What Is Synthetic Identity Theft?

Synthetic identity theft happens when someone combines a real identifier, usually a stolen Social Security number, with a made-up name, birth date, address, or other details to create a new identity for fraud. It is a kind of “Frankenstein identity”: part real, part invented, and designed to look like a legitimate person – literally a newly created, synthetic identity.

Synthetic identity theft is best defined as the creation of a new person on paper, rather than the impersonation of an actual person. The official Federal Reserve definition describes it in similar terms: real information, such as a legitimate Social Security number, is combined with fictional information, such as a false name, address, or date of birth.

The synthetic identity theft meaning is troublingly simple: the criminal is not fully pretending to be you, but they are using one important part of your identity to invent someone else. The fake identity can then open credit cards, take out loans, create bank accounts, or make purchases.

For a broader look at identity theft and its different forms, read our guide on what identity theft is and how it happens.

How Synthetic Identity Theft Works

Synthetic identity fraud rarely starts with a huge loan or an obvious spending spree. Before the criminal can steal much, they first have to convince banks, lenders, and credit bureaus that the invented person is real.

• First, the fraudster gets a usable Social Security number. It may come from a data breach, stolen documents, social engineering, or information sold online. The number often belongs to someone who is unlikely to notice unusual credit activity quickly.
• Next, they build a person around it. The fraudster adds a false name, birth date, address, phone number, and sometimes fake identification or social media accounts. They then begin applying for credit. Even a rejected application can help the scheme. The Federal Reserve explains that an initial credit inquiry may lead to the creation of a credit file for the synthetic person. The fraudster can keep applying until a lender eventually approves a small account.
• Then the identity is allowed to “incubate.” The fraudster may make small purchases and pay the bills on time, slowly building a believable credit history. Some use “piggybacking,” which means adding the synthetic identity as an authorized user on an account with good credit. This process can continue for months or even years.
• Finally, the fraudster busts out. Once the fake identity has stronger credit and higher limits, the criminal borrows or spends as much as possible, stops making payments, and disappears.

This long buildup is one reason synthetic identity fraud is difficult to detect. The account may look like an ordinary borrower who paid responsibly before suddenly defaulting. The person whose SSN was used may see nothing under their own name while the fake identity is growing.

The Federal Reserve’s 2019 paper on Synthetic Identity Fraud in the U.S. Payment System cited industry estimates that synthetic identity fraud cost U.S. lenders $6 billion in 2016, with an average charge-off of more than $15,000 per incident. It also cited an estimate that 85% to 95% of applicants identified as possible synthetic identities were not caught by traditional fraud models. These are historical estimates, not current totals, but they show why the fraud can become so expensive before anyone recognizes it.

Who Gets Targeted: Children, Seniors, and Military Families

The ideal SSN for a fraudster is often one that no one is actively checking. The longer the real owner goes without applying for credit or reviewing a report, the more time the synthetic identity has to grow.

Children

Children are particularly vulnerable because their Social Security numbers normally have no credit history. A parent may have no reason to check a five-year-old’s credit, which means the fraud can remain hidden until the child applies for a student loan, apartment, phone account, or first credit card.

According to the Federal Reserve’s paper, an estimated one million children were affected by identity fraud in 2017. Additionally, nearly one in fifty children becomes a victim of identity theft annually, with the U.S. Federal Trade Commission reporting a 40% increase in child identity theft cases between 2021 and 2024. Yes, these figures cover child identity fraud generally, not synthetic fraud alone, but synthetic identities are one major way a child’s SSN may be misused.

Seniors

Older adults may be targeted when they use credit less frequently or do not regularly review their reports. A fraudulent profile can sit unnoticed until an unfamiliar debt reaches collections or creates a problem involving taxes, benefits, or credit.

The Federal Reserve has identified children and older people among the consumers whose information may be especially attractive because they are less likely to access their credit records and uncover the fraud.

Servicemembers and Military Families

Not every military identity theft case is synthetic, but deployment, frequent moves, and time away from home can make suspicious activity harder to catch. The CFPB has found that military consumers report identity theft at a higher rate than the general public.

A servicemember’s or dependent’s SSN can be combined with fictional details just like anyone else’s. For military-specific warning signs and protections, read our guide on military identity theft.

How to Detect Synthetic Identity Theft

How do you detect synthetic ID theft when the fraudster may be using a completely different name, unknown to you? Instead of looking only for accounts in your exact name, pay attention to information that is connected to you but does not quite fit.

