The materials available in this article are for informational purposes only and not for the purpose of providing legal advice. You should contact your own advisors with questions regarding the what is synthetic identity fraud content herein. The opinions expressed in this article are the opinions of the individual authors and may not reflect the opinions of MeridianLink, Inc.
The application looked clean.
Imagine a loan officer at a community financial institution. We’ll call her Lorelai. She’s reviewing an auto loan application from a 26-year-old applicant, and at first glance, everything looks valid.
The applicant has a Social Security number that passes a basic validity check. The name and address appear authentic. The credit report shows 18 months of on-time payments on a credit card, steady employment, and modest debt. Nothing immediately raises a red flag.
The FI approves the loan.
But eight months later, the credit card is maxed out, the auto loan is delinquent, and the phone number on file is disconnected. When Lorelai’s team investigates, they discover the identity is synthetic: a combination of legitimate and fabricated information. The Social Security number belongs to someone else, while the name, date of birth, and other details have been combined to create a convincing but fictitious identity.
By the time the fraud comes to light, the institution is left with a significant outstanding balance and no borrower to contact.
This is synthetic identity fraud.
What is synthetic identity fraud, and how does it work?
The Federal Reserve-convened industry working group defines synthetic identity fraud as the use of a combination of personally identifiable information to fabricate a person or entity in order to commit a dishonest act for personal or financial gain.
Synthetic identity fraud typically works in three stages:
First, the fraudster assembles an identity using a combination of real and invented data. This might include an established Social Security number paired with a fabricated name, date of birth, or address.
Second, the identity applies for credit. They often face initial rejection but continue applying until they establish a credit file and build what appears to be a reliable credit history. Fraudsters may build that history over months or even years by making small purchases and paying bills on time. This process can make a fabricated identity appear increasingly credible to traditional verification and credit-screening systems.
Third, the fraudster may execute a bust-out: maxing out available credit across multiple accounts and disappearing without repaying the balances. Because there is no legitimate borrower behind the synthetic identity, conventional collection efforts may have no real borrower to contact.
Not every synthetic identity follows this exact pattern, but understanding these stages is critical for lenders. By the time a bust-out happens, the opportunity to prevent the loss may already have passed.
Three numbers that matter
44%. In Alloy’s 2026 State of Fraud Report, based on a survey of more than 500 senior-level decision-makers across banks, credit unions, and fintechs, 44% ranked synthetic identity fraud as the top fraud type tracked by their organization. It’s a significant concern across financial institutions, not an isolated issue.
$2.4 billion. TransUnion estimates that US lenders had approximately $2.4 billion in credit exposure tied to synthetic identities as of June 30, 2026. This represents estimated exposure to potential losses, not losses already incurred. For lenders of all sizes, one undetected synthetic identity can become a costly reminder that the best time to stop fraud is before credit is extended.
$5.47. LexisNexis’s True Cost of Fraud Study found that every $1 of fraud costs US financial institution over $5 in total, up from $4 in 2021. Every fraud incident carries a much larger price tag than the initial loss, putting additional pressure on operating costs, profitability, and long-term growth.
What synthetic identity fraud costs your institution
Back to Lorelai. Her financial institution didn’t just lose the auto loan. It paid to investigate the file, handled the collection effort, reviewed the other loans approved around the same time, and devoted staff resources to understanding how the application got through its controls.
That’s one reason understanding what synthetic identity fraud costs requires looking beyond the initial charge-off. There are investigation expenses, operational disruptions, potential compliance implications, and resources diverted from legitimate lending activity.
Multiply those costs by every synthetic identity that gets through, and the impact becomes a significant part of the overall cost of fraud and lending.
What it does to consumer trust
Community FIs are built on trust, and consumers expect them to protect their money and their identity. When a fraud event involves the misuse of a real person’s information, the damage can extend beyond the financial institution. Individuals whose Social Security numbers or other personal information are incorporated into synthetic identities may face credit and identity-related consequences of their own.
The opposite risk is just as real. If every legitimate applicant faces a stack of hurdles, consumers may walk away rather than complete the application.
The goal isn’t to make every applicant prove they’re real at every step. It’s to identify suspicious patterns early. Then, apply the right level of scrutiny, and separate trustworthy applicants from fabricated identities without adding unnecessary friction.
What Lorelai’s team changed
A single identity check at onboarding isn’t enough in today’s lending environment. Synthetic identities can be carefully constructed to pass traditional verification, so the institution adopted a layered approach. Now, they evaluate multiple signals and reassesses risk throughout the consumer lifecycle.
- Validate identity information across multiple sources. Rather than simply confirming that an SSN is valid, the team began comparing identity attributes, including name, date of birth, SSN, address history, and other available records. Inconsistencies across trusted data sources can reveal identities that look legitimate individually but don’t hold up when evaluated together.
- Verify documents and the person presenting them. The FI added document authentication and biometric checks. These measures can help identify altered identification documents, manipulated images, and attempts to use someone else’s identity.
- Incorporate device and digital intelligence. The team began evaluating device reputation, IP address, geolocation, and connections between devices and previous applications. For example, multiple applicants using the same device or suspicious digital patterns could indicate coordinated fraud activity.
- Analyze behavior and application patterns. Behavioral analytics help identify unusual application activity, such as automated submissions, suspicious navigation patterns, unusually fast form completion, or repeated attempts using slightly different identity information. These patterns aren’t proof of fraud on their own, but they can provide additional context for assessing risk.
- Continue monitoring after approval. Fraud detection doesn’t stop once an account was opened. The team watches for unusual changes in account activity, rapid credit utilization, sudden increases in borrowing, and other patterns that could signal a bust-out in progress.
A layered fraud strategy doesn’t have to mean more manual work for lending teams or added friction for legitimate applicants. With the right technology, many identity verification and fraud detection checks happen automatically, behind the scenes within the application and decision process. Risk-based workflows can determine when additional verification is needed, flag suspicious applications for review, and allow lower-risk applicants to move forward without unnecessary delays.
How MeridianLink helps
Most community institutions don’t need another standalone fraud tool. They need identity verification and fraud protection capabilities that work within the account-opening and lending workflows they already use.
MeridianLink® helps make that possible through its Marketplace network of integrated technology providers. Financial institutions can connect to solutions that extend their lending workflows with capabilities such as:
- Identity verification and authentication: Validate applicant information against trusted data sources, verify identity attributes, and incorporate additional authentication measures when needed.
- Document and biometric verification: Access capabilities that help authenticate identification documents, verify an applicant’s identity through facial matching, and detect signs of image manipulation.
- Fraud intelligence and risk assessment: Incorporate identity data and additional risk signals to help identify suspicious applications, inconsistencies, and potential synthetic identities.
- Digital and device risk assessment: Leverage information about devices, digital activity, and application patterns to uncover suspicious behavior that traditional identity checks may miss.
- Integrated decisioning and workflows: Bring verification results and fraud indicators into the lending process, helping institutions flag higher-risk applications, trigger additional checks, or route applications for manual review.
Rather than forcing lenders to manage disconnected tools and processes, MeridianLink helps bring these capabilities into the application and lending experience. Through available integrations and configurable workflows, institutions can build a layered fraud strategy that fits their risk policies while keeping the process efficient for authentic applicants.
