Synthetic identity theft is one of the fastest-growing and hardest-to-detect forms of fraud in the United States, costing lenders and consumers an estimated $30 to $35 billion annually. Unlike traditional identity theft where a criminal steals your entire identity, synthetic identity theft blends real personal information with fabricated details to create an entirely new, fictitious person. Here is what you need to know to protect yourself and your family.
What Is Synthetic Identity Theft?
Synthetic identity theft occurs when a criminal takes a real piece of personally identifiable information, most commonly a Social Security number, and combines it with fake details such as a fabricated name, date of birth, or address. The result is a brand-new identity that does not belong to any real person but is anchored by a legitimate data point that helps it pass verification checks.
Unlike traditional identity theft where a criminal pretends to be you, a synthetic identity thief creates someone who has never existed using a fragment of your real information. Because the fabricated identity does not match any real person's complete profile, it can evade many fraud detection systems.
How Synthetic Identity Theft Works
The process typically follows a predictable pattern:
- Obtain a real SSN: Criminals acquire Social Security numbers from data breaches, dark web marketplaces, or data broker sites. They target SSNs belonging to people unlikely to be actively using credit: children, seniors, deceased persons, or immigrants.
- Combine with fake details: The stolen SSN is paired with a fabricated name, a different date of birth, and a new address to create a synthetic identity.
- Apply for credit: The criminal applies for credit using the synthetic identity. The first application is typically denied, but the act of applying creates a credit file with the credit bureaus, essentially giving the fake identity a foothold in the financial system.
- Build credit slowly: The fraudster obtains easy-to-get credit products like secured credit cards. Over months or even years, they make small purchases and on-time payments to build a legitimate-looking credit history.
- "Bust out": Once the synthetic identity has a strong credit score, the criminal maxes out all credit lines, takes out large loans, and disappears. This is where the financial damage occurs.
The Scale of the Problem
Synthetic identity fraud accounts for an estimated 80-85% of all identity fraud in the United States. In one documented case, a fraud ring created over 24,000 synthetic identities in under a month using AI-powered tools. U.S. lenders face billions of dollars in exposure to synthetic identities tied to new accounts each year, and the problem is accelerating as AI makes it easier to generate convincing fake identities at scale.
Who Is Most at Risk?
Certain groups are disproportionately targeted for synthetic identity theft because their Social Security numbers are less likely to be actively monitored:
- Children: Children's SSNs are 51 times more likely to be used for synthetic identity theft than adults'. Because children have no credit history, fraud can go undetected for years until they apply for their first credit card, student loan, or job. Nearly one million U.S. children are victims of identity theft each year.
- Seniors: Elderly individuals may not actively monitor their credit, making their SSNs attractive targets. Combined with the fact that seniors are less likely to apply for new credit, fraud tied to their SSN can persist for extended periods.
- Deceased individuals: SSNs of recently deceased persons are frequently exploited because death records are not always immediately updated across all systems.
- Immigrants and individuals with thin credit files: People new to the U.S. credit system have limited credit history, making it harder to distinguish legitimate activity from fraud.
Warning Signs of Synthetic Identity Theft
Synthetic identity theft is notoriously difficult to detect because the fraudster is not impersonating you directly. However, there are red flags to watch for:
- Unexpected credit inquiries: If your credit report shows inquiries from lenders you never contacted, someone may be using your SSN as part of a synthetic identity.
- Unfamiliar accounts on your credit report: Accounts you did not open, especially ones with an unfamiliar name or address, are a strong indicator.
- IRS notices about unreported income: If the IRS contacts you about income you did not earn, a synthetic identity using your SSN may have been used for employment.
- Denied credit for no apparent reason: If you are unexpectedly denied credit, it could mean a synthetic identity has damaged the credit file associated with your SSN.
- Collection notices for debts you do not recognize: These may stem from accounts opened using a synthetic identity built on your SSN.
- Your child receives pre-approved credit offers or collection notices: Children should never receive these. If they do, their SSN has likely been compromised.
Children Are Especially Vulnerable
Because children do not use credit, synthetic identity theft targeting their SSNs can go undetected for 10 to 15 years. By the time a young adult applies for their first credit card or student loan, the damage can be severe. The FTC recommends proactively freezing your child's credit at all three major bureaus to prevent anyone from opening accounts using their SSN. This is free and does not affect their ability to build credit later when they are ready.
How Data Brokers Contribute to Synthetic Identity Theft
Data brokers play a significant role in enabling synthetic identity theft. These companies collect and sell personal information including names, addresses, phone numbers, dates of birth, and more to virtually anyone willing to pay.
For criminals building synthetic identities, data broker sites are a goldmine of real personal details that make fabricated identities appear legitimate. By removing your information from these sites, you reduce the raw material available to fraudsters. Services like PrivacyOn continuously monitor and remove your personal information from 100+ data brokers, cutting off one of the primary supply chains that fuels synthetic identity fraud.
How to Protect Yourself from Synthetic Identity Theft
1. Freeze Your Credit at All Three Bureaus
A credit freeze is the single most effective step you can take. It prevents anyone from opening new credit accounts using your SSN. You can freeze your credit for free at Equifax, Experian, and TransUnion. Temporarily lifting the freeze when you need to apply for credit takes only a few minutes.
2. Freeze Your Children's Credit
Contact each of the three major credit bureaus to freeze your child's credit. Since children should not have a credit file, the bureau will create one and immediately freeze it. This is free under federal law.
3. Monitor Your Credit Reports Regularly
Review your credit reports from all three bureaus at least once per year through AnnualCreditReport.com. Look for accounts, inquiries, or addresses you do not recognize.
4. Remove Your Information from Data Brokers
Reducing the amount of personal information available online makes it harder for criminals to construct synthetic identities using your details. A data removal service like PrivacyOn automates this process, continuously monitoring 100+ data broker sites and submitting removal requests on your behalf. PrivacyOn's dark web monitoring adds an additional layer of protection by alerting you if your SSN or other sensitive information appears in underground marketplaces.
5. Guard Your Social Security Number
Never carry your Social Security card in your wallet. Only provide your SSN when absolutely required, and be skeptical of any request for it by phone, email, or text.
6. Secure Your Mail
Use a locked mailbox or PO Box, sign up for USPS Informed Delivery, and shred any documents containing personal information before discarding them.
7. Set Up Fraud Alerts
A fraud alert tells creditors to take extra verification steps before opening new accounts. Place a free one-year fraud alert by contacting any one of the three credit bureaus, and it will automatically be shared with the other two.
What to Do If You Suspect Synthetic Identity Theft
If you notice any of the warning signs described above, take these steps immediately:
- Pull your credit reports from all three bureaus and review them carefully for unfamiliar accounts, inquiries, or addresses.
- File a dispute with each credit bureau for any accounts or information you do not recognize.
- Place a fraud alert or credit freeze if you have not already done so.
- Report the fraud to the FTC at IdentityTheft.gov, which will create a recovery plan and provide documentation you can use with creditors and law enforcement.
- File a police report to create an official record of the identity theft.
- Contact the Social Security Administration if you believe your SSN has been compromised, especially for a child or deceased family member.
The Bottom Line
Synthetic identity theft is a sophisticated, slow-moving crime that can evade traditional fraud detection for years. The best defense is proactive: freeze your credit and your children's credit, monitor your reports regularly, guard your SSN, and reduce your exposure on data broker sites. Services like PrivacyOn automate the data broker removal process and provide dark web monitoring to alert you if your information appears in underground markets.