Synthetic Identity Fraud for Payment Operators: How to Spot & Stop It

Introduction

Synthetic identity fraud is different from every other fraud type payment operators face, because the person committing it doesn't exist. There is no real individual to trace, no stolen wallet to recover, and no victim to file a police report. The fraudster is a fabricated identity constructed over months or years, designed specifically to pass verification checks.
For payment operators, acquiring banks, and high-risk merchant services providers, it represents the most difficult fraud vector in the industry today.

TL;DR

- Synthetic identity fraud cost the US financial sector an estimated $6 billion in 2025, making it the fastest-growing financial crime category (Experian, 2025)
- It accounts for 85% of all identity fraud losses in financial services (McKinsey, 2025)
- Synthetic identities typically take 12–24 months to build before deployment, making real-time detection extremely difficult
- An estimated 20% of new merchant account applications contain at least one synthetic identity signal (Featurespace, 2025)
- AI-powered detection identifies synthetic IDs 4x faster than manual review processes
- Payment operators and acquiring banks are primary targets because merchant onboarding creates the largest single-point access opportunity

What Is Synthetic Identity Fraud?

Synthetic identity fraud is the process of creating a fictitious identity by combining real and fabricated personal information. Unlike traditional identity theft, where a real person's credentials are stolen, synthetic fraud builds an entirely new persona from scratch.
A typical synthetic identity combines a real Social Security Number (often from a child, elderly person, or recent immigrant with little credit history) with a fabricated name, date of birth, and address. The result is an identity that passes basic verification checks because the SSN itself is genuine, even though the person it describes does not exist.
This makes it fundamentally different to detect. Standard fraud checks confirm that data elements are real. They are not designed to determine whether the combination of real elements represents a real person.

How Synthetic Identities Are Built

The construction of a synthetic identity is a slow, deliberate process. Fraudsters treat it as a long-term investment.
Phase 1 - Identity Construction (Month 1–3): The fraudster acquires a valid SSN, typically purchased from dark web markets for $5–$50, and pairs it with fabricated personal details: a new name, address, and date of birth. The combination is designed to have no existing credit file, making it appear as a "thin file" rather than a red flag.
Phase 2 - Credit Building (Month 3–18): The synthetic identity is used to apply for secured credit cards, store credit accounts, and small personal loans. Most will be rejected, but rejections themselves create credit bureau entries, establishing the identity as a real, active applicant. Approvals begin to appear over time as the credit file builds.
Phase 3 - Bust-Out (Month 18–24+): Once sufficient credit lines are established, the fraudster maxes out every account simultaneously and disappears. In the payment industry context, this phase includes using the synthetic identity to open merchant accounts, payment provider accounts, or business banking relationships, processing large volumes before vanishing.
According to a 2025 analysis by the Federal Reserve Bank of Boston, the average synthetic identity takes 22 months from creation to bust-out, longer than the detection window of most fraud monitoring systems.

Why Payment Operators Are the Primary Target

Merchant onboarding creates a uniquely exploitable opportunity. Payment operators, including acquiring banks, payment processors, and high-risk merchant services providers, must verify identities at speed to stay competitive. The pressure to approve merchants quickly creates gaps that synthetic identities are engineered to exploit.
Synthetic identities can bypass standard KYC checks because:
- The SSN validates against credit bureau records (it's real)
- The fabricated name and address are consistent across applications (the fraudster applies everywhere with the same false persona)
- The synthetic identity's credit file looks like a thin-file new business, which is exactly what legitimate new merchants also look like
A 2025 Featurespace report found that 20% of new merchant account applications processed by mid-market payment providers contained at least one signal associated with synthetic identity construction. The vast majority of these were not flagged during manual onboarding review.
For high-risk merchants and offshore merchants, categories that already operate with less established financial histories, the overlap between a "legitimate new high-risk merchant" profile and a "synthetic identity merchant" profile is uncomfortably close. This is precisely why fraudsters target these categories.

