Synthetic Identity Theft: How Scammers Create Fake Identities
Synthetic identity theft occurs when fraudsters combine real and fabricated personal information to create a completely new, false identity. Unlike traditional identity theft that targets existing individuals, synthetic identity attacks create entirely fictional people—often using a real Social Security number paired with a fabricated name, address, and employment history. The scammer then uses this synthetic identity to open credit accounts, secure loans, and make purchases before disappearing, leaving creditors unable to locate them. According to the Federal Reserve and Consumer Financial Protection Bureau, synthetic identity fraud costs the financial services industry approximately $6 billion annually, with individual losses averaging $15,000 and schemes lasting anywhere from 3 to 24 months before detection. This crime is particularly difficult to combat because the victim—if a real SSN is used—may not realize their number has been compromised until credit damage occurs, and traditional fraud detection systems struggle to identify fabricated identities that have no prior credit history to contradict them.
Common Tactics
- • Purchasing real Social Security numbers on the dark web or obtaining them through data breaches, then pairing them with completely invented names and biographical details.
- • Gradually building credit history by opening multiple small accounts (retail cards, secured credit cards) over 6-12 months, making all payments on time to establish credibility.
- • Using mail forwarding services, virtual phone numbers, and VPN services to create false address histories and receive account statements without triggering fraud alerts.
- • Manipulating credit bureau databases by filing disputes and using techniques like 'piggybacking' or adding themselves as authorized users on legitimate accounts to inflate credit scores.
- • Taking out increasingly large loans and opening premium credit accounts once the synthetic identity achieves a credit score of 700+, then defaulting and abandoning the identity.
- • Creating fake employment verification documents, utility bills, and bank statements using publicly available templates and information to convince lenders of legitimacy.
How to Identify
- Unusual credit inquiries appear on your credit report for names you don't recognize, or inquiries appear at addresses where you've never lived.
- You receive bills, collection notices, or credit offers addressed to slight variations of your name at your address (example: 'John Michael Smith' when you're 'Jon M. Smith').
- Your Social Security number appears in credit reports associated with multiple different names, dates of birth, or addresses.
- Collection agencies contact you about debts you never incurred, claiming the account was opened in your name at addresses unfamiliar to you.
- You're denied credit despite having good payment history, or see accounts on your report showing high balances that weren't opened by you.
- Your credit score suddenly drops without recent applications by you, or you receive notices of charge-offs and collections for accounts you never activated.
How to Protect Yourself
- Order your credit reports from all three bureaus (Equifax, Experian, TransUnion) at annualcreditreport.com quarterly and review them for unfamiliar accounts, inquiries, and personal details.
- Place a fraud alert (free, 1-year protection) or freeze your credit (free, indefinite protection) with all three credit bureaus immediately—contact one bureau and they're required to notify the others.
- Create a unique, complex password for each online account and enable multi-factor authentication on banking, email, and financial accounts to prevent account takeovers.
- Consider using an identity theft protection service that monitors your SSN, credit accounts, and the dark web for your personal information being sold or used fraudulently.
- Minimize exposure of your SSN by asking financial institutions, employers, and healthcare providers if they can use alternative identifiers and limiting its use on applications.
- Monitor financial accounts and credit card statements weekly for unauthorized activity, and set up account alerts with your bank for any transactions over a specified amount.
Real-World Examples
A 34-year-old marketing manager discovers through a credit bureau error that her SSN has been associated with three different names and credit histories totaling $87,000 in debt. The synthetic identities opened accounts at her address using mail forwarding services, and the scammers made regular minimum payments for 18 months before defaulting on large personal loans. By the time she discovered the fraud, one identity had obtained a $50,000 auto loan and another had secured a $35,000 personal loan, all defaulted.
A 19-year-old college student with no credit history applies for student loans and is shocked to learn her SSN already has a credit score of 735 tied to a name similar to hers ('Tanya Richardson' vs. 'Tara Richardson'). Investigators discover the synthetic identity opened 12 retail accounts over 14 months at various addresses across three states, establishing legitimate payment history before the scheme collapsed when the scammer attempted to open a mortgage.
A 52-year-old retiree receives a collection notice for a $22,000 defaulted credit card account opened in his name, but the charge-off address is in Florida where he's never lived. The scammer had purchased his SSN, created a synthetic identity with a similar name, and spent 10 months building credit through 8 different accounts before opening the high-limit card and maxing it within 60 days.