Skip to main content

Synthetic identity fraud: Prevention & detection tips for financial institutions

Terri Luttrell, CAMS-Audit, CFCS
October 28, 2026
0 min read

For banks and credit unions, detecting synthetic identity fraud requires a view of identity information and account behavior over time. Clear onboarding controls, ongoing monitoring, and a consistent review process can help institutions identify patterns while limiting unnecessary friction for legitimate customers. 

What is synthetic identify fraud? 

Synthetic identity fraud, or synthetic ID fraud, is a growing form of identity theft in which an individual is impersonated by using stolen information. Synthetic identity fraud is also the fastest-growing type of financial crime in the U.S. 

How does synthetic identity fraud work? 

The most common method for developing a synthetic identity scheme begins with the theft of a Social Security Number (SSN). Once the SSN is stolen, it is combined with fake information (such as a fictitious name, address, and date of birth) to create an artificial, or synthetic identity. The intent of creating the synthetic identity can vary greatly, from creating a credit profile to facilitating human trafficking. 

Two schemes associated with synthetic identities include piggybacking and bust outs: 

  • Piggybacking. Piggybacking is a method of using an individual's credit for gain. In this scheme, a fraudster will attach their synthetic ID to an unsuspecting individual's credit by becoming an authorized user on some of the victim's credit accounts. The fraudster is "piggybacking" onto a valid credit account and establishing good credit for the synthetic identity. Once the credit is established, the fraudster can use it to obtain additional credit in bust-out schemes. 
  • Bust outs. Bust outs are considered one of the more challenging forms of synthetic ID fraud to catch because they are developed slowly, over a long period of time. In this scheme, the criminals take months or even years to establish a good credit history with the synthetic identity. Once credit has been established, significant changes are made using that profile, such as obtaining credit line increases and maxing out available credit with no intention of repaying the charges. Eventually, the identity is abandoned, leaving the creditors and financial institutions on the hook for those losses. 

A well-known past scheme was reported by the U.S. Department of Justice in 2016 that involved more than 7,000 false identities and tens of thousands of credit cards, with more than $200 million in confirmed losses.

3 Other ways fraudsters use synthetic identities 

In addition to the methods above, fraudsters have found other ways to profit from synthetic identities, including: 

  • Selling: Synthetic identities have been sold to undocumented workers and criminals, giving those individuals a means to live and work in the United States and even to apply to receive benefits like federal Supplemental Security Income (SSI) and healthcare. 
  • Multiplying: Criminal enterprises purchase or create synthetic identities in bulk to facilitate multiple schemes simultaneously. This dramatically increases the losses associated with synthetic identities. 
  • Evasion: Fraudsters use synthetic identities to evade law enforcement and avoid prosecution, sometimes using multiple synthetic identities to continually move from area to area to avoid detection.

  

What is the scope and impact of synthetic identity fraud? 

Synthetic identity fraud is becoming a growing pressure point for banks as criminals use AI, stolen data, and fabricated credentials to create “real-looking” customers who can pass traditional onboarding checks. LexisNexis Risk Solutions reported that, based on more than 116 billion digital transactions analyzed in 2025, synthetic identities were involved in 11% of fraud cases globally—an eight-fold year-over-year increase—making it the fastest-growing fraud type in its report. The Federal Reserve Bank of Boston also warned that generative AI is making synthetic identities harder to detect by automating the creation of fake identities, producing realistic documents, and mimicking human behavior. 

For community banks, the impact is especially significant because these institutions often face the same sophisticated fraud tactics as larger banks but with smaller fraud, compliance, and technology teams.

Preventing synthetic identity fraud impacts the bank, credit union, or nonbank financial institution beyond minimizing losses. Other factors to consider when making the case for investing in anti-money laundering and fraud prevention solutions and programs include: 

  • Customer impact and experience 
  • Regulatory considerations 
  • Preventing costs associated with collections efforts tied to losses

How can financial institutions prevent synthetic identity fraud? 

Because synthetic identity fraud is difficult to detect, due diligence and monitoring by financial institutions are important methods of prevention. The following prevention tips and steps can help institutions protect against future losses associated with this type of fraud. 

Strengthen onboarding requirements 

Banks, credit unions, and nonbank financial institutions have made it easier for consumers to apply for credit and open accounts to stay competitive. Unfortunately, by making this process easier for legitimate customers, they may also make it easier for fraudsters to take advantage of them. 

