Fraud & Identity Glossary
What Is Synthetic Identity Fraud?
Synthetic identity fraud is the creation of a fictitious identity by combining real and fabricated personal information — often a real but stolen identifier (like a Social Security number) stitched together with an invented name, date of birth, phone, and email. Because the resulting "person" isn't a copy of any single real individual, there's usually no victim to report it, so the fake identity can pass checks and operate undetected before committing fraud.
On this page
How synthetic identities are built
A synthetic identity is assembled, not stolen wholesale. A fraudster takes a real, often dormant identifier — frequently a Social Security number belonging to someone unlikely to be monitoring credit, such as a child or a deceased person — and pairs it with fabricated details: an invented name, date of birth, address, a freshly created email, and a phone number.
The fabricated profile is then "aged" to look real. The fraudster applies for accounts, gets initially declined, becomes an authorized user, slowly builds a credit file, and waits. Once the synthetic identity looks like an established customer, it can max out credit lines and disappear — the "bust-out" — with no real person on the other end to dispute the charges.
Synthetic fraud vs. traditional identity theft
| Traditional identity theft | Synthetic identity fraud | |
|---|---|---|
| Who is impersonated | One real person, copied | A fictitious person, assembled |
| Is there a victim who notices? | Yes — they see and dispute activity | Often none, so it goes unreported |
| How it's usually caught | Victim reports / chargebacks | Signal correlation at onboarding |
| Typical timeline | Fast use of stolen credentials | Months–years of "aging" then bust-out |
Why single-signal checks miss it
Synthetic identities are engineered to survive checks that look at one thing at a time. The email is deliverable. The phone is a real, valid number. The name matches the application. Verified in isolation, every element passes — which is exactly the point.
The fraud only becomes visible when you stop asking "is each piece valid?" and start asking "do these pieces belong to the same real person, created over a believable timeline?" A brand-new email attached to a phone number whose history belongs to someone else, several "different" applicants behind one device, or an identity whose signals were all created in the same narrow window — those mismatches are the fingerprints of a fabricated profile.
How to detect synthetic identity fraud
The reliable approach is correlation, not enrichment. Adding more data about an applicant doesn't help if each field is plausible on its own; what catches synthetics is cross-referencing the signals against each other. SwitchID does this with its Identity Consistency Engine, which combines:
- •Cross-signal correlation — does the phone's age and porting history fit a person who supposedly just created this email?
- •Name-variant matching — do the name on the phone, email, and payment method actually agree?
- •Temporal consistency — were the email, phone, and device all created in the same suspiciously narrow window?
- •Velocity & network analysis — is one device or network behind many "different" identities?
The result is a single risk score and a decision (approve / challenge / deny) per signup, so you can block fabricated identities up front while approving real users instantly. For a developer-level walkthrough with an example API call, see how a synthetic identity detection API works, and for the wider vendor landscape, the ID verification market guide.
Catch synthetic identities at signup
Screen every signup with multi-signal correlation — approve real users instantly and flag fabricated identities before they ever open an account. Start on the free Developer tier.
Start free with SwitchIDFrequently asked questions
What is synthetic identity fraud in simple terms?
Synthetic identity fraud is when a criminal builds a fake person out of a mix of real and made-up information — for example a real but stolen Social Security number combined with a fabricated name, date of birth, address, phone, and email. Because the identity isn't a copy of one real person, there's often no individual victim to notice and report it, so the fake identity can pass checks and operate for months or years before it commits fraud.
How is synthetic identity fraud different from identity theft?
Traditional identity theft impersonates a single real person — the fraudster uses your actual name, SSN, and details, and you eventually see the unauthorized activity and dispute it. Synthetic identity fraud assembles a new, fictitious person from fragments. There's no single real victim watching the account, which is exactly why it's harder to detect and why it has become the fastest-growing form of identity fraud.
Why do standard verification checks miss synthetic identities?
Because each individual data point is chosen to look legitimate. The email is deliverable, the phone is a valid number, the name matches the application — so a single-signal check passes every element in isolation. The fraud only becomes visible when you correlate the signals: an email created last week paired with a phone whose history belongs to a different person, or one device sitting behind many "different" applicants.
How do you detect synthetic identity fraud?
The reliable approach is multi-signal correlation rather than enrichment. Instead of asking "is this phone valid?" you ask whether the phone, email, device, and payment details fit together and are consistent with a single real person created over a believable timeline. SwitchID's Identity Consistency Engine does this — cross-signal correlation, name-variant matching, temporal consistency, and velocity — to flag fabricated profiles that pass each check on their own.
What industries are most affected by synthetic identity fraud?
Account-opening flows where a new identity unlocks credit or value are the biggest targets — fintech and neobanks, lending, telecom, and buy-now-pay-later. Marketplaces, rentals, and high-value SaaS see it too, usually as fake accounts created to abuse promotions, evade bans, or commit downstream fraud.