Synthetic Identity Fraud

What Is Synthetic Identity Fraud?

Traditional identity theft steals a real person's identity. Synthetic identity fraud creates a new one.

Here's the recipe:

1. Take a real Social Security number (often from a child, elderly person, or deceased individual)
2. Attach it to a fake name
3. Add a fabricated date of birth and address
4. Create supporting documents (driver's license, utility bills)
5. Congratulations — you've created a person who doesn't exist but can pass verification

This synthetic identity can then apply for credit. The first applications get rejected, but each rejection creates a credit file entry. Eventually, a thin credit file exists. Small accounts get approved. The synthetic identity pays its bills, builds credit history, and looks increasingly legitimate.

Then comes the "bust out." The synthetic identity maxes out all credit lines and disappears. There's no real person to pursue. The fraud victim is a fabrication.

Why It's Hard to Detect

Traditional identity theft has a victim who notices. Someone calls to complain about fraudulent charges. An alert triggers.

Synthetic identity fraud has no victim — at least not one who knows they're a victim. The real person whose SSN was used might be:

• A child who won't apply for credit for years
• An elderly person in a care facility
• Someone who recently died
• An immigrant with a newly issued SSN
• An incarcerated individual

By the time anyone notices, the synthetic identity has years of "clean" credit history and has already busted out.

How AI Is Making It Worse

Creating synthetic identities used to require skill. You needed to forge convincing documents, maintain consistent personas, and avoid detection over months or years.

AI collapsed that barrier.

Document Forgery at Scale

AI can generate fake identity documents that are virtually identical to genuine ones. Driver's licenses, utility bills, bank statements — all the supporting documentation needed to establish an identity.

Sumsub reported a 311% increase in synthetic identity document fraud between Q1 2024 and Q1 2025. AI-assisted document forgery, which was recorded at 0% the previous year, rose to 2% of all fake documents identified in 2025. That number is climbing fast as tools improve.

Deepfakes for Identity Verification

Many financial services now use video verification — a live video call to confirm you match your ID photo. Deepfakes defeat this.

In 2024, deepfake attacks occurred at a rate of one every five minutes. Businesses lost an average of nearly $500,000 per deepfake-related incident, with some enterprise losses reaching $680,000.

A deepfake doesn't need to fool a human. It needs to fool the automated liveness detection that most banks use. As of 2025, only 25% of financial service companies feel confident in their ability to address deepfake fraud.

Rapid Identity Generation

AI enables criminals to rapidly fabricate huge volumes of synthetic identities using both real and fake information. What used to take weeks of careful persona development can now be automated.

Each synthetic identity needs a consistent story — employment history, address history, references. AI can generate these details coherently and at scale, creating dozens or hundreds of synthetic people simultaneously.

The Numbers Are Staggering

Financial Losses

Growth Trends

• 60% increase in false identity cases in 2024 vs. 2023
• False identity cases now make up 29% of all identity fraud
• 18% increase in synthetic ID fraud linked to account opening in early 2024
• 311% increase in synthetic identity document fraud (Q1 2024 to Q1 2025)
• Auto lending saw the largest increase in synthetic ID losses in 2024

Industry Impact

Large banks reported fraud losses nearly four times the industry average in 2024-2025. 46% of financial institutions noted an increase in fraud sophistication driven by synthetic identities and account takeovers.

Only 25% of financial service companies feel confident addressing synthetic identity threats. Only 23% feel confident dealing with AI and deepfake fraud specifically.

Data Breaches Fuel the Fraud

Synthetic identity fraud requires real data — particularly Social Security numbers. Where does that data come from?

Data breaches.

In 2024, over 3,200 data breaches were reported in the United States. While the volume was slightly lower than 2023, the severity increased: average breach risk severity hit its highest point ever since TransUnion began tracking in 2020 — a 34% increase.

The Child SSN Pipeline

Children's Social Security numbers are gold for synthetic identity fraudsters. A child won't apply for credit for 15-20 years. By the time they do, they discover their SSN has a decade of credit history attached to someone else's name.

School systems, healthcare providers, and government agencies that store children's data are prime targets. A single breach can yield thousands of SSNs that won't be checked for years.

The Immigration Vulnerability

Newly issued SSNs — often to immigrants establishing credit in the U.S. for the first time — are also prime targets. There's no existing credit history to contradict the synthetic identity. The real person may not understand the U.S. credit system well enough to detect the fraud quickly.

The Anatomy of a Synthetic Identity Attack

Stage 1: Identity Creation

The fraudster combines:

• A real SSN (purchased from dark web, obtained from breach, or stolen from vulnerable population)
• A fake name (AI-generated to sound plausible)
• A fabricated address (real address with new unit number, or vacant property)
• A fake date of birth (adjusted to be more useful for credit applications)
• Supporting documents (AI-generated or forged driver's license, utility bills)

Stage 2: Credit File Establishment

The synthetic identity applies for credit and gets rejected. But the rejection creates a credit inquiry, which establishes a credit file.

