Receiving an unexpected DBS certificate
This guidance explains what to do if you receive a DBS certificate that you did not apply for.
A DBS certificate should only be issued after a valid application has been submitted with the individual’s knowledge and consent.
If you receive a DBS certificate unexpectedly, you should act promptly. DBS certificates contain sensitive personal information, and an unexpected certificate may indicate an error, incorrect address details, or possible misuse of personal information.
Check who the certificate is addressed to
Check the name and address on the envelope. If the certificate is addressed to you, consider whether you have recently applied for a role, licence, permit or other activity which may have required a DBS check.
What to do straight away
If you believe the certificate has been sent to you by mistake contact DBS as soon as possible.
If the envelope has not been opened and is not addressed to you, do not open it. Contact DBS and provide the information visible on the envelope.
If you have opened the envelope, do not copy, photograph, share or record any of the certificate contents. Contact DBS and explain what has happened.
How to contact DBS
Report the issue to DBS as soon as possible, either online or through the DBS contact centre. You will need to:
- explain that you have received a DBS certificate unexpectedly
- provide the name and address visible on the envelope
- tell DBS whether the envelope has been opened
DBS may ask you to provide further information, such as a photograph of the envelope, so that the issue can be investigated.
If the certificate is in your name
A DBS check cannot take place without personal details being submitted. If the certificate is in your name and you do not recognise the application, this could indicate:
- an administrative mistake
- an application submitted in error
- possible misuse of your personal information
Protecting your personal information
In most cases, there will be a genuine explanation. However, if the certificate is in your name and you did not apply for it, you may wish to take steps to protect your personal information. You should:
- monitor your bank accounts, credit reports and official post
- report suspected fraud to Action Fraud if you live in England, Wales or Northern Ireland — if you live in Scotland, report it to Police Scotland by calling 101
- consider using identity protection or credit monitoring services
- keep a record of any official or financial post that you receive unexpectedly
What happens next
DBS will investigate an unexpected certificate received at your address and explain what it can about why you received it. If the certificate is not in your name, data protection legislation means DBS may not be able to provide you with updates about the case.
If you are unsure what to do, contact DBS before taking any further action. DBS will advise you on the next steps and help make sure the certificate and any personal information are handled appropriately.