What Is Synthetic Identity Fraud?

Synthetic identity fraud is a sophisticated type of identity crime where a criminal creates a brand-new, fictional identity by combining real and fabricated personal information. Unlike traditional identity theft, where someone steals your entire identity, synthetic fraud mixes your real data, such as your Social Security number, with fake names, addresses, or dates of birth to create a person who does not actually exist.

This hybrid identity is then used to open credit accounts, take out loans, and build a credit history over months or years before the criminal "busts out" by maxing out all credit lines and disappearing.

The Federal Reserve estimates that synthetic identity fraud costs U.S. lenders between $6 billion and $20 billion annually. It is the fastest-growing type of financial fraud in the country, and it is uniquely difficult to detect because the synthetic identity does not match any single real person's profile.

How Criminals Build Synthetic Identities

The process typically follows these stages:

Stage 1: Harvesting Real Data

Criminals need at least one piece of real personal information to anchor the synthetic identity. The most valuable piece is a Social Security number (SSN), particularly SSNs belonging to:

Children — They have no credit history, so fraudulent activity goes undetected for years
Elderly individuals — They check their credit less frequently
Deceased persons — Their SSNs remain active in databases long after death
Immigrants — New SSNs with no credit history are easy to exploit

Where do they get this data? The sources include data breaches (which exposed over 1.1 billion records in 2024 alone), data broker websites that display partial SSNs, dark web marketplaces where stolen SSNs sell for $1 to $10 each, and public records that expose enough personal details to fill in the gaps.

Stage 2: Building the Synthetic Profile

The criminal combines a real SSN with fabricated details:

A new name that does not match the SSN holder
A rented mailbox or manufactured address
A burner phone number
A fabricated date of birth

They then apply for credit. The first application is denied, but the denial creates a credit file at the bureaus under the synthetic name. This is the critical step — the credit bureaus themselves create the record.

Stage 3: Credit Cultivation

Over 6 to 24 months, the criminal:

Applies for secured credit cards or becomes an authorized user on another synthetic account
Makes small purchases and pays them off on time
Gradually builds a legitimate-looking credit score (often 700+)
Requests credit limit increases
Opens additional accounts as the score improves

Stage 4: The Bust-Out

Once credit lines are sufficiently high, the criminal maxes out every account, takes cash advances, and vanishes. The lenders are left holding the loss, and the real SSN owner may not discover the damage for years.

How Data Brokers Enable Synthetic Identity Fraud

Data brokers play a direct role in making synthetic identity fraud possible, even though they do not intend to. Here is how:

Exposing Partial SSNs

Several people-search sites display the last four digits of Social Security numbers. Combined with the first five digits (which can be guessed based on the state and date of issuance), this gives criminals a complete SSN.

Aggregating Personal Details

Data brokers collect and display your name, address, phone number, date of birth, relatives, and associates. This provides the raw material criminals need to fill out credit applications convincingly.

Linking Real People to Real Addresses

Data broker profiles confirm which addresses are legitimately associated with a person. Criminals use this to ensure their synthetic identity does not accidentally overlap with the real SSN holder's actual address, reducing the chance of detection.

Selling Data in Bulk

Marketing data brokers sell consumer lists with detailed demographic information. A criminal purchasing these lists gets names, ages, income ranges, and geographic data that can be cross-referenced with stolen SSNs.

Warning Signs of Synthetic Identity Fraud

Because synthetic fraud does not use your complete identity, it can be harder to detect than traditional identity theft. Watch for these warning signs:

Unexpected credit inquiries — If your credit report shows hard inquiries from companies you never contacted, someone may be using your SSN to apply for credit under a different name
IRS notices for unreported income — The synthetic identity may have been used for employment, generating tax records tied to your SSN
Credit score changes you cannot explain — New accounts or payment history you do not recognize
Mail for people you do not know — If you receive mail at your address for a stranger, their synthetic identity may have used your address during the cultivation phase
Denial of credit for unusual reasons — If you are denied credit and the reason cites accounts or addresses you do not recognize
Children or dependents with credit files — Children should not have credit files. If your child does, it may indicate their SSN has been used for synthetic fraud

How to Protect Yourself

1. Freeze Your Credit at All Three Bureaus

A credit freeze prevents anyone from opening new accounts using your SSN, whether they use your real name or a synthetic one. This is the single most effective defense.

TransUnion: transunion.com/credit-freeze (see our TransUnion removal guide)
Equifax: equifax.com/personal/credit-report-services/credit-freeze
Experian: experian.com/freeze/center.html

Also freeze with the lesser-known bureaus: Innovis (innovis.com), ChexSystems (chexsystems.com), and the National Consumer Telecom & Utilities Exchange (NCTUE).

2. Remove Your Data from Broker Sites

The less personal information available about you online, the harder it is for criminals to build synthetic identities using your data. People-search sites that display your name, address, relatives, and partial SSNs are goldmines for identity criminals.

Removing your data from these sites does not make you immune, but it significantly raises the difficulty for criminals who rely on open-source intelligence gathering. See our bulk opt-out guide for a step-by-step approach.

3. Monitor Your Credit Regularly

Check your credit reports from all three bureaus at least quarterly. Look for accounts you did not open, addresses you have never lived at, and employers you have never worked for. Use annualcreditreport.com for free access.

4. Protect Your Children's SSNs

Children are prime targets because their SSNs have no credit history. You can freeze your child's credit at all three bureaus. If they do not have an existing credit file, the bureau will create one solely for the purpose of freezing it.

5. Secure Your Social Security Number

Never carry your Social Security card in your wallet
Do not provide your SSN unless absolutely required
Ask why an organization needs it and how they protect it
Shred documents containing your SSN before discarding them

6. Set Up IRS Identity Protection

Apply for an IRS Identity Protection PIN (IP PIN) at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin. This prevents anyone from filing a tax return using your SSN without the PIN.

7. Use Dark Web Monitoring

Services that monitor dark web marketplaces can alert you when your SSN, name, or other personal data appears for sale. This gives you early warning that your data has been compromised. Learn more in our dark web monitoring guide.

The Growing Scale of the Problem

Synthetic identity fraud is growing for several reasons:

Data breaches are accelerating — Over 3,000 breaches exposed 1.1 billion records in 2024. Each breach adds more SSNs and personal details to the criminal ecosystem.
Credit bureaus create files automatically — When a credit application is denied and no file exists, the bureau creates one. This means criminals can manufacture credit files at will.
Detection is poor — Traditional fraud detection looks for mismatches against a known person. Synthetic identities do not match anyone, so they pass through verification systems designed for a different type of fraud.
AI is making it easier — Criminals now use AI to generate realistic personal details, create deepfake identification documents, and automate the credit cultivation process at scale.

How GhostMyData Reduces Your Risk

While no single tool can eliminate synthetic identity fraud entirely, reducing your data exposure across data broker sites removes a critical input that criminals need. GhostMyData helps by:

Scanning 1,500+ data brokers to identify where your personal information is exposed
Submitting removal requests to prevent your name, address, SSN fragments, and other details from being harvested
Monitoring continuously so that when your data reappears (and it will), we remove it again
Alerting you to new exposures through our daily privacy digest

The less data that is publicly available about you, the harder it is for criminals to weave your real information into a synthetic identity.

Start your free privacy scan to see where your personal data is exposed and begin reducing your risk.

How to Protect Yourself from Synthetic Identity Fraud in 2026