What Is Synthetic Identity Theft?

Someone can steal your Social Security number without stealing your name, your birthday, or your address — and use it to build an entirely different, fake person who has good credit, pays bills on time, and eventually disappears with everything they borrowed. That’s synthetic identity theft, and it’s the identity crime hardest for you to notice, because the “person” committing it never claimed to be you.

Synthetic Identity Theft — Key Facts

Question	Answer
What is it?	Combining a real SSN with a fabricated name, birthdate, or address to create a fictitious credit identity
Who defined it?	Federal Reserve-convened industry focus group (2021): “the use of a combination of personally identifiable information (PII) to fabricate a person or entity…for personal or financial gain”
Scale (US lenders, 2024)	$3.3 billion in exposure from newly opened accounts — an all-time high (TransUnion)
Most targeted SSNs	Children, deceased individuals, and people who rarely check credit (elderly, incarcerated, some immigrants)
Typical timeline before “bust-out”	Fraudsters often build the fake credit file for months to years before maxing it out
Who bears the loss?	Primarily lenders — but the SSN owner inherits the mess when it surfaces
Free protection for minors	Yes — federal law (2018) lets parents/guardians freeze a child’s credit file for free at all 3 bureaus
Key federal law for victims	Fair Credit Reporting Act (FCRA) — dispute rights, fraud alerts, 4-business-day fraudulent-data blocking
Last Updated	September 15, 2026

What Synthetic Identity Theft Actually Is

Traditional identity theft steals you — your real name, your real accounts, your real credit history. Synthetic identity theft doesn’t bother. It takes one real piece of you, almost always your Social Security number, and welds it to a made-up name, birthdate, and address. The result isn’t an impersonation of you. It’s a new “person” that credit bureaus and lenders end up treating as real, because nothing about the application looks stolen.

The Federal Reserve — which convened a 12-person industry focus group specifically because banks couldn’t agree on a definition — settled on this: synthetic identity fraud is “the use of a combination of personally identifiable information (PII) to fabricate a person or entity in order to commit a dishonest act for personal or financial gain.” That’s the closest thing to an official US definition that exists, and it’s worth knowing because plenty of blogs describe this crime loosely and inconsistently.

So what does that mean for you, practically? If your SSN gets used this way, you may never receive a single fraudulent charge in your name. The fake identity has its own name. Its own address. Its own credit file. Your name is nowhere on it — until it collapses.

How the Fraud Actually Gets Built, Step by Step

This isn’t a smash-and-grab. It’s closer to patiently raising a fake credit profile like a garden.

1. The application that’s designed to fail. A fraudster applies for credit using a real SSN (often one that hasn’t built a credit file yet) paired with a fake name. The application gets rejected — that’s expected, even desired. The rejection alone triggers a credit inquiry, and that inquiry causes the bureau to open a “thin file” tracking the new, fictitious identity as if it were a real person just starting out.

2. Seasoning the file. The fraudster (or a paid accomplice) adds the synthetic identity as an authorized user on someone else’s older, well-managed credit card. That account’s clean payment history gets absorbed into the synthetic file, inflating its credit score in a matter of weeks rather than years.

3. Building real credit. With a credit score now in place, the synthetic identity can get approved for small loans, retail cards, or its own credit line. Payments get made on time, month after month, sometimes for a year or more, because the goal is trust, not immediate theft.

4. The bust-out. Once the synthetic identity has enough available credit, the fraudster maxes out every line at once — cash advances, purchases, sometimes coordinated across several institutions simultaneously — and vanishes. There’s no forwarding address because there was never a real person behind it.

This is why synthetic fraud is so different from a stolen credit card: nobody calls their bank in a panic the day it happens, because no real, identifiable victim experiences the theft in the moment.

Whose Social Security Numbers Get Used

Fraudsters specifically look for SSNs unlikely to be actively monitored:

• Children — kids don’t have credit files, so an SSN paired with a fake adult identity can go undetected for a decade or more, often only surfacing when the real child applies for their first credit card, apartment, or student loan.
• Deceased individuals — SSNs of people who’ve died are sometimes used before the Social Security Administration’s death records fully propagate to credit bureaus and lenders.
• People who rarely check credit — this includes some elderly individuals, incarcerated people, and immigrants with limited US credit history, all groups less likely to notice a new inquiry or thin file appearing under their number.

