Identity laundering is the practice of hiding the real operator behind layers of false, borrowed, or stolen identities. In cybercrime, this can mean using fake accounts, compromised email addresses, proxy profiles, mule phones, forged documents, or accounts registered in other names to make attribution harder.
It matters because identity is a control point in both attacks and defenses. If criminals can separate their actions from their true identity, they can open accounts, move money, rent infrastructure, and communicate without linking those activities back to one person or group. Defenders look for laundering patterns such as reused devices, unusual login geography, repeated account handoffs, and clusters of profiles that share payment methods, IP ranges, or messaging habits. In investigations, identity laundering often appears alongside cross-border activity, where each layer is designed to slow tracing, complicate legal requests, and obscure the final operator.