One of the most dangerous assumptions a lender can make is that because an applicant has a Social Security number, credit history, identification documents and income documentation, the person represented in the loan file must be real.
That assumption is exactly what synthetic identity fraud attempts to exploit.
Synthetic identity fraud occurs when real and fabricated identifying information is combined to create an identity that does not accurately represent a real individual. The Federal Reserve defines it as the use of a combination of personally identifiable information to fabricate a person or entity for dishonest personal or financial gain.
Unlike traditional identity theft, where a criminal simply pretends to be another real person, a synthetic identity can be assembled from pieces of information that do not actually belong together.
A real Social Security number might be associated with a different name, birth date, address, telephone number or other information. The resulting profile can begin to appear legitimate as records accumulate around it.
For lenders, that creates a fundamental problem:
You may be verifying the financial qualifications of someone who, as presented in the loan application, does not actually exist.
How Did Synthetic Identity Fraud Develop?
The Social Security number was never originally designed to function as America's universal identity credential. Over time, however, SSNs became widely used throughout banking, lending, employment, taxation and credit reporting.
That created an opportunity.
Financial systems often rely on combinations of identifying information to locate and establish consumer records. If false and legitimate information becomes associated over time, a fabricated identity can begin developing what appears to be a legitimate financial history.
The Federal Reserve has specifically identified reliance on Social Security numbers as primary identifiers as one factor contributing to the synthetic identity problem.
Large-scale data breaches have added another source of information criminals can misuse. Names, addresses, birth dates, Social Security numbers and other personal information have become valuable raw materials for identity fraud.
Children can be particularly vulnerable because a child's Social Security number may remain unused for credit purposes for years. The FTC warns that stolen information belonging to children can be used to open accounts and apply for loans, sometimes without the family discovering the fraud until much later.
Why Synthetic Identities Can Be Difficult to Detect
Traditional identity theft often creates an immediate conflict.
If someone attempts to obtain credit using an established consumer's complete identity, the real consumer may receive alerts, notice an unfamiliar account or see unexpected activity on a credit report.
A synthetic identity may operate differently.
Because the identity is partly fabricated, there may initially be no real person actively watching the entire profile. The fraud can therefore remain unnoticed while financial history develops around the synthetic identity.
The Federal Reserve has described schemes in which synthetic identities gradually establish creditworthiness before eventually being used to obtain substantially more credit and default.
In the mortgage industry, the stakes are considerably higher. A fraudulent credit card may expose a financial institution to thousands of dollars. A fraudulent mortgage can involve hundreds of thousands of dollars.
Why Would Someone Use a Synthetic Identity to Obtain a Loan?
The motivation is straightforward: the real applicant may not qualify.
Perhaps the person's credit is poor.
Perhaps their debt load is too high.
Perhaps they have previous defaults or financial problems.
Perhaps the income necessary to support the requested mortgage does not exist.
Or perhaps the objective is fraud for profit rather than homeownership.
Fannie Mae distinguishes between fraud intended to get a marginal borrower into a home and fraud designed to improperly obtain mortgage proceeds for financial gain. It specifically identifies identity theft or Social Security number discrepancies, as well as misrepresentation of income, employment, credit and assets, among mortgage-fraud risks.
Synthetic identity fraud can become particularly dangerous when it is combined with other falsification.
A synthetic identity by itself is one problem.
A synthetic identity supported by false income, fabricated employment, altered bank statements, fraudulent W-2s and manufactured tax documentation becomes an entire fictional borrower.
Why Is the Threat Increasing?
Technology has dramatically lowered the barrier to creating convincing false information.
Generative artificial intelligence can produce realistic photographs, text, correspondence and other supporting materials. The Federal Reserve has warned that bad actors are using generative AI to increase the speed, scale and effectiveness of synthetic identity fraud and make fabricated identities appear more authentic.
FINRA has similarly warned that criminals are using generative AI in new-account fraud, including synthetic identities and AI-generated identification materials.
The lesson for mortgage lenders is important:
A document looking authentic is no longer sufficient evidence that the information behind it is authentic.
The better the technology becomes at creating believable documents, the more valuable independent government-source verification becomes.
Start by Verifying the Identity
Before asking whether someone's income is real, a lender should first establish confidence that it knows whose income it is verifying.
The Social Security Administration provides consent-based Social Security number verification services designed for uses that include banking and mortgage services.
With the SSN holder's consent, SSA can compare the submitted name, date of birth and Social Security number against its records. SSA returns whether the combination matches and can provide a death indicator when its records show that the number holder is deceased.
This distinction is important: SSA states that the service does not independently prove a person's identity. It verifies whether the submitted identifying information matches SSA's records.
But for a lender investigating synthetic identity risk, that comparison can be extremely valuable.
Suppose an applicant presents:
John Robert Smith Date of Birth: March 14, 1982 SSN: XXX-XX-1234
The credit report may exist. Documentation may appear legitimate. The borrower may have supplied employment and income information.
But what happens when SSA reports that the combination of name, date of birth and Social Security number does not match?
That is information the lender needs before proceeding.
Identity Verification Should Come Before Income Verification
Think of the process as building a house.
Identity is the foundation.
Income verification is the structure built on top of it.
There is little value in obtaining perfectly accurate IRS income information associated with a Social Security number if the lender has not established reasonable confidence that the taxpayer information belongs to the applicant sitting in front of them.
Once identifying information has been validated, IRS income verification can provide another independent layer of protection.
Forms such as 4506-C can authorize the release of specified IRS transcripts, while Form 8821 can authorize designated parties to inspect and receive specified tax information.
Now the lender can ask two separate questions:
Does the applicant's identifying information agree with government records?
And:
Does the income being used to qualify this applicant agree with government-source tax information?
When both answers support the loan file, confidence increases considerably.
Warning Signs Lenders Should Investigate
No single red flag proves synthetic identity fraud. Several inconsistencies together, however, should cause a lender to investigate more carefully.
Potential warning signs can include a name, SSN or birth date that does not verify; inconsistent addresses or identifying information across documents; unusual discrepancies between credit history and the applicant's claimed background; unexplained inconsistencies between tax records and supplied income documentation; or employment, banking and tax information that does not form a coherent financial picture.
The goal should not be simply to collect documents.
It should be to determine whether independent sources tell the same story as the borrower-provided information.
Why Government-Source Verification Matters
Mortgage fraud increasingly challenges lenders to distinguish between a genuine borrower and an extremely convincing collection of electronic documents.
That is why government-source data matters.
A lender should not ask only:
“Does this driver's license look real?”
The better question is:
“Can I independently verify the person represented by this documentation?”
Likewise, the lender should not ask only:
“Does this W-2 look authentic?”
It should ask:
“Does independent tax information support the income represented here?”
Synthetic identity fraud is ultimately an attack on trust.
The strongest defense is independent verification.