Synthetic identity fraud is costing US lenders billions. Learn how fraudsters build fake identities with perfect credit—and why digital footprints are key to stopping them.
A loan applicant walks in with a valid ID, a solid credit score, and a spotless repayment history. Everything checks out. But here's the unsettling part: the person behind that application might not actually exist.
Synthetic identity fraud is quickly becoming one of the toughest challenges for digital lenders. According to a TransUnion report, US lenders were staring at an estimated $2.4 billion in exposure to synthetic identity fraud as of June 2026. That's not pocket change.
As fraudsters get better at building convincing identities, credit application fraud detection needs a wider lens. Traditional checks still matter—they're not going anywhere—but digital footprints can expose risks that documents and credit reports simply can't see.
### How synthetic identity fraud actually works
Synthetic identity fraud is like Frankenstein's monster, but for personal data. Fraudsters mix real and fabricated information to create a brand-new identity.
They might pair a legitimate Social Security number with an invented name, address, or date of birth. Or they'll sprinkle in stolen data to make their profiles look more believable.
The scary part? It unfolds slowly, almost patiently.
First, they establish what looks like a normal identity. Then they open small credit accounts and make payments on time. Over months or even years, they build a positive credit history. Suddenly, that identity qualifies for larger loans and higher credit limits.
Eventually, they pull off a "bust-out"—borrowing substantial amounts with zero intention of repaying.
And generative AI is making this whole process easier to scale. Fraudsters can now create realistic documents, supporting information, and digital personas with far less manual effort.
The financial fallout can be brutal. In its May 2026 automotive lending analysis, Equifax found a striking pattern among SuperPrime borrowers:
- 7.9% of accounts with high synthetic identity risk reached 90+ days past due within 12 months.
- Only 0.3% of accounts with low synthetic identity risk hit that same delinquency threshold.
Even an excellent credit score can hide a fabricated identity.
### Why traditional checks miss the red flags
Traditional identity verification is still important—it helps lenders confirm documents, personal details, and biometrics. These controls are essential for regulatory compliance and basic fraud prevention.
But sophisticated synthetic identities can satisfy multiple checks at once. An applicant might have consistent personal information across databases, authentic-looking documents, and a credit history full of timely payments. A biometric check could even confirm the applicant matches their photo. Yet none of that proves the underlying identity is real.
The challenge gets worse when synthetic identities have years of established credit history. A long record of successful payments makes an application look low-risk. Fraudsters deliberately build that credibility before asking for larger amounts.
Another issue? There's no victim to complain. Traditional identity theft often produces a real person who reports suspicious activity. Synthetic identities can operate for years without triggering any alerts.
That's why lenders increasingly need additional context beyond identity documents and financial records.
### How alternative data strengthens fraud detection
Alternative data offers a different angle on an applicant's identity and activity. Digital footprint analysis looks at signals tied to email addresses, phone numbers, devices, IP addresses, and online accounts.
Together, these signals can show whether an applicant's digital presence feels established, consistent, and credible.
Think about two applicants with similar credit scores and repayment histories. The first has a long-standing email address and consistent digital activity. Their contact info appears across several established online services. The second has an email account created last month and almost no digital trail.
Which one would you trust with a large loan?
Digital footprints won't replace traditional checks, but they add a layer of context that's hard to fake. And in the fight against synthetic identity fraud, that extra context could be the difference between catching a fraudster and handing them a check.