The $2.4 Billion Fraud Hiding Behind Good Credit Scores

Jan de Vries · 2026-11-02

A loan applicant has a valid ID, a good credit score, and a clean repayment history. Everything looks legitimate. Yet the person behind the application may not exist. Synthetic identity fraud is becoming a serious challenge for digital lenders. According to TransUnion's report, US lenders faced an estimated $2.4 billion in exposure to synthetic identity fraud as of June 2026. As fraudsters develop increasingly convincing identities, credit application fraud detection requires a broader view of applicants. Traditional checks remain essential, but digital footprints can reveal risks that documents and credit reports miss. ### How synthetic identity fraud works Synthetic identity fraud involves combining real and fabricated personal information to create a new identity. Fraudsters may use a legitimate Social Security number alongside an invented name, address, or date of birth. They can also use stolen personal data to make their profiles more convincing. The process often unfolds gradually. First, fraudsters establish a seemingly legitimate identity. They may then open small credit accounts and make regular payments. Over time, these activities create a positive credit history. The identity becomes eligible for larger loans and higher credit limits. Eventually, the fraudster may execute a "bust-out," borrowing substantial amounts without intending to repay. Generative AI makes this process easier to scale. Fraudsters can create realistic documents, supporting information, and digital personas with less manual effort. The financial consequences can be substantial. In its May 2026 automotive lending analysis, Equifax identified a striking pattern among SuperPrime borrowers. - 7.9% of accounts with high synthetic identity risk reached 90+ days past due within 12 months. - Only 0.3% of accounts with low synthetic identity risk reached the same delinquency threshold. Even an excellent credit score may conceal a fabricated identity. ### Why traditional identity checks can miss synthetic fraud Traditional identity verification helps lenders confirm documents, personal details, and biometric information. These controls remain important for regulatory compliance and fraud prevention. However, sophisticated synthetic identities can satisfy several checks simultaneously. For example, an applicant might provide consistent personal information across multiple databases. Their documents may appear authentic, while their credit history shows timely repayments. A biometric check could also confirm that the applicant matches their submitted photograph. Yet this alone cannot establish whether the underlying identity is genuine. The challenge becomes greater when synthetic identities develop established credit histories. A long record of successful payments can make an application appear less risky. Fraudsters deliberately build this credibility before requesting larger amounts. Another difficulty involves the absence of immediate complaints. Traditional identity theft often produces a victim who reports suspicious activity. Synthetic identities may operate for years without triggering such alerts. These challenges explain why lenders increasingly need additional context beyond identity documents and financial records. ### How alternative data strengthens fraud detection Alternative data provides another perspective on an applicant's identity and activity. Digital footprint analysis examines signals associated with email addresses, phone numbers, devices, IP addresses, and online accounts. Together, these signals can reveal whether an applicant's digital presence appears established, consistent, and credible. Consider two applicants with similar credit scores and repayment histories. The first has a long-standing email address and consistent digital activity. Their contact information appears across several established online services. The second has a recently created email account with little to no digital history. That discrepancy can be a red flag. > "Synthetic identities don't just fool credit reports—they fool the entire financial ecosystem. The only way to catch them is to look beyond the numbers." — Jan de Vries, E-commerce Consultant Lenders can use digital footprint analysis to spot inconsistencies that traditional checks miss. For instance, an applicant's email address might be linked to multiple loan applications with different names. Or their phone number might be associated with a device that's been used in previous fraudulent activities. By incorporating alternative data into their fraud detection strategies, lenders can better identify synthetic identities before they cause significant losses. It's not about replacing traditional checks, but about adding a layer of intelligence that sees what documents and credit reports cannot. The stakes are high, but so are the tools available. With the right approach, lenders can protect themselves and their customers from the growing threat of synthetic identity fraud.