How to know if you are flagged as a bad payer: CRIF, Experian, CTC, Centrale Rischi and public data

In short: a “bank blacklist” does not exist: being a “bad payer” means having a late payment or a default recorded in a private credit information system (CRIF, Experian, CTC) or in the Bank of Italy's Centrale dei Rischi. That data is confidential, and you request it for free yourself, file by file. Protests, adverse records and proceedings in your name, on the other hand, are public: you can see them right away.

What does it mean to be “flagged as a bad payer”?

“Bad payer” (cattivo pagatore) is not an official status: it indicates a person with a late payment or a default recorded in a private credit information system (SIC) or in the Bank of Italy's Centrale dei Rischi. These are different files, with different rules, and none of them is a single blacklist.

There are three Italian SICs: CRIF (EURISC), Experian and CTC (Consorzio per la Tutela del Credito). On the contracts entered into with the banks and finance companies that participate in each system, they record positive information (instalments paid) and negative information (delays, defaults), in accordance with the Code of Conduct approved by the Data Protection Authority (Garante privacy) with provision no. 163 of 12 September 2019. CTC, for example, declares that it does not collect protests or bills. The Centrale dei Rischi, by contrast, is the Bank of Italy's file on debts to banks and finance companies: see Centrale dei Rischi: how to consult your data.

Does the “bank blacklist” really exist?

No. There is no single file in which a bank enters those who do not pay and which the others consult: there are three independent SICs, the Centrale dei Rischi and the public registers. You may appear in one and not in the others, so the check must be done file by file, and no service can tell you “you are in CRIF” on your behalf: that data is obtained only by the data subject, for free. Veryfy does not access the SICs or the Centrale dei Rischi and does not see late instalments or loans: it shows only the public data, the same that anyone checking you sees.

How do you see whether you are in CRIF, Experian or CTC, for free?

With a request for access to your own data, sent to each provider: for individuals it is free in all three SICs, it is submitted with a signed form and an identity document, and the reply arrives in writing within one month. These are the official pages' statements as of October 2026.

• CRIF (crif.it, consumer area): the access request is free for individuals (as CRIF itself states in the online form). Signed online form plus identity documents; reply within 30 days of receiving the complete documentation, by post or email. It does not include protests. CRIF states that it has not authorised anyone to request payment for extracts: beware of anyone selling you a “CRIF extract”.
• Experian (experian.it, consumer area): free access for the persons registered. Form to print, sign and send with a photocopy of an identity document and tax code, by certified email (PEC) to consumatori.experian@legalmail.it, by email to stc.italy@experian.com, or by post to Rome.
• CTC (ctconline.it): “to date, access to the CTC database is free of charge”. Online request (consumatore.ctconline.it/sic) or PEC to ctc@pec.ctcmail.it with a signed request, identity document and tax code. Reply within 30 days; if in-depth searches are needed, within 90 days, with a notice within the first 30.

An incorrect or expired record is corrected or deleted by the provider or by the bank that reported it: see CRIF deletion: timing and how it works.

How long do the records stay in the SICs?

The 2019 Code of Conduct (Annex 2) sets the timescales: a delay later regularised stays on file for 12 months if it involved up to two instalments or months, and 24 months if it involved more; an unregularised default stays on file for up to 36 months from the contractual deadline, and in any case no longer than 60. Requests under review remain for at most 180 days, and positive data on closed relationships for up to 60 months.

How do you request your data from the Centrale dei Rischi?

Free of charge, from the Bank of Italy: since 13 April 2026 the only online channel is the online services portal, with SPID, CIE or CNS (or with a copy of an identity document); alternatively, a downloadable form from the website, delivered or sent to a branch, with a document. The reply normally arrives within 30 days. Natural persons to whom the data is recorded may request it, and for companies the legal representative.

What right do you have to see this data?

The right of access under art. 15 of Regulation (EU) 2016/679 (GDPR): you can obtain from the controller confirmation that processing of your data is taking place and a copy of the data. The Data Protection Authority (Garante privacy) reminds that the reply must be given within one month, even in case of refusal, and that exercising rights is, in principle, free of charge. This is the basis on which the SICs and the Bank of Italy reply to you.

Which data about you is public and visible to anyone?

Three items: the protests in the Registro informatico dei protesti of the Chambers of Commerce, the adverse records (formalità pregiudizievoli) at the Conservatoria (judicial mortgages, attachments on properties in your name) and the insolvency proceedings in your name. Your consent is not required: a bank, a supplier or a landlord consults them directly, and this is the part of your position that you can see right away.

• Protests: protested bills of exchange, promissory notes and cheques; they remain for five years from the date of registration, unless cancelled on application, and anyone can see them. For a cheque paid late, rehabilitation is required (art. 17 of Law 108/1996). Details in how to know if you have protests in your name and how to cancel them.
• Adverse records: they exist only if you own properties. For your own properties, the Agenzia delle Entrate offers the free online service “Extracts, floor plans and mortgage inspections of your own properties”; see protest and adverse-record extract on a person.
• Insolvency proceedings: they appear in the Companies Register; the difference between the three items is explained in protests, adverse records and proceedings: what they are.

File by file: what it contains, who sees it, how you check it

What does Veryfy show about you to the person checking you?

In the individual funnel you choose the purpose “Check myself” (Verifica su me stesso) and declare that the tax code is yours. Verifica Persona (€29) shows the protests from the Registro informatico dei protesti, the presence of adverse records (and, if available, how many) and the insolvency proceedings in your name, with source and date; Verifica Persona Estesa (€49) adds offices in other companies, shareholdings and properties registered at the Catasto. It is the same report that a third party obtains about you. It contains no data from the SICs or the Centrale dei Rischi and does not anticipate a bank's decision. The hub what they see about you before applying for credit sets out the two routes side by side.

In what order should you run the checks before applying for credit?

1. Request your data from CRIF, Experian and CTC: three separate free requests.
2. Request your data from the Centrale dei Rischi through the Bank of Italy portal.
3. Immediately check the public data in your name with Verifica Persona, purpose “Check myself” (Verifica su me stesso).
4. If you find an incorrect or expired record, request correction or deletion from the file that holds it.