“TRUST STARTS & ENDS WITH THE TRUTH”

What is Synthetic Identity Fraud? How It Works and Who It Hurts

What is Synthetic Identity Fraud? How It Works and Who It Hurts

POSTED September 17, 2026
BY Matt Aubin

Matt is both the company founder and a nationally renowned private investigator. Matt is an intelligence specialist who excels in detecting and preventing the illegal interception of communications and in providing high-tech covert surveillance. Matt has years of hands on experience in the investigation industry and has developed a reputation for incorporating state of the art technology and innovative ideas to provide effective solutions for his clients. Matt also serves as Treasurer for the Executive Board of Directors of FALI, The Florida Association of Licensed Investigators.

Synthetic identity fraud is a financial crime that combines real and fake personal information into a new identity used to open accounts and borrow money. The fake person has no owner, but the Social Security number underneath it is often real. It frequently belongs to a child, and the damage stays invisible until that child applies for credit years later.

What is synthetic identity fraud?

Synthetic identity fraud means building a person who does not exist out of real and made-up personal details, then using that person to get credit, benefits, or cash. The Federal Reserve’s industry definition covers any mix of personal data used to invent a fake person or business for financial gain, so shell companies count too.

A typical synthetic identity pairs a valid Social Security number with an invented name, birth date, and address. The pieces can come from several real people at once. One Federal Reserve Bank of Boston example mixes a man’s license number, a woman’s checking account number, and a child’s Social Security number into a single applicant.

A synthetic identity works like a counterfeit bill printed on real paper. The paper feels right, so the bill survives the first touch test. A valid Social Security number does the same job for a fake applicant, carrying it past checks that a fully invented identity would fail.

Is synthetic identity theft the same as synthetic identity fraud?

Yes. Synthetic identity theft and synthetic identity fraud are two names for the same crime. Credit bureaus such as Equifax and Experian tend to say “theft,” while the Federal Reserve and most banks say “fraud.” Both terms describe a fake identity built from real and invented details, and the protective steps are identical under either name.

The table below shows where synthetic identity fraud splits from the identity theft most readers already know.

QuestionTraditional identity theftSynthetic identity fraud
Whose identity is used?One real person, in fullA new, fake person built on pieces of real ones
Who does the lender think it's dealing with?The real victimSomeone who does not exist
How is it usually discovered?The victim spots unfamiliar charges or accountsAccounts go delinquent, often after a bust-out
Who reports it?The victimOften no one, since lenders may log it as bad debt
Who absorbs the damage?The victim, then the lenderThe lender, plus the real Social Security number owner, who can lose access to credit or benefits

Who gets hurt by synthetic identity fraud?

Lenders take the direct financial loss, and the real people whose Social Security numbers were used can end up blocked from credit or benefits, with records tangled up with a stranger’s. Many articles call synthetic identity fraud a victimless crime because the fake person cannot file a complaint.

The Government Accountability Office has documented the harm to real people. Individuals whose numbers are used in a synthetic identity may face trouble getting benefits or credit, and their records can end up connected to someone else’s.

Fraudsters favor Social Security numbers that go unchecked for years. Equifax names children, older adults, and people experiencing homelessness as the most common victims, since those groups rarely use credit or monitor a credit report.

Example (illustrative, not a client case): A 19-year-old in Orlando applies for her first apartment and gets turned down. The landlord’s screening shows years of credit cards and a defaulted auto loan under her Social Security number, all in a name she has never heard. Someone used her number while she was in grade school, and the file sat untouched until her first adult application.

What happens if someone uses my child’s Social Security number?

A child’s Social Security number should have no credit file attached to it at all. When a fraudster uses one, a file can grow for years with no one checking it. The problem usually shows up at a first job, apartment, or credit card application, when the young adult discovers debts under a name they never used.

What should you do if your Social Security number was used?

Freeze your credit, request your reports, and report the fraud at IdentityTheft.gov, in that order. The steps below work for adults and for parents acting on a child’s behalf.

  1. Place a credit freeze with Equifax, Experian, and TransUnion. A freeze is free, does not lower your score, and blocks new credit accounts while it stays in place. Parents can request a free credit freeze for a child under 16, and it lasts until the parent asks the bureaus to lift it.
  2. Pull your credit reports from all three bureaus. For a child, ask each bureau for a manual search on the child’s Social Security number, since most minors have no report to pull.
  3. Report the fraud to the Federal Trade Commission at IdentityTheft.gov, with as many details as you have.
  4. Keep every denial letter, collection notice, and statement for an account you don’t recognize. Those papers become the record that shows the accounts were never yours.

