London Daily

Focus on the big picture.
Friday, Oct 24, 2025

Criminals are using 'Frankenstein identities' to steal from banks and credit unions

Criminals are using 'Frankenstein identities' to steal from banks and credit unions

So-called synthetic identity fraud is the fastest-growing financial crime, according to the Federal Reserve, driven in part by lending moving online. It’s also one of the hardest to detect.

Instead of outright stealing an identity, a criminal makes one up in what’s sometimes called a “Frankenstein” identity. The criminal then spends years building up credit under a fake alias.

“It’s a really long con and an expensive one,” says Naftali Harris, co-founder and CEO of San Francisco-based start-up SentiLink. “But once you have this fake person who has an 800 credit score, you can then use that to get multiple high limit credit cards and unsecured loans from banks.”

It started out like any other online loan.

Notre Dame Federal Credit Union reviewed the application. It did the necessary background checks, and authenticated the applicant’s credit score and background. But it wasn’t until a group of borrowers in Missouri abruptly stopped making payments that the South Bend, Indiana-based lender smelled trouble.

“These looked like bona fide real people -but when you pulled all of them together, especially out of the specific geographic area, red flags and alarm bells started going off,” said Brian Vitale, chief risk and compliance officer at Notre Dame Federal Credit Union. “We finally identified that these people didn’t exist. Unfortunately by that time, we were out $200,000.”

What the firm learned in hindsight was that the “people” applying for loans never existed. The credit union was a victim of “synthetic identity fraud.” Instead of stealing another person’s identity, a fraudster invents an entirely new, fake person and applies for anything from auto loans to credit cards.

The Indiana credit union is not the only victim. Boston-based Aite Group estimates this type of fraud costs U.S. lenders between $10,000 to $15,000 per incident. One estimate from Auriemma Insights puts the losses at $6 billion annually. This is the fastest-growing financial crime, according to the Federal Reserve, driven in part by lending moving online.


The rise of “Frankenstein” fraud

To fool lenders, fraudsters pick a random social security number, or buy one on the dark web. They will often look for one that was issued to someone younger than 18 years old -ensuring that person doesn’t have credit history. They then link a fake name, date of birth, and in some cases social media accounts. They start applying for credit and building up a FICO score, which in some cases takes years.

“It’s a really long con and an expensive one,” Naftali Harris, co-founder and CEO of San Francisco-based start-up SentiLink, told CNBC. “But once you have this fake person who has an 800 credit score, you can then use that to get multiple high limit credit cards and unsecured loans from banks.”

Credit bureaus link FICO scores to multiple factors -address, name, date of birth -as well as social security number. Harris said it’s common for a social security number to be linked to multiple names, because of human error or a name change. As a result, banks often ignore the “flag” that goes up.

SentiLink uses data to help customers, including three of the top ten U.S. banks, to determine if a borrower is real or using a fake identity. Harris was a data scientist at Affirm, which was started by PayPal founder Max Levchin. Levchin is now backing the company, along with Andreessen Horowitz. Harris first came across the type of fraud at Affirm and found that synthetic identities show certain patterns that data can identify.

“Synthetic identities and real identities behave very differently,” he said. “Real people show up, in terms of their credit history, roughly when they’re 18 or in their twenties and go about their lives living in a pretty ordinary way. Synthetic identities, though, behave in really erratic ways.”

Harris pointed to red flags like moving around a lot or aggressively growing credit. In many cases, he said they find organized crime rings that produce hundreds of different synthetic identities that behave in the same “unusual” way.

These instances are often under-reported, and categorized as normal credit losses. The Federal Reserve estimates that 80% to 90% of these instances are categorized as a credit losses.

“People don’t know to call it synthetic fraud -they just think someone walked away from a debt they owed,” said Jim Cunha senior vice president of secure payments and fintech at the Federal Reserve Bank of Boston. “It’s significantly underreported because most small and medium banks don’t believe they’re victims of it.”

There is not always a consumer victim, meaning no one individual is banging down the door of a bank to complain that their identity was stolen. But Cunha highlighted the possibility of criminals using younger peoples’ social security numbers since they often don’t apply for credit until they’re 18 and won’t notice a difference in their score.

This type of fraud has “sharply increased” over the past decade, according to Julie Conroy, research director for Aite Group’s fraud and anti-money laundering practice. In a recent survey, most bankers told the firm that synthetic identity fraud problem is bigger than the losses they take as a result of identity theft. One factor making it easier to piece together real identities is information being sold on the dark web after data breaches.

“Criminals take a Social Security number here, and a name there, and bring them together to form a new Frankenstein person,” Conroy said. The recent economic boom is also allowing credit issuers to loosen standards and that makes it “easier for a new synthetic record to get a foothold with the bureaus,” she said.

In 2011, the Social Security Administration decided to start randomizing the issuance of Social Security numbers, which Conroy said has made it easier to pick a random social security number without being flagged. There used to be a logic of a person being born in 1984, and a social security number having digits consistent with that year.

“All of that logic went out the window, making it a lot easier for fraudsters to just pull a nine digit number out of the out of thin air,” she said. “Collectors might track down folks and come across the person that owns the social security number -but none of the other identity information matched because it wasn’t synthetic.”

