In everyday meaning, a false identity can simply be stolen. The Federal Reserve's synthetic identity is narrower: one built by fabrication (every detail invented), manipulation (real details slightly changed) or compilation (real and fake mixed) (Fed white paper, July 2019, p. 5). Under identity fraud in what fraud is, it is the case whose customer never existed.
How do criminals exploit a crafted synthetic identity for financial gain?
Picture one synthetic identity at a card issuer over two years, with illustrative numbers and the July 2019 paper's steps.
1. Creation of a fake ID
Month one. Scammers create the identity from a nine year old's real Social Security number (SSN), an invented name and birth date, and a mail drop: a compilation, in the Fed's terms.
2. Application for loans
The first card application is declined, yet the inquiry still creates a credit file for the identity (p. 10). In month three a $500 store card is approved. To the lender, this is loan fraud.
3. Building a positive credit track record
For about 20 months every bill is paid on time, and the identity pays a stranger to add it as an authorized user on an older account. Nearly 50 percent of synthetics piggyback this way, by an ID Analytics estimate the Fed cites (p. 11). By month 22 it holds four cards and $28,000 of credit.
4. Disappearance: what is a bust out?
In month 24 every card is maxed out within days and the identity disappears. The Fed calls this busting out, "maxing out the credit line and vanishing" (p. 11).
Until then the account behaved like a normal, even upstanding, customer, and once the loss lands nothing indicates fraud (Fed toolkit, module 2).
From Ufuk Gürdaş, reviewer of this entry: "A bust out booked as a credit loss is a loan the same fake person can take again: the delinquency drops off the credit file after seven years, so we tag it as fraud before it is written off."
What is synthetic identity fraud, and what is it not?
Synthetic identity fraud is fraud through a fabricated person or entity, as defined in April 2021 by a focus group of 12 fraud experts the Federal Reserve convened (Synthetic Identity Fraud Defined). The definition confers no legal status.
The Fed sorts personally identifiable information (PII) into primary elements (name, date of birth, SSN) and supplemental ones that only support an identity (address, phone, email, digital footprint). Fraud with synthetic IDs is reported to be the fastest growing US financial crime, its synthetic identity page says, citing the FBI, Experian and GIACT.
Synthetic identity fraud vs identity theft
A traditional identity fraudster poses as a real person and must cash in before the victim notices; a synthetic builds credit over time, more like a normal customer (Fed, July 2020, p. 8), sometimes for years (Fed, October 2019, p. 10).
Misuse of a real person's details is covered under identity fraud.
Table 1. Legitimate use, traditional identity fraud and synthetic identity fraud, as the Federal Reserve compares them (2019 and 2020 white papers).
| Case | Who applies | Name used | SSN used | Pace | Who notices |
|---|---|---|---|---|---|
| Legitimate use | Person A, a real person | Person A's | Person A's | Not applicable | Not applicable |
| Traditional identity fraud | A fraudster posing as Person A | Person A's | Person A's | Fast, before the victim notices and reports it | Person A |
| Synthetic identity fraud | A fraudster as a new person | Fake | Person A's, or one that is not real | Slow, credit built over months or years | Often nobody: victims such as children are less likely to check credit |
Who loses when the person is not real?
Financial institutions bear most of the cost (July 2019, p. 14); the Fed's mitigation toolkit puts their losses at an estimated $20 billion in 2020, often miscategorized as credit losses. An older estimate, Auriemma Group's 2017 figure for 2016, was $6 billion (July 2019, p. 14).
Number owners lose time, and fraud on a child's number can lie dormant until the child turns 18 and applies for a first loan (p. 17). 42 U.S.C. 405b says synthetic identity fraud disproportionally affects vulnerable populations "such as minors and recent immigrants."
In the UK, Cifas's Fraudscape 2026, drawn from 2025 filings, says synthetic identities are becoming industrialized, with criminals building convincing long term profiles.
What gives a synthetic identity away?
The Fed's detection module lists red flags but says no single indicator typically signifies a synthetic. Within one account:
- Large unsecured debt. Less paperwork than a mortgage.
- Many recent credit inquiries. A rush to build credit.
- Age that does not fit the file. A 40 year old with a six month file.
- Inflated file depth. Borrowed lines age a new file.
- Suspicious mailing address. Drop addresses collect the cards (July 2019, p. 11).
- Recently issued contact details. A new phone for a new person.
Across accounts, the toolkit's biggest indicator is matching information: one phone, email, SSN or device under several names.
A short file alone proves little, as it can belong to an immigrant new to credit (October 2019, p. 9).