Red flags:

  • Unfamiliar names, aliases, or addresses listed on your credit report
  • Collection notices for accounts you never opened
  • A credit denial you can’t explain
  • Any credit report at all for a child under 18
  • Trouble receiving government benefits you qualify for

Clearing the record goes faster when you can show who opened the accounts and how. An identity theft investigation follows the paper trail from those accounts to the person behind them, then puts the findings in a report that bureaus, banks, and police can use.

How do I know if my identity has been cloned?

The first sign is usually something on your credit report you did not put there, such as a new name, an unfamiliar address, or an account you never opened. Denied applications and collection notices are other common clues. Pull all three reports, compare them line by line, and freeze your credit the same day if anything looks wrong.

How does synthetic identity fraud work?

A fraudster assembles a fake identity, uses it to build a credit history, then borrows as much as possible and disappears. The scheme moves slowly on purpose. A new identity with no history gets small approvals first, and the limits grow as the account looks more trustworthy.

Lenders often miss the pattern because the account behaves well for months. When the losses finally land, many institutions record them as ordinary bad debt, which is why the true size of the problem is hard to pin down.

What are the types of synthetic identity?

Credit bureaus recognize three types. The first, identity compilation, mixes real details from one or more people with invented ones and is often called Frankenstein fraud. Identity manipulation takes a real person’s record and changes a few details, such as a name spelling. The third type, fabrication, invents everything and has no real person underneath.

What is a bust-out?

A bust-out is the final stage of many synthetic identity schemes. The fraudster keeps the accounts in good standing until the credit limits climb, then maxes out every card and loan at once and vanishes. The Federal Reserve describes the pattern as buying high-value goods and services on credit and disappearing, which leaves the lender holding the loss.

How is AI changing synthetic identity fraud?

Generative AI helps fraudsters produce fake documents and faces realistic enough to get past automated identity checks. The Treasury’s Financial Crimes Enforcement Network (FinCEN) warned banks in November 2024 after seeing more suspicious activity reports that described deepfake identity documents used to get around verification.

The Federal Reserve reported in 2026 that AI can automate key steps of these schemes, from creating the identity to producing supporting paperwork such as utility bills. Lower cost and effort mean more fake applicants reach a bank’s onboarding process, and each one is harder to spot.

Our team reviews file metadata, edit history, and frame-by-frame video detail when a lender or an individual needs help verifying whether an ID photo or video was AI-generated.

Found a name you don’t recognize tied to your Social Security number?

Someone built that identity, and the trail usually starts with the accounts it opened. We trace those accounts and document what we find.

Start tracing who built the identity

Confidential, with no obligation.

How do banks and businesses detect synthetic identities?

Banks detect synthetic identities by checking whether a Social Security number, name, and birth date belong together, then watching how the account behaves over time. The Social Security Administration built a service for the first check. Its electronic Consent Based Social Security Number Verification service, known as eCBSV, launched in June 2020 and lets participating banks confirm, with the customer’s consent, whether those three details match SSA records.

Adoption has lagged. The Government Accountability Office found low participation in eCBSV and reported that financial institutions flagged $182 million in suspicious activity tied to synthetic identity fraud in 2021.

Other signals show up at onboarding and afterward:

  • ID documents or selfies with signs of AI generation, which FinCEN’s 2024 alert treats as a red flag
  • A credit file that is new or thin for the applicant’s stated age
  • Accounts that pay perfectly while limits rise, then max out all at once

Recommended: Verify Social Security number, name, and birth date together at onboarding, review ID images for signs of generation, and include FinCEN’s key term FIN-2024-DEEPFAKEFRAUD when filing a suspicious activity report tied to a suspected deepfake.

The Federal Reserve encourages institutions to look at the identity itself as closely as payment behavior, since a synthetic account can pay on time for a long stretch.

For banks and financial institutions dealing with identity fraud, we offer Synthetic Identity & Behavior Mapping as part of our AI investigation work. When the question centers on one borrower, partner, or counterparty whose history looks too thin to trust, a due diligence investigation examines the work history, court records, and business ties behind the name.

Which is the strongest red flag for synthetic identity fraud?

A Social Security number whose name and date of birth don’t match Social Security Administration records is the strongest single signal. That mismatch is the defining feature of a synthetic identity. The flag grows stronger when the applicant is an adult with a credit history that started only recently.

How can synthetic identities be detected?