Common synthetic identity theft warning signs include:

• unfamiliar versions of your name on a credit report
• addresses, phone numbers, or employers you have never had
• hard inquiries or accounts from companies you don’t recognize
• collection notices for debts opened under another name
• IRS or Social Security notices showing income you did not earn
• difficulty accessing your credit because another profile appears connected to your SSN
• a child unexpectedly receiving credit offers, bills, or collection letters

Start by checking your reports from Experian, Equifax, and TransUnion. Look beyond the account section. Review names, addresses, employers, inquiries, collections, and other personal information. One bureau may show a problem that the other two do not. Free weekly online reports are currently available through AnnualCreditReport.com.

You should also review the earnings record in your Social Security account. Income from an employer you never worked for may mean someone used your SSN for employment. The SSA specifically advises consumers to review their earnings records and report inconsistencies.

For a child, contact all three bureaus and request a manual search using the child’s Social Security number. A child who has never used credit generally should not have a credit file.

Real Examples and Cases of Synthetic Identity Theft

A synthetic identity theft example may begin with something as small as a child’s stolen SSN. The fraudster pairs it with an adult name and invented birth date, then spends years building enough credit to qualify for larger cards and loans.

In another scenario, someone uses an older adult’s SSN with a fake address and driver’s license. Because the name is different, the real SSN holder may not discover the fraud until a collection account, inquiry, or unfamiliar address becomes connected to their credit.

Synthetic identities can also be used to create shell companies and apply for business loans or government benefits.

A Scheme That Cost Banks Nearly $2 Million

In 2022, a Georgia man was sentenced to 94 months in federal prison for taking part in a scheme that combined false names and birth dates with stolen Social Security numbers, including numbers belonging to children. The synthetic identities were used to open bank and credit card accounts, and the losses totaled approximately $1.9 million.

More Than $3 Million in COVID-19 Relief

In a separate 2020 case, federal prosecutors charged two Florida men with allegedly using about 700 synthetic identities and shell companies to obtain more than $3 million from COVID-19 relief programs. The men ultimately pleaded guilty.

What Synthetic Identity Theft Can Do to Your Credit

The person created by the fraudster may be fake, but the credit problems can land on a real consumer.

When the synthetic identity first applies for credit, a bureau may create a separate profile for it. Credit bureaus use matching systems to connect account information to a consumer’s file. Those systems compare details such as Social Security numbers, names, addresses, and dates of birth. Because a synthetic identity mixes real and invented information, the matching process can sometimes attach parts of the fake identity to the real SSN holder’s credit file. The result can be a fragmented file, a separate subfile, or a mixed credit report.

A mixed file doesn’t happen in every synthetic identity case. When it does, however, the victim may find unfamiliar names, addresses, accounts, inquiries, late payments, collections, or charge-offs on their report. In other words, debts belonging to a person who doesn’t actually exist may end up connected to your Social Security number. You may then be denied a mortgage, car loan, apartment, or other opportunity because a lender is looking at the synthetic identity’s credit history along with your own. The burden often falls on you to prove that the accounts, addresses, and debts belong to a fabricated identity, not to you.

The CFPB defines a mixed file as a credit file in which information belonging to different consumers has been combined. Synthetic identity theft creates a particularly difficult version of that problem because the second “consumer” may be nothing more than a collection of invented details built around your real SSN.

If a synthetic identity has become tangled with your credit history, learn more about how Consumer Attorneys handles mixed credit reports. If the bureaus continue reporting the information after receiving your disputes and identity theft documents, an identity theft lawyer can review whether the companies followed the Fair Credit Reporting Act and whether their failure to correct the mixed or fraudulent information violated your rights.

What to Do If Your SSN Was Used in a Synthetic Identity

Once you suspect that your SSN is supporting a synthetic identity, focus on three things: documenting the problem, preventing new accounts, and separating the fake profile from your real credit history. Here’s how to do it:

1. Check all three credit reports. Save copies and mark every unfamiliar name, address, inquiry, account, balance, and collection. Our guide explains how to report identity theft to the credit bureaus.
2. Place a fraud alert and consider a credit freeze. A fraud alert tells creditors to verify your identity before granting new credit. A freeze restricts access to your report and must be placed separately with each bureau.
3. File an FTC Identity Theft Report. IdentityTheft.gov will create a formal report and recovery plan. See our guide on how to file an FTC Identity Theft Report.
4. Request an identity theft block. Under the FCRA, a credit bureau generally must block identified identity theft information within four business days after receiving a complete request, including proof of identity, an identity theft report, identification of the fraudulent information, and your statement that the transactions were not yours.
5. Keep every response. If the bureau continues verifying accounts, debts, or personal details connected to the synthetic identity, save your disputes, delivery records, reports, and responses. A failure to investigate or block properly documented fraud may raise legal issues under the FCRA.

Parents or guardians of children under 16 can request a free credit freeze from each bureau. This is the one prevention step that matters especially in synthetic identity cases because a child’s SSN may otherwise go unchecked for years.

For broader advice on how to prevent synthetic identity theft and other misuse of your information, read how to prevent identity theft.