The fraudster may also:

• Become an authorized user on a legitimate account (piggyback on someone else's credit history)
• Apply for secured credit cards (guaranteed approval with deposit)
• Open store credit accounts (lower approval thresholds)

Stage 3: Credit Building

Over 12-24 months, the synthetic identity:

• Makes small purchases
• Pays bills on time
• Gradually increases credit limits
• Opens additional accounts
• Builds a FICO score of 700+

The synthetic person looks like a responsible borrower.

Stage 4: Bust Out

Once maximum credit is established:

• Max out all credit cards
• Take out personal loans
• Finance a car (and sell it)
• Possibly obtain a mortgage
• Convert everything to cash or untraceable assets
• Disappear

The synthetic identity vanishes. The creditors are left holding worthless debt. There's no real person to sue or prosecute.

Who's Most at Risk?

Populations Whose SSNs Are Targeted

• Children: Their SSNs won't be used for legitimate credit for years
• Elderly: May not monitor credit actively, especially in care facilities
• Deceased individuals: SSNs often remain active for months after death
• Immigrants: New to U.S. credit system, may not understand monitoring
• Incarcerated individuals: Limited ability to monitor credit
• Homeless individuals: No stable address to receive fraud alerts

Industries Most Affected

• Auto lending: Largest increase in synthetic ID losses in 2024
• Credit cards: High volume, relatively low verification
• Personal loans: Online applications with minimal verification
• Banking: Account opening fraud enables money laundering
• Government programs: Unemployment, stimulus payments

Protecting Yourself and Your Family

For Adults

• Monitor your credit regularly: Free weekly credit reports at AnnualCreditReport.com
• Set up fraud alerts: Creditors must verify identity before opening new accounts
• Consider a credit freeze: Prevents new accounts from being opened in your name
• Review credit reports for unfamiliar accounts: Any account you don't recognize could be synthetic identity fraud using your SSN
• Sign up for SSA account: Monitor Social Security earnings for fraudulent employment

For Children

• Check if your child has a credit file: They shouldn't have one at all
• Freeze their credit: All three bureaus allow freezes for minors
• Be cautious with their SSN: Only provide when legally required
• Request their Social Security statement: Check for fraudulent employment

For Elderly Family Members

• Set up credit monitoring: Many services offer family plans
• Freeze credit if not actively needed: They can always temporarily unfreeze
• Be alert to nursing home or care facility breaches
• Monitor for new accounts: Especially if cognitive decline is present

If You Discover Fraud

1. File an identity theft report at IdentityTheft.gov
2. Contact all three credit bureaus (Equifax, Experian, TransUnion)
3. Dispute fraudulent accounts in writing
4. File a police report
5. Consider an extended fraud alert (7 years)
6. Document everything

The Bottom Line

Synthetic identity fraud creates fake people who can pass credit checks, build credit histories, and take out loans. U.S. lenders lost $3.2 billion to this scheme in 2024, with projections reaching $23 billion by 2030.

AI has accelerated every aspect of this fraud. Document forgery increased 311% in one year. Deepfakes defeat video verification at a rate of one attack every five minutes. The barrier to creating convincing fake identities has collapsed.

The victims whose SSNs are stolen often don't know for years — children, elderly individuals, and others who don't actively monitor credit. By the time they discover the fraud, the synthetic identity has a better credit score than many real people.

Protecting yourself means monitoring credit actively, freezing credit for family members who don't need it, and being extremely cautious about where you share Social Security numbers. The data that enables this fraud comes from breaches, and once your SSN is out there, it's out there forever.

The financial system was built on the assumption that people are who they say they are. AI is making that assumption increasingly dangerous.

References

1. Experian — Synthetic Fraud Reaches Record Levels
2. TransUnion — Are Your Customers Real? Synthetic Identities Driving Fraud
3. Federal Reserve Bank of Boston — Gen AI Ramping Up Synthetic Identity Fraud
4. DeepStrike — Deepfake Statistics 2025
5. World Economic Forum — How Identity Fraud Is Changing in the Age of AI
6. Bank Info Security — Credit Washing and Synthetic ID Fraud Hit All-Time High
7. Feedzai — What Is Synthetic Identity Fraud?

Related

• AI-Generated Malware: Polymorphic Threats
• AI Detection Tools: Do They Actually Work?
• Deepfakes and Synthetic Media Threats
• How Data Brokers Build Your Profile
• Data Removal Services Comparison