{"id":6154,"date":"2021-02-23T06:00:43","date_gmt":"2021-02-23T14:00:43","guid":{"rendered":"http:\/\/www.trulioo.com\/?p=6154"},"modified":"2023-11-23T23:46:09","modified_gmt":"2023-11-23T23:46:09","slug":"synthetic-identity-fraud","status":"publish","type":"post","link":"https:\/\/www.trulioo.com\/blog\/fraud-prevention\/synthetic-identity-fraud","title":{"rendered":"Synthetic Identity Fraud \u2014 Spotting the Fakes"},"content":{"rendered":"\n
\"Synthetic<\/figure>\n\n\n\n

Any time you see a number of followers\/fans on a social media account, do you wonder how many are real? It raises an interesting question: How can you tell if someone online is real, or if they\u2019re a bot or some other synthetic identity? While these deceptive accounts often pose no real issues, bad actors are increasingly turning to synthetic identity fraud to commit financial crimes. Synthetic identities wreak havoc on traditional validation and authentication methods, costing businesses significant time and money.<\/p>\n\n\n\n

The concept is to create fake identities usually based on combining fake information with actual ID data. One example of a fake identity is one that contains personal information, such as a real social security number (SSN), along with a fake address and other synthetic data points. The fraudster can then use this fake identity<\/a> to acquire a driver\u2019s license, passport or other form of real ID, in addition to credit cards and other accounts.<\/p>\n\n\n\n

The fastest growing type of financial crime<\/h2>\n\n\n\n

Unfortunately, synthetic identities are a growing problem. Data breaches are allowing more personally identifiable information (PII) to leak out, which makes it easier to start these scams. The speed of online and mobile commerce is generating demands for quicker onboarding and credit processes, taking human interaction out of the process. And, the anonymous nature of synthetic identities also decreases the risk to fraudsters, increasing their interest.<\/p>\n\n\n\n

The losses are substantial; in its 2021 Future of Fraud Forecast<\/a>, Experian stated that synthetic identity fraud was the fastest growing type of financial crime. According to the Auriemma Group, \u201cUp to 5% of charged-off credit card accounts could be linked to synthetic identity fraud<\/a>. With the average unpaid debt totaling more than $15,000 per account, that equates to $6 billion, or 20%, in credit losses industry-wide.\u201d This emphasizes other research from Equifax, which found synthetic ID fraud accounts for 80% of credit card fraud losses, nearly 20% of card charge-offs.<\/p>\n\n\n\n

COVID-19 has caused synthetic identity to increase, as more and more people move to transacting with businesses and banks online, and undertake more aspects of their daily lives digitally. In addition, prominent large-scale customer data leaks and cybersecurity breaches have exposed millions of identities and huge amounts of personal data for fraudsters to exploit. To put it in perspective, an Identity Theft Resource Center report indicated that 471 million customer records were exposed in 2018. Savvy fraudsters use all of this personal information to take advantage of the vulnerable, especially the young and elderly. Fraudsters even use identities and SSNs of dead people.<\/p>\n\n\n\n

Department of Justice, R. Sean McCleskey states:<\/p>\n\n\n\n

\n

When criminals use a blend of different people\u2019s data<\/a>, as well as some entirely made-up information, it becomes harder for law-enforcement officials to both realize the crime and then locate the culprit.<\/p>\n<\/blockquote>\n\n\n\n

And the losses aren\u2019t just financial. Oftentimes, criminals will use the SSNs of children to apply for government benefits, open bank and credit card accounts, apply for loans or utility services, or rent a place to live. Children are targets of identity theft because the crime can go undetected for years, often until they first apply for credit or check their credit score.<\/p>\n\n\n\n

More than one million children were victims of identity theft<\/a> or fraud in a single year. While that number covers the various different types of identity fraud, synthetic identity fraud is increasingly used by fraudsters as those accounts offer a blank slate and are better suited for opening accounts that go unnoticed. According to Carnegie Mellon CyLab, children\u2019s SSNs are 51 times more likely to be used in synthetic fraud schemes than adults.<\/p>\n\n\n\n

\"Traditional
Adapted from Payments Fraud Insights report (2020), Federal Reserve System.<\/em><\/p>\n\n\n\n

Credit bust-out fraud<\/h2>\n\n\n\n

Synthetic identities are often used to open new accounts, as a form of application fraud. As the identity data elements are reusable, it becomes a tool for application flooding, which are attempts to open large numbers of accounts. The fraudsters understand it\u2019s a numbers game, with many accounts being rejected. However, accounts that are opened can then look more legitimate over time.<\/p>\n\n\n\n

To maximize returns, synthetic fraudsters play a long con with a credit bust-out fraud, also known as sleeper fraud. This form of fraud is where a fraudster establishes a normal usage pattern and solid repayment history to build up their credit line so they can acquire more cards and higher credit limits, before a final \u201cbust out\u201d of charges where they max out all the cards with no intention of paying the bills. While it takes patience, the financial gain is often substantial. One fraud ring in New Jersey built up 7,000 credit profiles in a scheme that created over $200 million in fraud losses.<\/p>\n\n\n\n

Stopping fake identities<\/h2>\n\n\n\n

There are steps that your business can take to limit synthetic identity fraud. Just as using data is the key to creating a synthetic identity, data is the solution to combating the fraud. Initial Know Your Customer (KYC<\/a>) checks are an obvious starting point, as they are often a compliance requirement.<\/p>\n\n\n\n

Unfortunately, fraudsters can abuse gaps in the Know Your Customer (KYC) protocols of financial institutions. Bypassing weak KYC protocols and traditional, manual processing procedures, once accounts are opened, these synthetic identities can go undetected for many years. Further complicating fraud prevention efforts<\/a>, synthetic identity profiles generally have strong credit scores. This results in fewer (or no) red flags during credit underwriting and credit checks.<\/p>\n\n\n\n

Adding in additional identity layers in a risk-based approach<\/a> builds more security hurdles for the fraudster to overcome, as they need to synthesize a more robust profile.<\/p>\n\n\n\n

\"Adapted
Adapted from Payments Fraud Insights report (2020), Federal Reserve System.<\/em><\/p>\n\n\n\n

Equifax mentions these three points to watch out for:<\/p>\n\n\n\n