If you’re a parent, this is the single most important thing to take from this article: your child’s SSN is more valuable to this specific type of fraud than yours is, precisely because nobody’s watching it.

Why Banks and Credit Bureaus Struggle to Catch It

Fraud detection is built around comparing new activity to a known, established pattern for a real person. Synthetic identities don’t trip that wire because there’s no real person’s established pattern to violate — the “pattern” is fabricated from scratch and, once seasoned, looks exactly like a legitimate customer slowly building credit. TransUnion’s own research on this notes that synthetic profiles tend to share one telling absence: no history of anything a real adult accumulates over time, like a driver’s record, voter registration, or family/household connections that show up in public records. Individually, none of those absences prove fraud. Together, they’re one of the few signals that separate a synthetic identity from a real, credit-invisible person.

Generative AI has made this measurably harder in the past two years. Fabricated pay stubs, utility bills, and even convincing selfies that defeat basic liveness checks can now be produced at scale, letting fraud rings run far more synthetic identities in parallel than was practical even five years ago.

How Big Is This, Really?

US lenders faced $3.3 billion in exposure from newly opened, synthetic-identity-linked accounts across auto loans, bank credit cards, retail credit cards, and unsecured personal loans by the end of 2024 — an all-time high in TransUnion’s tracking. Separately, the Federal Reserve Bank of Boston has estimated the cost to lenders at roughly $6 billion annually and noted synthetic fraud can represent 10% to 15% of charge-offs in a typical unsecured lending portfolio. These are two different organizations measuring the problem with different methodologies, which is worth knowing before you see a single number repeated as gospel elsewhere — the honest answer is “billions of dollars a year and growing,” not one precise figure everyone agrees on.

Signs You or Your Child Might Be a Victim

Because there’s no obvious moment of theft, you’re mostly looking for indirect evidence:

• A collections notice, credit offer, or “final notice” letter addressed to your child, at your address, using their SSN
• An IRS notice referencing income, wages, or a job you (or your child) never had
• Being denied a government benefit because “someone with this SSN is already receiving it”
• A credit freeze request for a minor coming back with an existing file the bureau already has on record — bureaus normally have no file for a child until one is either requested or fraudulently created
• Debt collector calls for accounts you don’t recognize, tied to a name that isn’t yours but a number that is

How to Check If Your Child’s Social Security Number Has Been Compromised

Credit bureaus don’t normally hold a file for a minor. To check, you can request a manual search directly with each of the three nationwide bureaus (Equifax, Experian, TransUnion) using your child’s SSN and information. If a file already exists where none should, that’s strong evidence of synthetic use. This is different from opening a freeze — freezing doesn’t require a file to already exist, since federal law lets the bureau create a placeholder file specifically to lock it down (see below).

Your Legal Protections Under Federal Law

Free credit freezes for minors. Since September 21, 2018, federal law lets a parent, legal guardian, or child welfare representative freeze a credit file on behalf of anyone under 16, at no cost, at all three nationwide bureaus. If the bureau has no existing file for the child, it creates one for the sole purpose of freezing it — that record can’t be used to extend credit, only to block it.

Rights under the Fair Credit Reporting Act (FCRA). Once you discover synthetic use of your SSN, the FCRA gives you specific tools: the right to dispute the fraudulent account directly with both the credit bureau and the company that furnished the bad information, the right to an extended fraud alert, and — critically — the right to have fraudulent information blocked from your credit report once you submit an official identity theft report. Bureaus are required to block that information within four business days of receiving a proper request.

Filing an official Identity Theft Report. The federal government’s tool for this is IdentityTheft.gov, run by the FTC. It generates both a personal recovery plan and an official report you can use to invoke the FCRA blocking right above, notify the three bureaus, and support any dispute you file with creditors.

