The $2.4 Billion Fraud Hiding Behind Perfect Credit

Jan de Vries · 2026-11-02

A loan applicant has a valid ID, a good credit score, and a clean repayment history. Everything looks legitimate. Yet the person behind the application may not exist. Synthetic identity fraud is becoming a serious challenge for digital lenders. According to TransUnion's report, US lenders faced an estimated $2.4 billion in exposure to synthetic identity fraud as of June 2026. As fraudsters develop increasingly convincing identities, credit application fraud detection requires a broader view of applicants. Traditional checks remain essential, but digital footprints can reveal risks that documents and credit reports miss. ### How synthetic identity fraud works Synthetic identity fraud involves combining real and fabricated personal information to create a new identity. Fraudsters may use a legitimate Social Security number alongside an invented name, address, or date of birth. They can also use stolen personal data to make their profiles more convincing. The process often unfolds gradually. First, fraudsters establish a seemingly legitimate identity. They may then open small credit accounts and make regular payments. Over time, these activities create a positive credit history. The identity becomes eligible for larger loans and higher credit limits. Eventually, the fraudster may execute a "bust-out," borrowing substantial amounts without intending to repay. Generative AI makes this process easier to scale. Fraudsters can create realistic documents, supporting information, and digital personas with less manual effort. The financial consequences can be substantial. In its May 2026 automotive lending analysis, Equifax identified a striking pattern among SuperPrime borrowers. - 7.9% of accounts with high synthetic identity risk reached 90+ days past due within 12 months. - Only 0.3% of accounts with low synthetic identity risk reached the same delinquency threshold. Even an excellent credit score may conceal a fabricated identity. ### Why traditional identity checks can miss synthetic fraud Traditional identity verification helps lenders confirm documents, personal details, and biometric information. These controls remain important for regulatory compliance and fraud prevention. However, sophisticated synthetic identities can satisfy several checks simultaneously. For example, an applicant might provide consistent personal information across multiple databases. Their documents may appear authentic, while their credit history shows timely repayments. A biometric check could also confirm that the applicant matches their submitted photograph. Yet this alone cannot establish whether the underlying identity is genuine. The challenge becomes greater when synthetic identities develop established credit histories. A long record of successful payments can make an application appear less risky. Fraudsters deliberately build this credibility before requesting larger amounts. Another difficulty involves the absence of immediate complaints. Traditional identity theft often produces a victim who reports suspicious activity. Synthetic identities may operate for years without triggering such alerts. These challenges explain why lenders increasingly need additional context beyond identity documents and financial records. ### How alternative data strengthens fraud detection Alternative data provides another perspective on an applicant's identity and activity. Digital footprint analysis examines signals associated with email addresses, phone numbers, devices, IP addresses, and online accounts. Together, these signals can reveal whether an applicant's digital presence appears established, consistent, and credible. Consider two applicants with similar credit scores and repayment histories. The first has a long-standing email address and consistent digital activity. Their contact information appears across several established online services. The second has a recently created email account with little history. The first applicant is more likely to be genuine, while the second raises red flags. > "Synthetic identities don't just fool one check—they fool many. That's why lenders need to look at the whole picture, not just the credit report." By incorporating alternative data, lenders can detect inconsistencies that traditional methods miss. For instance, an applicant's digital footprint might show a sudden burst of activity after years of dormancy—a sign of a fabricated identity. Or the email address might be linked to multiple loan applications, indicating a fraud ring. As fraudsters get smarter, lenders must adapt. Combining traditional checks with digital footprint analysis creates a more robust defense against synthetic identity fraud. It's not about replacing existing methods but adding another layer of scrutiny. The stakes are high. With billions of dollars on the line, lenders can't afford to ignore the warning signs. By embracing alternative data, they can protect their bottom line and ensure that loans go to legitimate borrowers.