Synthetic Identity Fraud

Synthetic identity fraud is the creation of a new, fictitious identity by combining real personal data — often a genuine government ID number harvested from a breach — with fabricated details such as a different name, date of birth, and address. Unlike classic identity theft, there is no single victim watching their account: the identity belongs to no one, which is precisely why it can quietly build credit history, pass automated checks, and operate for years before anyone notices.

How it works

The fraudster assembles the identity from breached and invented data, then "ages" it: applying for small credit lines, creating utility and social media records, and letting the file thicken until the synthetic person looks real to automated verification. The identity is then monetized — maxing out credit ("bust-out fraud"), laundering funds through accounts that function like dedicated money mule infrastructure, or defrauding lenders and government programs.

For employers, the sharper edge is hiring. Synthetic identities — increasingly dressed up with AI-generated headshots, fabricated résumés, and deepfaked interview video — are used to obtain jobs, and with them badge access, payroll, and credentials. The best-documented example is the North Korean remote IT worker scheme, in which sanctioned operatives used synthetic and stolen identities to get hired by hundreds of Western companies. A fraudulent hire is an insider threat that walked in through the front door of your recruiting funnel, which is why identity verification belongs in the same conversation as new-hire security onboarding.

How to defend against it

• Verify identity, not just documents. Use liveness checks and document-to-person matching during high-stakes onboarding — for customers and for employees.
• Watch for synthetic tells in hiring. Reused résumé content, mismatched location signals, refusal to appear on camera, and interview coaching artifacts all warrant a second look.
• Cross-check data consistency. Synthetic files often pair a pristine credit history with a thin real-world footprint; flag combinations that don't add up.
• Train the gatekeepers. Recruiters, HR, and finance teams should know this fraud class exists and have an escalation path when an applicant or counterparty feels assembled rather than real.