Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsSynthetic identity fraud creates a made-up identity, while conventional identity theft uses a real person’s identity without permission. The categories can overlap: a fabricated profile may include a genuine Social Security number or other personal data. That difference affects how lenders investigate applications, how fraud develops, and how a borrower repairs damaged credit records.
The core distinction: fabricated identity versus stolen identity
What conventional identity theft means
In conventional identity theft, a fraudster takes identifying information belonging to a real person and uses it without permission. The account may be opened in the victim’s name, or the thief may use an existing account, card or loan. The identifying information can include a Social Security number (SSN), name, date of birth, address, login credentials or payment details.
As an Amazon Associate I earn from qualifying purchases.
What synthetic identity fraud means
Federal Reserve authentication guidance draws the central line this way: unlike typical identity theft, in which a fraudster steals the identity of a real person, “a synthetic identity is a completely fabricated identity that does not correspond to any actual person.” A synthetic identity is assembled as a profile rather than copied wholesale from one individual. It can combine fictitious names, addresses and dates of birth with real information obtained from another person or from legitimate records.
Why “synthetic” does not mean “no victim”
The Federal Reserve’s 2019 explanation describes synthetic identities as combinations of real and/or fictitious information. A fraudster might pair an invented name with a real SSN, for example. The resulting identity is synthetic as a whole, yet the person whose SSN was used can still receive collection notices, see unfamiliar accounts on a credit report and spend months correcting records. The categories describe how the identity is constructed; they do not guarantee that only one type of victim exists.
#1 Best Overall
Why the distinction matters to lenders and borrowers
The lender’s exposure: credit built for a later bust-out
A synthetic identity can be cultivated slowly. The person behind it may open a starter account, make payments and accumulate an apparently respectable credit history. Once the profile has access to larger credit limits, the fraudster may take high-value goods or services, draw cash or run up balances and then disappear. Federal Reserve materials call this a “bust-out” pattern.
Because the identity does not correspond to a real person, locating the perpetrator and assigning the debt can be difficult. A lender may be left with losses even though earlier account activity looked ordinary. A red flag during application or account servicing is therefore a reason to investigate under the institution’s program, not automatic proof that the applicant is a criminal.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
The borrower’s exposure: an account that is not in your name can still be your problem
When a thief uses a real consumer’s SSN or other data inside a synthetic profile, the victim may not recognize the account name. Damage can surface as an unfamiliar inquiry, a loan balance, a collection call or a denial of credit. The consumer may need to prove that the account is fraudulent and ask both the creditor and credit bureaus to correct the file.
What the latest loss figure does—and does not—show
Federal Reserve Financial Services reported $6.2 billion in reported losses from new-account fraud in 2024 in a 2025 publication, more than double the amount reported a decade earlier. New-account fraud is a broad category that includes activity using stolen real identities and fake or synthetic identities. The figure is not a synthetic-identity-only estimate, so it should not be used to calculate the prevalence or cost of synthetic fraud by itself.
Synthetic identity fraud and identity theft compared
| Question | Conventional identity theft | Synthetic identity fraud |
|---|---|---|
| Does the identity correspond to a real person? | Yes. The criminal uses a real person’s identity or identifying information. | No. The profile, taken as a whole, is fabricated and does not correspond to an actual person. |
| Can another person’s real information be included? | Usually the stolen information is the central identity being misused. | Yes. A genuine SSN or other data can be combined with invented details. |
| How might an account be opened? | Using the victim’s name, SSN or credentials, or by taking over an existing account. | Using a constructed name and profile that may pass automated checks because some data is authentic. |
| Typical credit pattern | Unauthorized charges or accounts may appear quickly, although misuse can continue over time. | The profile may build payment history and credit limits before a high-value “bust-out.” |
| Tracing the responsible person | The account points to a real victim whose information was stolen; identifying the perpetrator still requires investigation. | There may be no genuine person behind the identity, making attribution and debt collection harder. |
| Potential borrower effect | The real person can face unauthorized debt, account takeover and credit-report damage. | A person whose SSN or other data was incorporated can face unfamiliar records and the same correction burden, even when the account name is fictitious. |
| Primary control | Authenticate the applicant or account holder, monitor activity and respond to reports of misuse. | Use layered identity verification, behavioral monitoring and investigation of inconsistencies without treating one indicator as conclusive. |
How a synthetic identity scheme can develop
- Assemble a profile. The fraudster combines invented details with data that appears valid, such as a real SSN, address element or contact point.