Some of the knowledge-based verification questions from lenders -including “did you live at that address?” or “what type of car did you drive?” can be easily answered by these criminals if they were the ones who formed the identity in the first place.

“What was most concerning was the fact that these new members to the credit union who applied online, passed the knowledge-based authentication questions with flying colors,” Notre Dame Credit Union’s Vitale said. “This was a highly coordinated attack on us, for a significant amount of money.”

Newsletter

Related Articles

0:00
0:00
Close
Microsoft AI CEO: ‘We’re making an AI that you can trust your kids to use’ — but can Microsoft rebuild its own trust before fixing the industry’s?
China and Russia Deploy Seductive Espionage Networks to Infiltrate U.S. Tech Sector
Apple’s ‘iPhone Air’ Collapses After One Month — Another Major Misstep for the Tech Giant
Graham Potter Begins New Chapter as Sweden Head Coach on Short-Term Deal
Ecuadorian President Daniel Noboa Alleges Poison Plot via Chocolate and Jam
Lakestar to Halt External Fundraising as Investor in Revolut and Spotify
U.S. Innovation Ranking Under Scrutiny as China Leads Output Outputs but Ranks 10th
Three Men Arrested in London on Suspicion of Spying for Russia
Porsche Reverses EV Strategy as New CEO Bets on Petrol and Hybrids
Singapore’s Prime Minister Warns of ‘Messy’ Transition to Post-American Global Order
Andreessen Horowitz Sets Sights on Ten-Billion-Dollar Fund for Tech Surge
US Administration Under President Donald Trump Reportedly Lifts Ban on Ukraine’s Use of Storm Shadow Missiles Against Russia
‘Frightening’ First Night in Prison for Sarkozy: Inmates Riot and Shout ‘Little Nicolas’
White House Announces No Imminent Summit Between Trump and Putin
US and Qatar Warn EU of Trade and Energy Risks from Tough Climate Regulation
Apple Challenges EU Digital Markets Act Crackdown in Landmark Court Battle
Nicolas Sarkozy begins five-year prison term at La Santé in Paris
Japan stocks surge to record as Sanae Takaichi becomes Prime Minister
This Is How the 'Heist of the Century' Was Carried Out at the Louvre in Seven Minutes: France Humiliated as Crown with 2,000 Diamonds Vanishes
China Warns UK of ‘Consequences’ After Delay to London Embassy Approval
France’s Wealthy Shift Billions to Luxembourg and Switzerland Amid Tax and Political Turmoil
"Sniper Position": Observation Post Targeting 'Air Force One' Found Before Trump’s Arrival in Florida
Shouting Match at the White House: 'Trump Cursed, Threw Maps, and Told Zelensky – "Putin Will Destroy You"'
Windows’ Own ‘Siri’ Has Arrived: You Can Now Talk to Your Computer
Thailand and Singapore Investigate Cambodian-Based Prince Group as U.S. and U.K. Sanctions Unfold
‘No Kings’ Protests Inflate Numbers — But History Shows Nations Collapse Without Strong Executive Power
Chinese Tech Giants Halt Stablecoin Launches After Beijing’s Regulatory Intervention
Manhattan Jury Holds BNP Paribas Liable for Enabling Sudanese Government Abuses
Trump Orders Immediate Release of Former Congressman George Santos After Commuting Prison Sentence
S&P Downgrades France’s Credit Rating, Citing Soaring Debt and Political Instability
Ofcom Rules BBC’s Gaza Documentary ‘Materially Misleading’ Over Narrator’s Hamas Ties
Diane Keaton’s Cause of Death Revealed as Pneumonia, Family Confirms
Former Lostprophets Frontman Ian Watkins Stabbed to Death in British Prison
"The Tsunami Is Coming, and It’s Massive": The World’s Richest Man Unveils a New AI Vision
Outsider, Heroine, Trailblazer: Diane Keaton Was Always a Little Strange — and Forever One of a Kind
Dramatic Development in the Death of 'Mango' Founder: Billionaire's Son Suspected of Murder
Two Years of Darkness: The Harrowing Testimonies of Israeli Hostages Emerging From Gaza Captivity
EU Moves to Use Frozen Russian Assets to Buy U.S. Weapons for Ukraine
Europe Emerges as the Biggest Casualty in U.S.-China Rare Earth Rivalry
HSBC Confronts Strategic Crossroads as NAB Seeks Only Retail Arm in Australia Exit
U.S. Chamber Sues Trump Over $100,000 H-1B Visa Fee
Shenzhen Expo Spotlights China’s Quantum Step in Semiconductor Self-Reliance
China Accelerates to the Forefront in Global Nuclear Fusion Race
Yachts, Private Jets, and a Picasso Painting: Exposed as 'One of the Largest Frauds in History'
Australia’s Wedgetail Spies Aid NATO Response as Russian MiGs Breach Estonian Airspace
McGowan Urges Chalmers to Cut Spending Over Tax Hike to Close $20 Billion Budget Gap
Victoria Orders Review of Transgender Prison Placement Amid Safety Concerns for Female Inmates
U.S. Treasury Mobilises New $20 Billion Debt Facility to Stabilise Argentina
French Business Leaders Decry Budget as Macron’s Pro-Enterprise Promise Undermined
Trump Claims Modi Pledged India Would End Russian Oil Imports Amid U.S. Tariff Pressure
×