The $2.4 Billion Loophole in Lending Nobody Talks About

Jan de Vries · 2026-11-02

You check the ID. It's valid. You pull the credit report. It's clean. The repayment history looks solid. Everything says this borrower is legit. But here's the uncomfortable truth: the person behind that application might not exist at all. Synthetic identity fraud is quietly becoming one of the biggest headaches for digital lenders. According to a TransUnion report, US lenders were staring down an estimated $2.4 billion in exposure to this kind of fraud as of June 2026. That's not pocket change. And as fraudsters get better at building believable identities, traditional checks alone aren't enough. They still matter—don't get me wrong—but digital footprints can surface risks that documents and credit reports simply can't see. ### How synthetic identity fraud actually works Synthetic identity fraud isn't about stealing someone's identity outright. It's about mixing real and fake information to create a brand-new person. Fraudsters might take a legitimate Social Security number and pair it with an invented name, address, or date of birth. Sometimes they layer in stolen data to make the profile even more convincing. And the scary part? It happens slowly. They open small credit accounts, make payments on time, and build up a positive credit history over months or even years. Then, once the identity looks creditworthy enough for larger loans, they pull off a "bust-out"—borrowing big and vanishing without paying a dime. Generative AI is making this easier to scale, too. Fraudsters can whip up realistic documents and digital personas with far less manual effort than before. ### The numbers that should make lenders pause Equifax's May 2026 automotive lending analysis uncovered a pattern that's hard to ignore. Among SuperPrime borrowers—the ones with the best credit scores—7.9% of accounts with high synthetic identity risk hit 90+ days past due within 12 months. Compare that to just 0.3% for accounts with low risk. > "Even an excellent credit score may conceal a fabricated identity." That's the takeaway. A high score doesn't guarantee a real person. ### Why traditional checks miss the mark Traditional identity verification is still important—it helps confirm documents, personal details, and biometrics. But sophisticated synthetic identities can pass multiple checks at once. An applicant might have consistent info across databases, authentic-looking documents, and a credit history full of on-time payments. A biometric check might even confirm they match their photo. But none of that proves the underlying identity is real. The challenge gets worse when synthetic identities have years of payment history. A long record of successful payments makes an application look safer than it is. Fraudsters build that credibility on purpose before going for bigger amounts. And here's another wrinkle: traditional identity theft usually produces a victim who reports suspicious activity. Synthetic identities can operate for years without triggering any alerts. ### How alternative data fills the gap Alternative data gives lenders a different angle on an applicant's identity and activity. Digital footprint analysis looks at signals tied to email addresses, phone numbers, devices, IP addresses, and online accounts. Together, these signals can show whether a digital presence feels established, consistent, and credible. Take two applicants with similar credit scores and repayment histories. One has a long-standing email address and consistent digital activity across several established services. The other has an email account created last week and almost no digital footprint. Which one would you trust? That's the kind of context traditional checks miss. And in a world where synthetic identities are getting more convincing by the day, that context might be the difference between a good loan and a $2.4 billion problem.