Got a credit ban after identity theft? How to borrow for your business without undoing it

Yes, you can still borrow for your business with a credit ban on your file. The catch is simple: while the ban is active, no lender can read your credit report, including the one you want to deal with. So the order matters. Enquire first, since that needs no credit check. Lift the ban only at the point a lender is ready to run its check. Then put the ban back if you still feel exposed.

Lots of business owners have put a ban in place over the past few years. Maybe a data breach email arrived, a driver licence went missing, or a strange enquiry turned up on a credit report. Then a few months later the business needs a vehicle, a fit-out or some breathing room, and the ban is suddenly in the way. Here’s how to handle it calmly.

What does a credit ban actually do?

A credit ban (sometimes called a credit freeze) asks the credit reporting bodies not to share your credit report with lenders. According to the OAIC’s guide to fraud and your credit report, you can request one if you’ve been, or are likely to be, a victim of fraud, including identity theft.

The key facts:

Question	Answer
How long does it last?	21 days from when you first ask
What does it cost?	Nothing to place or extend
Can it be extended?	Yes, with no limit on the number of extensions
Will I get a reminder?	Yes, at least 5 business days before it ends
What does a lender see?	A message that a ban is in place, and no report

That last row is the point of a ban. If a fraudster applies for credit in your name, the lender is alerted rather than handed your file, and the application usually stalls there. The same thing happens when you apply.

Why would a business loan need my personal credit file?

Many business owners expect a business loan to look only at the business. In practice, lenders usually check the personal credit file of the sole trader, the partners or the company directors, because those are the people standing behind the loan and often signing guarantees. We explain this in more detail in does a business loan affect my personal credit file?

So a ban on your personal file still matters even when the borrower is your company or trust.

Which credit reporting bodies hold my file now?

This changed in 2026. CreditSmart explains that from 1 April 2026, illion and Experian operate as a single Experian credit reporting body. For consumer credit reports, there are now two:

• Equifax
• Experian (now including what used to be held by illion)

If you placed a ban with all three bodies before April, CreditSmart notes that a ban on the old, separate Experian report doesn’t need any action, because lenders no longer use that version. Bans held with the other bodies carry on. If you’re not sure where you stand, get a free copy of your report from each body first; our page on how to check your credit report for free walks you through it.

Do I have to lift the ban just to ask about a loan?

No, and this is where the order really helps.

Asking what’s possible shouldn’t touch your credit file at all. With us, the first step is a short enquiry with no credit check, so your ban can stay exactly where it is while a real person looks at your situation. (Here’s what “no credit check to apply” actually means.)

The ban only becomes relevant once you’ve seen an option you like, you’ve decided to go ahead, and the lender is ready to run its credit check. Lifting earlier just leaves you unprotected for longer than you need to be.

If you’re carrying a ban and wondering what your business could borrow, you can ask without a credit check here. Your ban stays put.

How do I lift a ban for a business loan, step by step?

Here’s a calm plan that keeps the unprotected window as short as possible.

1. Enquire first, with the ban still on. Tell us on the form that you have a ban in place and roughly why (for example, “data breach notification in 2025, no fraud found”). That’s useful context, not a red flag.
2. Wait until you’ve chosen to go ahead. Your broker or lender will tell you when they’re ready to run the credit check.
3. Ask which credit reporting body they use. Some lenders use one body, some use both. There’s no point lifting a ban you don’t need to.
4. Lift the ban with that body. Equifax and Experian both have online forms for placing, extending or removing a ban, and they’ll ask you to confirm your identity, usually with details from your photo ID. Use the address on the official website, never a link from a text or email.
5. Let the lender know it’s done. Then the credit check can go through.
6. Place a new ban afterwards if you still want one. Once the check has been run and you have an answer, there’s nothing stopping you from asking for a fresh 21-day ban.

That’s it. Done this way, your file is open to lenders for days, not weeks.

Should I just extend the ban instead?

