Previous Occupier Fraud: Why Renters and HMO Tenants Are Most at Risk (2026)

Previous occupier fraud happens when someone moves out of a property and the new occupant, or anyone with access to it, uses personal details from post arriving for the former tenant to commit identity fraud. It accounts for nearly one in ten identity fraud cases in the UK. Private renters and HMO tenants face a disproportionately high risk because they move more frequently, share letterboxes with others, and often delay updating their address with their providers.

What is previous occupier fraud?

When you move home, your personal post does not automatically stop arriving at your old address. Bank statements, HMRC letters, DVLA correspondence, credit card documents, NHS appointment letters, all of it continues going to your old address until you update your details with each service provider. That window between your move and your address updates being processed is when previous occupier fraud can occur.

A fraudster, or simply a dishonest new occupant, who has access to that post can gather enough personal information from it to impersonate you. Your name, current address, date of birth, National Insurance number, account numbers and sort codes can all appear in standard correspondence from banks, government departments and utility companies. With that combination of details, a fraudster can apply for credit cards, loans or phone contracts in your name, redirect your existing accounts, or sell your identity to criminal networks.

You may not discover the fraud for weeks or months. By the time it surfaces on a credit check or through a debt collection letter, the damage is already done and unpicking it takes significant time and effort.

How big is the problem in 2026?

Identity fraud is growing at pace. Cifas recorded a 6% increase in total fraud cases in 2025 on top of record figures in 2024. Criminals are increasingly using AI to build convincing false identities at scale and speed. The personal details that arrive in ordinary post, such as a bank statement, an HMRC letter or a utility bill, remain the raw material for this kind of fraud.

What makes previous occupier fraud particularly damaging is that victims often have no idea it has happened until it affects them directly: a declined mortgage application, a credit card they never applied for, or a letter from a debt collector for a loan they never took out.

Why HMO and private renters face the highest risk

Previous occupier fraud is a risk for anyone who moves home. But private renters, and HMO tenants in particular, face a significantly elevated version of it for reasons specific to how shared housing works.

Frequent moves

Royal Mail research found that people in the UK move on average every 18 months. For HMO tenants, that figure is often lower. Students move annually at the end of the academic year. Young professionals in major cities move every 12 to 18 months as jobs, relationships and finances change. Each move creates a fresh window of exposure. An HMO tenant who has lived in three different properties over four years has had three separate periods during which their post may have been arriving at an address they no longer occupied.

Shared communal letterboxes

In a house-share or HMO, post typically arrives in a shared communal area such as a hallway shelf, a communal table or a letter rack by the front door. This post is accessible to every person in the property. In an HMO with four or five rooms, that means multiple individuals, some of whom a former tenant may never have met, have physical access to their correspondence.

High turnover creates confusion

HMOs have high tenant turnover by nature. When a room is vacated and re-let, the new occupant arrives at a property that may still have post accumulating for two or three previous tenants. In busy HMOs near universities or city centres, a single address can see a dozen different tenants come and go over a few years, each potentially leaving a trail of misdirected post behind them.

Delayed address updates

Research shows that 23% of home movers take at least two weeks to update their address with key organisations. One in five people forget to tell their bank. For renters moving under time pressure, end of tenancy, a last-minute property change, that delay is even more common. Two weeks of bank statements and HMRC letters arriving at a shared HMO address is two weeks of fraud exposure.

How previous occupier fraud actually happens

The fraud typically begins with access. A new tenant arrives at a property and finds post for one or more previous occupants already waiting. It might be a bank statement, a letter from HMRC, a credit card statement, or correspondence from the DVLA. In most cases, the new tenant returns the post or ignores it. But in a fraction of cases, someone either deliberately opens it or notes the information visible through an envelope window.

That information, including a name, address and partial account number, is then combined with other data, often obtained from data breaches, social media, or purchased on criminal forums, to build a more complete identity profile. With a full profile, a fraudster can apply for credit in the victim's name, typically targeting products with quick online approval processes where identity checks are less thorough.

It is worth being specific about what information appears in ordinary post and what a fraudster can do with it:

• Bank statements: Full name, sort code, account number, recent transactions. Enough to attempt account takeover or to answer security questions for phone-based banking.
• HMRC letters: Full name, address, National Insurance number, and tax reference. The NI number is particularly valuable and is used as an identifier across government and financial services.
• DVLA correspondence: Name, address, date of birth, and driving licence number. Sufficient to apply for credit using a driving licence as ID verification.
• Credit card statements: Name, address, partial card number, and spending patterns. Enough to attempt social engineering attacks on card providers.
• Utility bills: Name, address, and account number. Commonly used to verify identity alongside other documents.
• NHS letters: Name, address, date of birth, and NHS number. Can be used as supporting ID in applications that accept healthcare correspondence.

The real consequences of being a victim

Previous occupier fraud is not a minor inconvenience. The consequences of identity fraud ripple through a victim's financial life for months or years after the initial fraud occurs. Understanding what is at stake makes clear why prevention is so much more valuable than recovery.