Synthetic identities are detected by checking identity data against an authoritative source such as the SSA’s eCBSV service, reviewing ID images and selfies for signs of AI generation, and watching account behavior long after approval. Each check catches a different weakness, so relying on one layer leaves gaps the others would cover.

Frequently asked questions

Can synthetic identity fraud hurt my credit?

Yes. When your Social Security number is part of a synthetic identity, defaulted accounts and collections can get linked to your records. The GAO has found that people in this position may struggle to get credit or government benefits. Checking all three credit reports and placing a freeze are the first steps the FTC points people toward.

How long can synthetic identity fraud go undetected?

Often for months or years. A synthetic account can pay on time for a long stretch while its credit limits grow, so nothing looks wrong to the lender. Many cases surface only after the bust-out, when accounts go delinquent at once, or when the real owner of the Social Security number applies for credit.

Who pays for synthetic identity fraud losses?

Lenders absorb most of the direct loss. TransUnion estimated US lenders’ synthetic identity exposure at $3.3 billion across credit cards, retail cards, auto loans, and personal loans at the end of 2024. The people whose Social Security numbers were used pay differently, through denied applications and records that take time to correct.

Does a credit freeze stop synthetic identity fraud?

A credit freeze makes new accounts harder to open under your credit file, and the FTC recommends one for anyone who suspects identity theft. A freeze costs nothing and leaves your score alone. Pair it with regular report checks, since a fake identity built on your number may not match your file exactly.

Can a private investigator trace a synthetic identity?

A licensed investigator can follow the accounts, addresses, and records connected to a synthetic identity and document where they lead. Results depend on how much of the trail still exists and how quickly the work starts. The documentation also helps when you dispute accounts with credit bureaus or file a police report.

TL;DR

Synthetic identity fraud builds a fake person out of real and invented details, usually anchored to a real Social Security number, and uses that person to borrow money and disappear. The owner of that number can lose access to credit and benefits, and children are among the most frequent targets. Freeze your credit, pull all three reports, and report anything suspicious at IdentityTheft.gov. Generative AI is making the fake documents behind these identities harder to catch, and the Federal Reserve now urges banks to examine the identity itself as closely as the payment history.

If your Social Security number is tied to a name you’ve never heard of, the accounts behind it still leave a trail.

Southern Recon Agency investigates identity theft by following the paper trail from fraudulent accounts to the people behind them, and we document the findings for credit bureaus, banks, and law enforcement.

Request a confidential case review

Call (844) 307-7771. Every case is handled confidentially by a licensed Florida investigator.

About the author

Matt Aubin, CDFE, is the Founder and Managing Partner of Southern Recon Agency, a Florida-licensed private investigation agency (License A1400197) based in Orlando. He is a Certified Digital Forensics Examiner, Certified TSCM Technician, and Florida Board Certified Investigator, and a court-qualified expert witness in cyber intelligence and cyber forensics. He is a member of the U.S. Secret Service Miami Electronic Crimes Task Force and FBI InfraGard Tampa. Southern Recon Agency serves clients in Orlando, Tampa, Sarasota, and Osceola County.

Everything in this article is general information and is not legal or financial advice. For guidance on a specific situation, consult a licensed attorney or financial professional in your state.

WHAT CLIENTS SAY ABOUT US
Mark A., Tampa, FL | Attorney, 16 years

I have worked with Southern Recon on several investigations. He is an excellent investigator who always gets the job done no matter how complex or dangerous the situation. His fees are very reasonable and he usually puts in more hours than he gets paid for in order to make sure he does a professional job. I highly recommend Southern Recon Agency.

Tina G., Ontario, Canada

Matt provided me with superior service. He handled my investigation in a very professional manner and was always available for me 24/7. He helped solve my case and provided me with accurate evidence proving the suspicion of my husband’s infidelity. I highly recommend his services. Words cannot express the gratitude I have for his services!

Chris G., Tampa, Fl

I requested a background investigation on person that I was looking to conduct business with. I corresponded with the professionals at the Agency over email and the telephone. At no time, was I confused or concern about the process of this investigation. The process was thoroughly explained. Matt Aubin potentially saved me thousands of dollars by giving me an accurate understanding of who I was looking to do business with. Needless to say, I will not be conducting any business with this individual. I am extremely grateful for the work performed by Matt and the agency. It was worth every penny. The level of service provided exceeded my expectations.

Donnie C., Orlando, Fl

These folks are professional and will get results for you quickly. They are not the run of the mill grinding hours for billing people that often fill this profession. Thanks!