The Crime with No Victim — Until It’s Too Late
Most financial fraud announces itself quickly. A fraudulent charge appears on your credit card. Your bank calls about a suspicious login. You get an alert about an account you didn’t open.
Synthetic identity fraud is different. In many cases, the real person whose Social Security number was used won’t discover anything is wrong for years — and when they do, it’s often because they applied for a car loan, a student loan, or an apartment and were denied due to credit damage they never caused.
This is because synthetic identity fraud doesn’t steal your identity wholesale. It borrows one piece of it — most often your Social Security number — and fuses it with entirely fabricated information: a different name, a different birthday, a different address. The result is a fake person who never existed, built on a sliver of your real data.
That fake person then goes to work, patiently, over months or years, building a creditworthy financial history. And when the time is right, they disappear — leaving behind debt, damaged credit reports, and real victims who had no idea they were targets.
The Numbers: A Crisis Hidden in Plain Sight
The Federal Reserve has been sounding alarms about synthetic identity fraud for years, and the data in 2025 and 2026 confirms the threat is accelerating.
U.S. lenders faced over $3.3 billion in synthetic identity fraud exposure in just the first half of 2025. Annual U.S. economic losses from synthetic identity fraud are estimated between $30 billion and $35 billion, making it the fastest-growing financial crime in the country.
LexisNexis Risk Solutions reported that synthetic identity fraud soared 8 times higher in 2025 compared to the prior year. A research project by Sumsub documented a 311% increase in synthetic identity document fraud between Q1 2024 and Q1 2025. Fraud rates rose for 67% of financial institutions in 2025, with 44% ranking synthetic identity fraud as their single most-tracked threat.
Perhaps most chilling: 95% of synthetic identities go undetected by financial institutions when new customer accounts are created. The fraud is specifically engineered to look legitimate.
The average confirmed loss per synthetic fraud case is approximately $15,000 — and since the “victim” is a fictional person, there’s no one to file a police report or dispute the charges. By the time lenders realize they’ve been defrauded, the criminal is long gone.
How Synthetic Identities Are Built — and Aged
Understanding the process reveals why this crime is so difficult to detect and stop.
Phase 1: Acquiring the SSN
Criminals source real Social Security numbers through data breaches, dark web markets, and sometimes directly from corrupt insiders. Children’s SSNs are prized above all others: a child who was assigned an SSN at birth but has never applied for credit, opened a bank account, or filed a tax return has a completely blank financial history. There are no anomalies to detect because there’s no baseline to compare against.
SSNs from elderly individuals who rarely monitor their credit, from deceased persons, or from incarcerated individuals are also frequently targeted for the same reason.
Phase 2: Creating the Synthetic Person
The SSN is combined with a fictitious identity: a name the criminal invents, a date of birth that may or may not be real, and an address — often the criminal’s own or a mail drop. The result is a new “person” with a real SSN but a completely fake identity surrounding it.
Some fraudsters use “tri-merging” — simultaneously applying for credit at retailers that report to all three credit bureaus at once. The goal is to create credit files at Equifax, Experian, and TransUnion simultaneously, establishing the synthetic identity as a recognized entity within the credit system.
Phase 3: Becoming an Authorized User
One of the most effective methods for bootstrapping a synthetic identity’s credit history is to add the fake person as an authorized user on a real person’s existing credit account — often a family member’s account, or an account purchased from corrupt “credit piggybacking” services. This instantly gives the synthetic identity a credit history attached to the account’s age and payment record.
Phase 4: Building the Credit Profile
Over the next six to twenty-four months, the fraudster carefully manages the synthetic identity’s credit. They make small purchases and pay them off on time. They apply for new credit cards and pay minimums. They may even take small loans and repay them. The fake person’s credit score climbs steadily.
Criminals have been documented using CPN (Credit Privacy Number) generation software and zombie debt reassignment services to artificially age the synthetic identity’s credit profile, making it appear to have a longer financial history than it actually does.
Phase 5: The Bust-Out
When the synthetic identity has achieved sufficient credit limits — often tens of thousands of dollars across multiple lenders — the fraudster executes the “bust out.” Every available credit line is maxed out simultaneously. A new car is financed. Large cash advances are taken. Then all activity simply stops.
The fake person vanishes. Lenders are left holding worthless debt. And the real person whose SSN was used is left to discover — potentially years later — that their credit report contains accounts, inquiries, and debts they never created.