The Financial Scale of the Problem

The numbers put the threat in perspective.
Experian's 2025 Global Identity and Fraud Report estimated that synthetic identity fraud cost the US financial services sector $6 billion in 2025, a 40% increase over 2023. McKinsey's 2025 financial crime analysis found that synthetic identities now account for 85% of all identity fraud losses in financial services, up from 73% in 2022.
In the payment processing vertical specifically, synthetic identity fraud manifests through:
- Merchant account fraud: applying for and receiving payment processing capabilities using a synthetic business identity, then processing fraudulent transactions before the account is flagged
- Chargeback abuse: using synthetic identities to file false chargebacks against legitimate merchants, exploiting the dispute resolution process at scale
- Payment provider account abuse: opening accounts with payment providers using synthetic identities to receive fraudulent payouts
The card networks flagged approximately 2.8 million synthetic identity indicators across their merchant and cardholder portfolios in 2025, according to combined Mastercard and Visa fraud intelligence reporting. This figure has grown 62% since 2022.

How Synthetic Identities Slip Through Onboarding

Standard onboarding checks, even robust ones, have structural blind spots when it comes to synthetic identities.
What standard KYC catches:
- Invalid SSNs or national identity numbers
- Names that don't match a credit file
- Addresses with no utility or financial history
- Documents that fail optical character recognition or biometric liveness checks
What standard KYC misses:
- An SSN that is real but belongs to a different demographic profile (e.g., an SSN issued in 1965 attached to a stated date of birth of 1992)
- A name-SSN-address combination that is internally consistent but built over time to appear legitimate
- A credit file that was artificially cultivated across multiple lenders over 18+ months
- A business that has fabricated but professionally formatted incorporation documents
The gap between what checks confirm and what checks actually prove is where synthetic identities survive. A real SSN paired with a fabricated name will pass many document verification systems because the SSN lookup returns a valid result, the system doesn't flag the mismatch in demographics.

How to Detect Synthetic Identities

Detection requires moving beyond individual data element validation to pattern and relationship analysis.
SSN Issuance Velocity Analysis
The Social Security Administration's SSN issuance system assigns numbers in predictable geographic and date-of-issue patterns. A mismatch between an SSN's implied issuance date and the stated age of the applicant is a high-confidence synthetic identity signal.
A 2025 study by GIACT (now Refinitiv) found that SSN-date-of-birth mismatch is present in 73% of confirmed synthetic identity cases, making it the single most reliable individual detection signal available.
Credit File Velocity and Thin-File Pattern Analysis
Synthetic identities exhibit specific credit bureau patterns that differ from genuine thin-file consumers:
- A credit file that appeared from nothing within the last 12–36 months
- Multiple simultaneous credit applications across different lenders within a 6-month window
- No rental or utility payment history in the credit file despite stated residential address
- Inquiry patterns showing systematic credit-building across low-threshold lenders
Most individual lenders only see their own interactions with the identity. Network-level analysis, combining inquiry data across multiple institutions, reveals the systematic credit-building pattern that's invisible at the single-lender level.
Device and Digital Footprint Analysis
Synthetic identities typically lack the organic digital footprint that real identities accumulate over time. Checks that reveal this absence include:
- No verifiable social media presence under the stated name
- Email address created within the last 60–90 days (most people applying for merchant accounts have established email histories)
- Device fingerprint associated with multiple other recent identity applications
- IP geolocation inconsistent with stated business address
Fraudsters applying with synthetic identities at scale frequently reuse devices and networks, creating cross-application signals that are invisible when reviewing applications in isolation but obvious when analyzed across the portfolio.
Behavioral Biometrics During Onboarding
Modern onboarding platforms capture behavioral signals during the application process itself: typing cadence, form completion speed, copy-paste behavior, and mouse movement patterns.
Legitimate applicants complete onboarding forms with natural variation and occasional correction. Fraudsters using synthetic identities, particularly those operating at scale with pre-prepared data, show abnormal form completion patterns: unusually fast field completion, no typos or corrections, and data pasted directly into fields rather than typed.
BioCatch's 2025 fraud detection report found that behavioral biometric signals during onboarding identified synthetic identity applications with 81% accuracy, significantly higher than document verification alone at 52%.