- Apply for low-risk credit. A small deposit account, retail line or other entry product can provide an initial tradeline.
- Create a payment history. Timely payments and repeated applications can make the profile look established. The apparent history does not prove that a real consumer exists.
- Expand access. As limits and trust increase, the profile may obtain larger loans, cards, goods or services.
- Bust out. The fraudster maximizes available credit, stops paying and abandons the identity. The lender then has to determine what happened and whether any real person’s data was entangled.
This sequence is a risk pattern, not a required script. Some cases involve a single application, while others involve coordinated activity by crime rings. Ken Montgomery, the Federal Reserve System’s payments security strategy leader and chief operating officer at the Federal Reserve Bank of Boston, said, “Crime rings see attractive opportunities in synthetic identity payments fraud,” underscoring why institutions treat the pattern as an organized-fraud concern as well as an individual application problem.
What lenders must do under the Red Flags Rule
Who the framework covers
The Red Flags Rule applies to specified financial institutions and creditors that maintain covered accounts. It is not a universal checklist for every transaction or every business. Covered entities must periodically determine whether they offer or maintain covered accounts, assess the identity-theft risks associated with those accounts and operate a written prevention program.
Rank #4
How the written program is tailored
The program must be appropriate to the institution’s size, complexity and activities. A community lender with a narrow product set may use different controls from a large issuer or fintech, but both need policies to identify, detect and respond to relevant red flags. The program should be reviewed as products, delivery channels and fraud experience change.
Risk factors to assess
- The types of accounts offered, including whether they permit repeated transactions or significant credit exposure.
- The methods used to open accounts and access them, such as in-person, online, mobile or third-party channels.
- The institution’s prior experience with identity theft and emerging patterns in its own portfolio.
Examples of red flags
- An alert from a consumer report or service provider.
- Documents that appear altered, inconsistent or suspicious.
- Personal information that does not match, such as an address discrepancy or conflicting identifying details.
- Unusual account use, transaction behavior or a rapid change in contact information.
- Notice from the consumer, law enforcement or another person that identity information may have been misused.
Detection and response controls
Depending on the risk, an institution may obtain and verify identifying information, authenticate the customer, monitor transactions and validate address changes. When a red flag appears, the response should be proportionate: additional verification, a hold, contact through a trusted channel, account closure or another measure may be appropriate. Institutions should document the decision and avoid categorical rejection rules based on a single data point. Federal Reserve guidance emphasizes that authentication practices should fit the institution’s risk profile.
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
How can I spot identity theft?
The CFPB recommends reviewing bank and card statements as well as credit reports. Look for:
- Accounts or credit inquiries you do not recognize.
- Balances, payment amounts or account details that are wrong.
- Transactions you did not authorize.
- Collection calls or letters about debts that are not yours.
- Unexpected denial of credit or a sudden change that cannot be explained by your own applications.
A synthetic identity case may not display your name on the account. An unfamiliar loan tied to your SSN, an inquiry from a creditor you never contacted or a collection notice for a product you never received can still indicate misuse. Review all three nationwide credit reports when investigating, because an account may appear on only one or two files.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.“Someone used my Social Security number to open accounts and I want to report identity theft”
Use this sequence when an unfamiliar account or loan appears. Keep a dated log of every call, letter, upload and response.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →- Contact the company where the account was opened. Use the creditor’s fraud or identity-theft channel. Explain that the account is not yours, ask it to close or restrict the account and request written confirmation that you are not liable and that the information will be removed from your credit reports.
- Report the identity theft at IdentityTheft.gov. The FTC site creates an Identity Theft Report and a recovery plan. Follow the document requests and save a copy of the report and plan.
- Place a one-year fraud alert. You can request a free initial fraud alert through one nationwide credit bureau; that bureau must notify the other nationwide bureaus. The alert tells prospective creditors to take reasonable steps to verify that an applicant is really you.
