Synthetic identity fraud is costing US lenders billions. Learn how fraudsters create fake identities and why traditional checks miss them—plus how alternative data can help.
A loan applicant has a valid ID, a good credit score, and a clean repayment history. Everything checks out. Yet the person behind the application might not exist. That's the unsettling reality of synthetic identity fraud, and it's becoming a real headache for digital lenders.
According to a TransUnion report, US lenders faced an estimated $2.4 billion in exposure to synthetic identity fraud as of June 2026. That's not pocket change. And as fraudsters get better at creating convincing identities, credit application fraud detection needs a wider lens. Traditional checks still matter, but digital footprints can reveal risks that documents and credit reports simply miss.
### How synthetic identity fraud works
Synthetic identity fraud is like a patchwork quilt. Fraudsters combine real and fabricated personal information to create a brand-new identity. They might use a legitimate Social Security number alongside an invented name, address, or date of birth. Sometimes they sprinkle in stolen data to make the profile more believable.
The process often unfolds slowly. First, they establish a seemingly legitimate identity. Then they open small credit accounts and make regular payments. Over time, these activities build a positive credit history. The identity becomes eligible for larger loans and higher credit limits. Eventually, the fraudster may execute a "bust-out," borrowing substantial amounts without intending to repay.
Generative AI makes this easier to scale. Fraudsters can create realistic documents, supporting information, and digital personas with less manual effort.
The financial consequences can be substantial. In its May 2026 automotive lending analysis, Equifax identified a striking pattern among SuperPrime borrowers:
- 7.9% of accounts with high synthetic identity risk reached 90+ days past due within 12 months.
- Only 0.3% of accounts with low synthetic identity risk reached the same delinquency threshold.
Even an excellent credit score may conceal a fabricated identity.
### Why traditional identity checks can miss synthetic fraud
Traditional identity verification helps lenders confirm documents, personal details, and biometric information. These controls remain important for regulatory compliance and fraud prevention. However, sophisticated synthetic identities can satisfy several checks simultaneously.
For example, an applicant might provide consistent personal information across multiple databases. Their documents may appear authentic, while their credit history shows timely repayments. A biometric check could also confirm that the applicant matches their submitted photograph. Yet this alone cannot establish whether the underlying identity is genuine.
The challenge becomes greater when synthetic identities develop established credit histories. A long record of successful payments can make an application appear less risky. Fraudsters deliberately build this credibility before requesting larger amounts.
Another difficulty involves the absence of immediate complaints. Traditional identity theft often produces a victim who reports suspicious activity. Synthetic identities may operate for years without triggering such alerts.
These challenges explain why lenders increasingly need additional context beyond identity documents and financial records.
### How alternative data strengthens fraud detection
Alternative data provides another perspective on an applicant's identity and activity. Digital footprint analysis examines signals associated with email addresses, phone numbers, devices, IP addresses, and online accounts. Together, these signals can reveal whether an applicant's digital presence appears established, consistent, and credible.
Consider two applicants with similar credit scores and repayment histories. The first has a long-standing email address and consistent digital activity. Their contact information appears across several established online services. The second has a recently created email account and little digital history. Which one would you trust?
> "Synthetic identities don't just steal money; they steal trust. And trust is the currency of lending."
By incorporating alternative data, lenders can spot red flags that traditional checks miss. It's not about replacing traditional methods but adding another layer of defense. In the fight against synthetic identity fraud, every signal counts.