The challenge for financial institutions is to make the process more challenging for fraudsters, but not legitimate applicants. One way to do this is to make more lucrative transactions burdensome for fraudsters by requiring additional sources of proof of identity and employment that can be independently verified. 

Assuming the financial institution has followed all BSA requirements for a Customer Identification Program (CIP) and the fraudster still established a new account with a synthetic identity, fraud detection is possible with appropriate policies and systems. 

Take a multi-layered approach to detection 

According to a Federal Reserve synthetic identity toolkit, institutions should implement a multilayered approach to combat synthetic identity schemes.  

A multilayered approach begins with detection tools that alert when multiple accounts use the same SSN. Detection tools should also alert when multiple account applications originate from the same IP address or device. 

A multilayered approach can also include law enforcement and financial institutions sharing information about threats and trends by using the 314(b) information-sharing authority. FinCEN’s Section 314(b) fact sheet, issued in June 2026, clarifies the circumstances under which financial institutions can share information under Section 314(b) of the USA PATRIOT Act.  

Use monitoring software to detect synthetic identity fraud 

Using monitoring software with properly calibrated detection tools can detect specific outliers, anomalies, spikes, and velocity scenarios in a financial institution’s data. Those outliers can be used to uncover potential trends associated with the use of synthetic identities. 

Some potential warning signs of new account fraud that could be connected to synthetic identity fraud include: 

  • When an account that has been open less than a year has spikes in the number of transactions, either during the first couple of months after opening or again during the next several months. 
  • When an account opened less than a year has large increases in the amount of individual transactions, such as ACH credit transactions, wire transfers or cleared checks, and when those amounts continue to increase over time. This could potentially indicate the account is being used for corporate account takeover fraud and should be investigated. 
  • When a new account requests multiple lines of credit or loans and quickly begins using them to their maximums. 

Protecting customers from synthetic identity fraud 

Because fraudsters can develop synthetic identities over time, effective detection involves both identity checks at onboarding and ongoing account monitoring after an account is opened. Risk-based controls and clear review procedures can help teams identify concerns while preserving a smooth experience for their customers. Regularly review these practices as fraud tactics change, and make sure staff know when and how to escalate suspicious activity. 

Editor's note: This article was originally published on August 22, 2022 and has since been updated for current best practices and accuracy.

FAQs

What is synthetic identity fraud?

Synthetic identity fraud is a type of identity theft in which criminals combine real and fake personal information to create a new, artificial identity. Fraudsters often use a stolen Social Security Number with a fabricated name, address, or date of birth to open accounts, build credit, or commit financial crimes.

Why is synthetic identity fraud difficult for financial institutions to detect?

Synthetic identity fraud is difficult to detect because the identity may appear legitimate during account opening and can develop a normal-looking credit history over time. In bust-out schemes, fraudsters may wait months or years before maximizing credit lines and abandoning the identity.

How can banks and credit unions prevent synthetic identity fraud during onboarding?

Banks and credit unions can reduce synthetic identity fraud by strengthening onboarding requirements for higher-risk or higher-value transactions. This may include requiring additional proof of identity, verifying employment or address information independently, and using controls that make fraud harder without creating unnecessary friction for legitimate applicants.

What are common warning signs of synthetic identity fraud?

Common warning signs of synthetic identity fraud include multiple accounts using the same Social Security Number, applications from the same device or IP address, sudden transaction spikes on new accounts, and rapid requests for multiple loans or credit lines. These patterns can indicate that a synthetic profile is being used to build credit or prepare for a bust-out scheme.

Why should financial institutions use a multi-layered approach to synthetic identity fraud detection?

Financial institutions should use a multi-layered approach because synthetic identity fraud can bypass single-point controls. Combining identity verification, account monitoring, anomaly detection, velocity alerts, and permitted information sharing helps institutions identify suspicious patterns earlier and reduce losses.

Stay up to the date on emerging fraud trends
See this Customer Due Diligence Checklist to help strengthen your institution's program.

keep me informed Download
About the Author

Terri Luttrell, CAMS-Audit, CFCS

Compliance and Engagement Director
Abrigo
Terri Luttrell is a seasoned AML professional and former director and AML/OFAC officer with over 20 years in the banking industry, working both in medium and large community and commercial banks ranging from $2 billion to $330 billion in asset size.

Full Bio

About Abrigo

Abrigo enables U.S. financial institutions to support their communities through technology that fights financial crime, grows loans and deposits, and optimizes risk. Abrigo's platform centralizes the institution's data, creates a digital user experience, ensures compliance, and delivers efficiency for scale and profitable growth.

Make Big Things Happen.