Criminal law exposure for the fraudster. Separately from your consumer rights, using someone else’s SSN this way can trigger federal charges under 18 U.S.C. § 1028 (fraud involving identification documents) and § 1028A (aggravated identity theft), which carries a mandatory consecutive two-year prison term on top of any underlying fraud sentence. That’s a matter for prosecutors, not something you personally enforce — but it’s worth knowing this isn’t treated as a minor offense.

What to Do If You Discover It

1. File a report at IdentityTheft.gov. This is the single most useful first step — it produces the documentation everything else depends on.
2. Contact all three credit bureaus. Place a fraud alert or freeze, and if a file already exists that shouldn’t (especially for a child), dispute it directly.
3. Notify the Social Security Administration if you suspect your SSN is actively being used for employment or benefits fraud, not just credit fraud.
4. Request an IRS Identity Protection PIN if the misuse touches tax filings — this prevents someone from filing a return using that SSN going forward.
5. Dispute every fraudulent account with the specific creditor in writing, referencing your Identity Theft Report, and keep records of every communication.
6. Consider a consumer attorney if a bureau or creditor fails to properly investigate your dispute or blocks the fraudulent data within the required window — the FCRA allows victims to recover damages, and in some cases attorney’s fees, when companies don’t follow the law.

Frequently Asked Questions

What is synthetic identity theft, in plain terms?

It’s when someone combines a real Social Security number — often a child’s or a rarely-monitored adult’s — with a made-up name and other fake details to create a fictitious person who can get approved for credit.

How is this different from regular identity theft?

 Regular identity theft impersonates a specific, real person. Synthetic identity theft invents a new person using only one real ingredient — the SSN — so there’s no obvious victim experiencing fraud in real time.

Can my child’s Social Security number really be stolen before they’re even old enough for credit? 

Yes, and it’s specifically why this crime targets children — an SSN with no credit history is easier to build a fake identity around undetected.

Is there a free way to protect my child’s credit? 

Yes. Federal law since 2018 lets parents and guardians freeze a minor’s credit file for free at all three nationwide credit bureaus.

How would I even find out my SSN was used this way?

 Usually indirectly: a collections letter in your child’s name, an unexpected IRS notice, a benefits application denied because “someone’s already using this number,” or a credit freeze request revealing a file that shouldn’t exist yet.

What law protects me once I discover it?

 The Fair Credit Reporting Act gives you the right to dispute, request an extended fraud alert, and have fraudulent information blocked from your credit report within four business days of filing a proper identity theft report.

Is using someone’s SSN this way a federal crime? 

Yes. It can be prosecuted under 18 U.S.C. §§ 1028 and 1028A, the latter of which carries a mandatory two-year consecutive prison sentence for aggravated identity theft.

Sources Used in This Article

• Federal Reserve System — “Federal Reserve System Announces Industry-Recommended Definition of Synthetic Identity Fraud,” April 2021: https://www.federalreserve.gov/newsevents/pressreleases/other20190709a.htm
• FedPayments Improvement (Federal Reserve) — Synthetic Identity Fraud Defined: https://fedpaymentsimprovement.org/strategic-initiatives/payments-security/synthetic-identity-payments-fraud/synthetic-identity-fraud-defined/
• Federal Reserve Bank of Boston — “A victimless crime? Hardly,” August 2022: https://www.bostonfed.org/news-and-events/news/2022/08/synthetic-identity-fraud-is-not-a-victimless-crime-costs-billions-damages-lives.aspx
• TransUnion — H1 2025 Omnichannel Fraud Report ($3.3 billion synthetic identity exposure, 2024): https://www.transunion.com/report/h1-2025-omnichannel-fraud-report
• Federal Trade Commission — “New protections available for minors under 16,” free credit freeze law: https://consumer.ftc.gov/consumer-alerts/2019/03/new-protections-available-minors-under-16

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against Federal Reserve publications, TransUnion’s official fraud reporting, and Federal Trade Commission consumer guidance, as of September 15, 2026. Last Updated: September 15, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified consumer protection attorney.