questions, escalate or decline.
  5. Keep the audit trail. Record who reviewed what, when, and what was decided. Our article on the document approval workflow sets out five controls that an auditor can trace.

Where Casefile fits

Casefile is a cloud-based platform for UK mortgage brokers that automates document collection and review. It builds each client's document list from their payment type, cross-checks bank statements, payslips, tax forms, ID and utility bills, matches wage deposits, flags undeclared commitments and checks for tampering. It manages the approval queue and keeps an audit trail. Applicants upload to a platform carrying your branding, and data stays in the UK with no manual or offshore handling. You can read how the platform treats client files on our data security page, or see the full product at gocasefile.com.

Our view: checks should be routine, not suspicion

We build for brokers, and the pattern we see is consistent: fraud checks fail through inconsistency of process rather than lack of skill. A good adviser notices the odd payslip. The same adviser, with a full caseload, may not notice a direct debit to a loan provider on page four of a bank statement.

Our view: checks should be routine, not suspicion — overview diagram

Two things follow. First, the checks need to be the same for every client, so that asking for an explanation never feels like an accusation. When every applicant receives the same document list and the same cross-checks, a query is part of the process. Second, discrepancies should surface before the lender sees them. A mismatched wage deposit or an undeclared commitment found at the broker stage is a conversation with a client. Found at underwriting, it is a delay, a declined case or a report to the lender's fraud team, and it reflects on the broker.

Smaller brokerages feel this most, because the person who collects the documents is often the person who advises, processes and submits. Removing manual comparison from that workload leaves the adviser time to do what only a person can: judge whether the story hangs together.

— Darren

FAQ

What are the warning signs of mortgage fraud?

The main signs are inconsistent income, employment or address details, undeclared debts, documents that do not match each other, and unexplained changes to the application. Pressure to rush or to leave information out is another. Treat any one sign as a prompt for a question, and several together as a reason to escalate.

How can I spot fake payslips?

Compare them with other evidence rather than judging appearance alone. Check that net pay matches a deposit from the employer in the bank statement, that deductions fit the gross pay and tax code, and that year-to-date figures progress sensibly. Inconsistent fonts, spacing or file properties are further prompts. Where doubt remains, ask the client for further evidence, such as an employer reference or P60.

What should a broker do if they suspect fake documents on a mortgage application?

Stop processing, record what you have seen and speak to your firm's compliance officer or MLRO. The FCA says brokers are responsible for reporting wider suspicions of fraud, and its page for intermediaries explains what to report. Do not tell the client you suspect fraud before you have taken that advice.

Is exaggerating income on a mortgage application fraud?

Giving a lender false or misleading information to obtain a mortgage can amount to fraud, even if the client thinks small adjustments are normal. The Cifas survey found that 14% of respondents did not realise this was illegal. If a client asks you to adjust figures, decline and record the conversation.

Sources

This article was generated with AI, and whilst it is our expectation that the article is accurate, it should not be taken as advice.