What is a synthetic identity used for?
Table 2. The four uses of synthetic identities in the Federal Reserve's definition, plus money mule activity from its toolkit.
| Use | What the identity is used for (Fed wording, shortened) | Intent to repay (as the Fed states it) | Example (illustrative) |
|---|---|---|---|
| Credit repair | Hiding from negative credit history or bad debt to appear creditworthy | Not stated | A borrower with past defaults applies as someone new |
| Fraud for living | Employment or services such as utilities, housing and bank accounts | No intent to default | A person who cannot use their own details rents an apartment |
| Payment default scheme | Goods, cash or services | No intent to repay | The bust out in the worked case above |
| Other criminal activity | Illegal acts such as money laundering, narcotics or human trafficking, terrorist financing | Not stated | Accounts that receive drug sale proceeds under no real name |
| Money mule activity | Listed among the uses in the Fed toolkit | Not stated | An account opened only to receive and pass on funds |
The toolkit adds money mule activity. It counts every use as fraud, whatever the intent. Criminals use synthetics to steal funds, escape detection or facilitate drug and human trafficking (July 2019, p. 2). Fake identities used to conduct online drug transactions are therefore other criminal activity.
Which rules make synthetic identity fraud a crime?
Federal prosecutors charge the acts a synthetic identity scheme involves, such as the four in Table 3; the wider US rules against financial crime are in the AML in the US whitepaper.
Table 3. Four US federal charges that fit the steps of a synthetic identity scheme (sections read on 20 October 2026).
| Act in the scheme | Charge and section | Maximum sentence, as the section states it |
|---|---|---|
| Representing, with intent to deceive, that a number is the SSN assigned to you or another person when it is not | False Social Security number, a felony: 42 U.S.C. 408(a)(7)(B) | A fine, up to five years, or both |
| A knowingly false statement to influence a listed lender, such as an FDIC insured bank, on a loan or credit application | False statement: 18 U.S.C. 1014 | Up to 30 years, a fine of up to $1,000,000, or both |
| A scheme to defraud a financial institution, or to obtain its money by false pretenses | Bank fraud: 18 U.S.C. 1344 | Up to 30 years, a fine of up to $1,000,000, or both |
| Knowingly using "a means of identification of another person" without lawful authority during a listed felony (false statements and bank fraud are listed) | Aggravated identity theft: 18 U.S.C. 1028A | Two years in prison, added to the sentence for that felony |
In one fake identity case, a bank received a dental loan application on 6 January 2023 for "Ariel Elston", a fictitious voter, and approved $3,099. Dmitry Shushlebin had hired an actress to hold up a photo of a fake driver's license in that name, and used hundreds of synthetic identities the same way (DOJ, 7 August 2025). He pleaded guilty to four counts, among them aggravated identity theft, and got six years and $458,839.69 in restitution (DOJ, 16 September 2026).
What is the role of AML/CFT compliance in synthetic identity fraud?
Under 31 CFR 1020.220, a US bank's customer identification program must let it "form a reasonable belief" about each customer's true identity. A synthetic supplies every required detail, so KYC and CDD checks test whether the details belong together, and the record shows an examiner how.
In the EU, the EBA's remote onboarding guidelines (EBA/GL/2022/15, applying from 2 October 2023) say institutions should, where possible, randomize the customer's verification steps to guard against risks such as synthetic identities (guideline 43).
Suspected cases go into a suspicious activity report. In FinCEN's 2021 data, about 3,000 identity related BSA reports, flagging $182 million, fell in its synthetic identity typology, and bust outs under general fraud (FinCEN, January 2024, pp. 9 and 14).
Laundering the proceeds is covered in fraud and money laundering.
Who catches it, and how do you prevent synthetic identity fraud?
With the number holder's written consent, the Social Security Administration's eCBSV service answers yes or no to whether an SSN, name and date of birth match its records, so the nine year old's number under an invented name fails. The Fed's July 2020 paper adds a layered approach with link analysis across accounts (p. 8); how fraud detection works explains layered detection.
Parents can freeze a child's credit with the credit bureaus, the Fed advises; a child seldom needs the number before the late teens.
complead, formerly Sanction Scanner, groups the accounts opened from one device in its device and behavior analysis, and each score lists the signals that contributed.
When the next bust out leaves nobody to collect from, a lender can book it as a credit loss or open a fraud case that traces every account sharing its SSN, phone and device.
Related terms
- Loan fraud. Borrowing on a false credit application.
- Account takeover fraud. Taking control of a real customer's existing account.
- Identity fraud. Misusing another real person's identifying details.