Who Is Most Vulnerable
Children
Children’s Social Security numbers are 51 times more likely to be used in synthetic identity fraud than adults’ SSNs, according to research from Carnegie Mellon University’s CyberLab. The reason is straightforward: a child’s SSN typically has no financial activity attached to it for years after issuance. There is no credit file to monitor for suspicious new entries, no bank statement to review, no existing lender to raise a red flag.
A child whose SSN is compromised at age two may not discover the damage until they apply for a student loan at 18 — by which point the fraudster has been using the identity for 16 years.
Elderly Individuals
Elderly Americans, particularly those in memory care or nursing facilities who don’t actively manage their finances, are frequent targets. Their SSNs may have decades of legitimate credit history — which fraudsters can leverage — but their monitoring of new credit activity is often limited.
Incarcerated Individuals
People serving prison sentences often have no access to financial accounts and cannot monitor their credit during incarceration, making their SSNs attractive to fraudsters who know the real person won’t notice new accounts being opened.
Deceased Individuals
“Ghost identities” — synthetic personas built on the SSNs of recently deceased individuals — are a well-documented variant. The credit bureaus often take weeks or months to flag an SSN as belonging to a deceased person, and during that window, fraudsters can move quickly.
Why Banks Can’t Catch It
Synthetic identity fraud is explicitly designed to defeat the detection systems financial institutions rely on.
A credit applicant who appears to have a two-year credit history, pays bills on time, and has a consistent address doesn’t raise red flags. The fraud mimics the behavior of a responsible, creditworthy customer — because the entire point is to achieve creditworthiness before the bust-out.
Traditional fraud detection looks for anomalies: a sudden address change, an unusual spending pattern, an application from a known fraudulent location. Synthetic identities avoid these markers by design.
The Federal Reserve Bank of Boston published findings in April 2025 warning that generative AI is dramatically expanding the synthetic identity threat, enabling criminals to generate supporting documents — pay stubs, utility bills, ID cards — that are increasingly indistinguishable from genuine documents. Experian reported in 2025 that synthetic fraud had reached record levels, with a sharp rise in applications using AI-generated identity documents.
How to Monitor Your SSN and Protect Your Family
The good news is that there are concrete steps you can take to detect synthetic identity fraud early — or prevent it entirely.
1. Freeze Your Child’s Credit — Right Now
A credit freeze prevents any new credit from being opened in a person’s name without the freeze being lifted first. The three major credit bureaus — Equifax, Experian, and TransUnion — all allow parents or guardians to freeze a minor child’s credit for free.
Since a child under 16 shouldn’t have any credit activity, a freeze costs nothing and prevents fraudsters from opening accounts using their SSN. This single step is the most powerful protection available.
2. Freeze Credit for Elderly Family Members
If you have a parent or grandparent who is unlikely to be actively applying for new credit, consider placing a freeze on their credit as well — with their permission. It prevents fraudsters from using their SSN to open new accounts.
3. Check for a Credit File That Shouldn’t Exist
Request a credit report in your child’s name from all three bureaus. If a credit file exists for a child under 18 who has never applied for credit or been added as an authorized user to an account, that is a red flag for synthetic identity fraud. Dispute it immediately.
Adults can access free credit reports weekly at annualcreditreport.com.
4. Sign Up for Credit Monitoring
Free credit monitoring services (Credit Karma, Experian’s free tier, Capital One CreditWise) will alert you when new accounts are opened, new inquiries are made, or changes occur on your credit report. For anyone concerned about synthetic identity fraud, the monitoring tier that includes dark web SSN monitoring is worth the small monthly cost.
5. Use the Social Security Administration’s My Social Security Portal
Create an account at ssa.gov/myaccount to monitor your SSN’s earnings record. If someone has been using your SSN to work, those wages may appear in your earnings history — another potential indicator of identity fraud.
6. Report Synthetic Identity Fraud Immediately
If you discover accounts you didn’t open, contact the creditor directly, dispute the accounts with all three credit bureaus, place fraud alerts on your credit files, file a report with the FTC at identitytheft.gov, and contact your local Social Security Administration office. Document everything.
Synthetic identity fraud moves slowly, but its damage is real and lasting. The best time to protect your family was the day your child was born. The second-best time is today.
