Synthetic identity fraud is the creation of a fake persona by combining real data, such as a Social Security number, address fragment, or phone number, with invented details. The result can look credible enough to pass automated checks and begin a relationship with a lender, retailer, or service provider.
This matters because the identity may not belong to a single victim, so traditional identity-theft alerts can miss it. Attackers use synthetic identities to open accounts, obtain contracts, build trust over time, and then default or monetize the account. In cyber security, stolen customer records, leaked documents, and account data can help fraudsters make the synthetic profile appear consistent. Defenders look for weak signals such as reused identifiers, impossible address patterns, mismatched device or application data, rapid account growth, and approval overrides. Stronger KYC checks, identity-resolution tools, and fraud monitoring help expose these blended identities before they turn into financial loss.