Skip to content
←Back to glossaryCyber

Synthetic identity

A person who never existed, assembled from real data (a Social Security number, a birth date) and invented details, whose fraud can go unnoticed for a long time because there is no victim to report it.

Definition

Synthetic identity fraud fabricates, from borrowed real identifiers and invented details, a person who never existed, with a coherent face, voice and documents, where impersonation borrows a real one. The worst of it is that there is no victim. No real person sees the fraud, so nobody reports it, and losses grow quietly, the Federal Reserve cited 6 billion dollars of losses for American lenders in 2016, a fifth of that year's credit losses, and its more recent work speaks of 20 billion a year for American payments, a figure practitioners consider understated because the fraud is booked as bad debt. For insurers it is a special case, because pooling assumes there is a real, identifiable and accountable person behind every policy. A synthetic identity puts ghost policyholders into the portfolio, with nothing tying them to the real world.

Its 3 cross-references, woven across the glossary's 18 categories
Synthetic identity: Cyber glossary illustration, AlgoPolis
Example

Textbook case: someone who does not exist can take out a policy, file a claim and collect an indemnity, and remain pure fiction throughout.

Read next
Put it to work
Sources
  • Federal Reserve Bank of Boston, "A victimless crime? Hardly", August 2022; Federal Reserve industry definition (FedPayments Improvement, FraudClassifier model)
  • Federal Reserve, 2019 report on synthetic identity fraud in the U.S. payment system (citing Auriemma Group); FedPayments Improvement, note on the miscategorization of synthetic identity fraud
Stay informed

Follow the research

One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.

No spam, one-click unsubscribe, no data ever sold.