- Obtain and inspect your credit reports. Identify every unfamiliar inquiry, account, balance and collection entry. Mark the items connected to the identity theft and keep the reports with your records.
- Request a block of identity-theft information. Ask each bureau to block fraudulent information and provide the documentation it requires, such as your Identity Theft Report and proof of identity. If a bureau or creditor asks for additional material, send copies rather than originals and retain delivery evidence.
- Consider a credit freeze or an extended fraud alert. A freeze restricts prospective creditors’ access to your file until you lift it. An extended alert provides a longer-term warning for qualifying identity-theft victims. IdentityTheft.gov explains eligibility, requests and the differences between these options.
- Follow up. Creditors and bureaus may need more than one contact. Record names, reference numbers, dates, promised actions and deadlines, then check later reports to confirm that corrections were made.
Fraud alert, credit freeze and credit-report block: choosing the remedy
| Tool | What it does | When it helps | What you must do |
|---|---|---|---|
| Initial fraud alert | Signals prospective creditors to verify your identity before extending credit. | When you suspect misuse and want a quick warning across the nationwide bureaus. | Request it through one nationwide bureau; it is free for one year and that bureau notifies the others. |
| Extended fraud alert | Places a longer-term identity-verification warning for eligible identity-theft victims. | After documented identity theft when you want continuing protection against new-account applications. | Follow IdentityTheft.gov and bureau requirements, including supporting documentation. |
| Credit freeze | Restricts access to your credit file for most prospective creditors until you lift or remove the freeze. | When you want the strongest barrier against new-credit applications made with your information. | Request and manage it with each nationwide bureau; temporarily lift it when a legitimate application requires access. |
| Identity-theft block | Asks a bureau to stop reporting information that resulted from identity theft. | When fraudulent accounts or collections are already appearing on a report. | Submit the required identity, report and account documentation and monitor the result. |
Common mistakes that prolong the damage
- Assuming a fictitious account name means no real victim exists. A synthetic profile can contain your SSN or another genuine identifier.
- Disputing only with the bureau. The creditor that opened the account controls account-level records and may need to close the account and confirm the fraud.
- Paying a debt to make the calls stop. Payment can complicate the position that the account is not yours; first use the creditor’s fraud process and obtain advice suited to your situation.
- Relying on one credit report. Review all nationwide reports and continue checking after corrections.
- Treating a red flag as proof. For lenders, an inconsistency should trigger proportionate investigation, not an automatic accusation or rejection.
- Expecting monitoring to prevent fraud. Alerts can help you discover misuse sooner, but they do not establish that a transaction is legitimate or guarantee prevention.
Are paid identity-protection services necessary?
The FTC lists credit-monitoring, identity-monitoring, identity-recovery and identity-theft-insurance services as options. They are not required to report identity theft or begin the official recovery process. IdentityTheft.gov provides reporting and recovery steps without requiring a paid provider. Compare any service’s exact coverage, exclusions, response obligations and recurring cost before enrolling, and do not treat a subscription as a guarantee that fraud will be stopped.
A practical decision framework
If you are a borrower
- Start with the evidence: identify the unfamiliar account, inquiry, transaction or collection notice.
- Contact the creditor, create an FTC Identity Theft Report, and place the alert or freeze that fits your risk.
- Request bureau blocks or corrections with complete documentation.
- Keep copies and dated contact records until the creditor and bureaus confirm resolution.
If you are a lender
- Determine whether the product is a covered account and maintain a written program proportionate to the institution’s risk.
- Evaluate the account-opening channel, information mismatches, document quality, report alerts and unusual behavior together.
- Use layered authentication and transaction monitoring rather than a single-score rejection rule.
- Escalate and document responses when red flags appear, while preserving a path for legitimate applicants to resolve data errors.
The construction of the identity is the key analytical question. A real person’s information may be stolen in either an ordinary identity-theft case or a synthetic scheme; what changes is whether the assembled identity itself corresponds to that person. Lenders need controls that detect both patterns, and borrowers need recovery steps that address both the creditor’s records and the credit file.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