Direct financial loss

The most immediate consequence is money taken in your name. A fraudster who successfully opens a credit card or personal loan in your name runs up debt that initially appears on your credit file as your own. While banks have processes for investigating and writing off fraudulent debt, the resolution is not instant and not guaranteed. The Home Office estimates total fraud losses against individuals in England and Wales at £9.2 billion for 2023 to 2024, with identity fraud the single largest contributor. Not all of that is recovered. In cases of identity fraud specifically, a meaningful portion of losses falls on victims who cannot prove they did not make the application.

Credit file damage that blocks major life decisions

This is where previous occupier fraud causes the most lasting harm. When a fraudster makes a credit application in your name, the lender carries out a hard search on your credit file. That search remains visible to every other lender for 12 months and causes your credit score to drop, even if the application is eventually rejected or flagged as fraudulent.

If a fraudulent account is opened in your name and goes into arrears or default before you discover it, the damage is far more severe. A default can remain on your credit file for six years. During that period:

• Mortgage applications are likely to be declined or offered at significantly higher rates
• Rental applications can be rejected by letting agents who run credit checks
• Car finance applications may fail
• Opening new bank accounts may be difficult
• Mobile phone contracts may require large deposits or be declined entirely

For an HMO tenant hoping to eventually rent their own flat or apply for a mortgage, a fraudulent default caused by a previous occupier incident can derail those plans for years. The fraud happened because someone found your post. The consequences follow you long after you have moved on.

Hundreds of hours of your time

Resolving identity fraud is time-consuming, stressful, and often requires chasing multiple organisations simultaneously. The typical resolution process involves: reporting to Action Fraud and obtaining a crime reference number; contacting each affected lender individually; disputing entries with Experian, Equifax and TransUnion separately; potentially involving a solicitor if fraudulent accounts are significant; and registering with Cifas for Protective Registration to prevent further fraud.

Research from the United States, where fraud resolution data is better documented, finds that identity fraud victims spend an average of 200 hours resolving their case. UK victims face a broadly similar process. Two hundred hours is five full working weeks. That is time taken away from work, family and everything else.

Emotional and psychological impact

Beyond the financial and administrative consequences, being the victim of fraud carries a significant emotional toll. Cifas and UK Finance both note that fraud victims frequently report feelings of violation, anxiety about their financial security, and lasting distrust of financial institutions. In more serious cases where large sums are involved or where resolution takes years, the psychological impact can be substantial.

Risk of escalation

Identity fraud does not always stop at one fraudulent credit application. A fraudster who has successfully built a profile using your details may sell that profile to criminal networks, meaning your information circulates among multiple fraud operations. Victims have found themselves dealing with fraudulent accounts appearing across different lenders over a period of months or years, each new discovery reopening the resolution process.

The cost of fraud vs the cost of prevention

The comparison between the cost of being a fraud victim and the cost of protecting yourself is one of the starkest in personal finance. Very few other risks in everyday life have such a large gap between the cost of the problem and the cost of avoiding it.

The point is not that a change of address service makes you immune to all fraud. It is that the specific fraud type this blog is about, previous occupier fraud driven by post arriving at a previous address, is almost entirely within your control to prevent. The post stops arriving at your old address when you update your address with the organisations sending it. That is the entire mechanism of the fraud, and updating your address removes it.

The cost of not doing so is vastly disproportionate to the cost of doing it. A few minutes and a small amount of money spent on moving day can prevent years of credit file damage, hundreds of hours of resolution time, and potentially thousands of pounds of fraudulent debt.

How to protect yourself when you move

How Moveinout closes the fraud window

The fraud window is the period between moving day and the last organisation updating their records with your new address. Every day that window is open, your personal post is arriving at an address you no longer control.

For most people who update their address manually, calling their bank, writing to HMRC, logging into each provider's website separately, that window stretches to weeks or months. Research shows 23% of home movers take at least two weeks to start notifying companies, and many never complete the full list.

Moveinout closes that window on moving day. It is an online change of address service covering over 9,000 UK organisations across 24 categories, from banks and government departments to your GP, dentist, optician, vet, school and private pension provider. You enter your details once, select who needs to know, and Moveinout dispatches notifications to every provider on your behalf. A dashboard shows which organisations have been notified so you can keep track and make sure nothing has been missed.

For HMO tenants who move frequently, using Moveinout on every move means the fraud window is consistently minimised, not just on one move, but on every move throughout the years spent in shared housing. When you consider the potential cost of a single fraud incident against the time it takes to use Moveinout, the case for doing it on every move is straightforward.

What to do with post arriving for a previous occupier

If you move into a property and find post arriving for the previous tenant, handle it carefully.

What to do

• Write "Not at this address, return to sender" clearly on the unopened envelope
• Put it back in the post. Royal Mail will return it to the sender.
• If it keeps happening, report persistent misdirected post to Royal Mail so they can note the address
• Return financial and government correspondence promptly rather than leaving it in a communal area

What not to do

• Do not open post addressed to someone else. This is illegal under the Postal Services Act 2000.
• Do not attempt to contact the previous occupant's bank or other providers on their behalf
• Do not dispose of post without shredding it. Personal details on envelopes and inside letters can be retrieved from recycling.
• Do not leave post from a previous occupant accumulating in a communal area where multiple people have access