Extending suits the period when you aren’t borrowing. The OAIC says a credit reporting body must extend the ban if it believes you’ve been, or are likely to be, a victim of fraud, and it may ask for information to support that. A police report number or a ReportCyber reference often helps.

Extend if:

• you’ve had confirmed misuse of your identity, or a recent breach included your licence, passport or Medicare details;
• you don’t plan to borrow in the next few weeks.

Lift (temporarily) if:

• you’ve chosen a lender and they’re ready to check;
• the fraud risk has settled and you’re comfortable.

You can do both over time: extend now, lift briefly when you borrow, then ban again.

What’s the new ban notification service?

The Privacy (Credit Reporting) Code 2024 brought in a free ban notification service. Credit reporting bodies must offer it. If you sign up, the body tells you when a lender tries to access your file while your ban is active.

For a business owner, this is a quiet early warning. If you get a notification about an application you never made, you know someone is trying to use your identity. Act on it straight away by extending the ban, calling the lender named and reporting it.

A ban doesn’t protect your ABN: what else should I lock down?

A credit ban covers your personal credit file. It does nothing for your business’s tax identity. If you think your ABN, TFN or ATO online access has been misused, the ATO’s identity theft help page asks you to call its Client Identity Support Centre on 1800 467 033 (8 am to 6 pm AEST, Monday to Friday).

A short checklist after a breach or theft:

• Credit file: place or extend a ban, and sign up for ban notifications.
• ATO: call 1800 467 033 if tax details or your ABN may be involved. The ATO also has data breach guidance for businesses.
• myID: if you suspect someone has accessed it, the ATO points you to the myID support line on 1300 287 539 (option 2). Once you’re back in, check who’s authorised in RAM; our myID and RAM guide shows you where.
• Support: IDCARE (1800 595 160) gives free, confidential help to identity theft victims.
• Your report: get fresh copies and dispute anything you don’t recognise. Our guide to fixing credit report errors for free covers the steps.

And while you’re on alert, be extra careful of anyone offering “pre-approved” finance by text or asking for your ID out of the blue. Breaches often lead to targeted scams. Our page on business loan scams lists the red flags.

Illustrative example: the ban that stayed on until it was needed

Illustrative only; no real person or business described.

A Melbourne online clothing seller receives a breach notice from a telco saying her licence number was exposed. She places a credit ban, asks Equifax to pass it on, and extends it a few weeks later. Six months on, she wants to fund a larger stock order before the Christmas rush.

She enquires with the ban still active and mentions it on the form. A real person calls, talks through her turnover and the stock purchase, and outlines an option she’s comfortable with. When the lender is ready, she’s told which credit reporting body it uses. She lifts the ban there that afternoon using her licence details, the check goes through, and once she has her answer she places a new ban. Her file was open for a few days at most.

What if I find fraud on my file while I’m applying?

Tell your broker or lender straight away, and keep it simple: “There’s an enquiry from a lender I’ve never heard of. I’ve reported it and I’m disputing it.” Lenders see this more often than you’d think. What causes problems is a surprise, not a fraud listing that’s been explained and is being handled.

Start the correction with the business that made the listing, keep your reference numbers, and send copies when they’re asked for.

Your ban can stay on while you ask what’s possible

You did the right thing protecting your file. Asking about finance shouldn’t mean dropping that guard, and with us it doesn’t. Our enquiry takes about 60 seconds and involves no credit check when you first enquire, so your ban doesn’t need to move. Your details also aren’t sent to a pile of lenders. There’s no spray and pray, which matters a lot when you’ve just been through a breach and your phone is the last thing you want ringing.

A real person reads your enquiry, calls you, and explains your options in plain English, including when (and with which credit reporting body) you’d need to lift the ban, if you go ahead. Please fill the form in accurately, including that a ban is in place and anything else on your file. That way, the first option we suggest is one that fits.

See if you qualify, with your ban still in place →