Prevention Tools: A Comparison

Tool
Detection Signal
Synthetic ID Accuracy
Cost
Best For
SSN issuance analysis
DOB-SSN mismatch
73% of cases flagged
Low -Medium
First-line screening
Credit bureau velocity analysis
Thin-file pattern + inquiry velocity
High when combined
Medium
Pre-approval checks
Device + IP intelligence
Reused infrastructure across apps
Medium - High
Medium
Portfolio-level monitoring
Behavioral biometrics
Onboarding behavior anomalies
81% accuracy (BioCatch, 2025)
Medium -High
Application-stage detection
AI graph analysis
Cross-application relationship mapping
Highest (multi-signal)
High
Enterprise payment operators

Pros and Cons of Synthetic Identity Detection Approaches

Rule-Based Detection
Pros: Fast, low-cost, easy to implement, transparent logic Cons: Misses sophisticated identities built to pass rules; high false-positive rate on legitimate thin-file merchants (30%–40%), which creates friction for genuine high-risk merchant applications
AI and Machine Learning Detection
Pros: Identifies multi-signal patterns invisible to rules; learns from new fraud patterns; 4x faster detection than manual review; 40% lower false-positive rate (Featurespace, 2025) Cons: Requires significant training data; higher implementation cost; model decisions can be opaque (explainability challenges for compliance teams)
Manual Review
Pros: Human judgment catches edge cases; allows context-sensitive assessment Cons: Slow (3–10 business days per case); expensive at scale ($200–$1,000 per reviewed application); misses the cross-application patterns that define synthetic identity fraud

FAQ

Q: How is synthetic identity fraud different from identity theft?
Ans: Identity theft steals a real person's credentials. Synthetic identity fraud creates a new, fictitious person by blending real and fabricated data. There is no single victim, which is why it goes undetected far longer than traditional identity theft.
Q: Can high-risk merchant account applicants be screened for synthetic identities without impacting legitimate merchants?
Ans: Yes, with the right tools. AI-based screening combined with behavioral biometrics produces significantly lower false-positive rates than rule-based checks, reducing friction for legitimate high-risk merchants while maintaining detection accuracy for synthetic identities.
Q: Do offshore merchant applicants present a higher synthetic identity risk?
Ans: Offshore merchant onboarding introduces additional complexity because identity verification standards vary by jurisdiction. Payment providers onboarding offshore merchants should apply enhanced due diligence, including cross-border SSN/TIN equivalence checks and international credit bureau queries where available.
Q: How long before a synthetic identity-based merchant account shows fraud signals?
Ans: Initial fraud signals often take 3–6 months to surface through chargeback patterns or processing anomalies. By that point, the bust-out is typically already in motion. This lag is why pre-approval detection, catching synthetic identities during onboarding, is so much more valuable than post-approval monitoring.
Q: Are payment processors liable for synthetic identity fraud on their platforms?
Ans: Under card network rules, acquiring banks and payment processors bear significant liability for fraud facilitated through their merchant portfolios. Card network fines, chargeback liability, and potential regulatory action under AML statutes all apply, making detection investment economically essential, not optional.

The Bottom Line

Synthetic identity fraud will not be solved by faster document checks. The identities are designed to pass those checks. Detection requires layered analysis: SSN issuance validation, credit bureau velocity patterns, device intelligence, and behavioral biometrics, combined into a multi-signal model that no single data point alone can provide.
Payment operators who invest in this detection layer protect their portfolios, their card network relationships, and the legitimate high-risk merchants who depend on them for stable payment processing.
Explore TheFinRate's directory of KYC and fraud prevention tools, compared by synthetic identity detection capability, integration complexity, and cost for payment operators and high-risk merchant services providers. https://thefinrate.com/synthetic-identity-fraud-for-payment-operators-how-to-spot-stop-it/