Synthetic Identity Theft: How It Works and How to Protect Yourself

Synthetic identity theft is when a criminal combines a real Social Security number, often belonging to a child or someone who rarely uses credit, with a made-up name, date of birth and address to create a new identity that doesn’t belong to any single real person. They use it to build a credit history, borrow as much as possible, then disappear. The best protection is a credit freeze, including a child credit freeze for your kids, and checking that your Social Security number isn’t tied to names or records you don’t recognize.

It’s harder to spot than ordinary identity theft, because the fraud usually doesn’t appear under your name. This guide explains how it works, who it affects and what you can do.

How synthetic identity theft works

Traditional identity theft impersonates you: someone uses your name, SSN and details to open accounts as you. Synthetic identity theft builds someone new, sometimes called a “Frankenstein” identity, from a mix of real and invented parts.

1. Get a real SSN. Criminals obtain Social Security numbers from data breaches, stolen documents or criminal marketplaces. Numbers belonging to children, elderly people, deceased people or people who rarely use credit are attractive because nobody is watching them.
2. Attach fake details. They pair the number with a different name, date of birth, address, phone and email.
3. Create a credit file. They apply for credit. The early applications are often declined, but the attempts themselves can lead a credit bureau to create a new file for the synthetic identity.
4. Build credit over time. They may get a small starter card, pay it on time, get added as an authorized user on other accounts, and slowly raise the identity’s credit score. This can go on for months or years.
5. “Bust out”. Once the identity has good credit and high limits, they max out every account and stop paying. The identity vanishes, leaving lenders with losses and a trail of bad debt tied to a real SSN.

Because the name on the accounts isn’t yours, you may never get a bill, a collection call or an alert. That’s why synthetic identity fraud can go undetected for a long time.

Who is most at risk

Children

Children’s SSNs are a particular target. A child’s number usually has no credit history attached, and nobody checks a child’s credit, so fraud can run for years. Many families only find out when the child turns 18 and applies for a student loan, a first credit card, an apartment or a job, and discovers bad debt or a damaged record linked to their number.

Older adults and people who rarely use credit

Older adults who no longer apply for credit, and people with thin or no credit files, are less likely to notice new activity tied to their SSN.

People whose data was in a breach

If your SSN has been exposed in a data breach, it may be available to criminals. That doesn’t mean it will be misused, but it’s a reason to lock things down.

Deceased people

The SSNs of people who have died can be misused, especially before records are updated. Families managing an estate can ask the credit bureaus to note the death on the person’s credit file.

How synthetic identity theft can affect you

Lenders usually absorb most of the direct financial loss. But the person whose SSN was used can still be hurt:

• Your credit file gets mixed up with the synthetic identity’s accounts, addresses or name variations.
• Collectors may eventually find you through the SSN and pursue debts that aren’t yours.
• Tax and benefits problems: if someone reports wages under your SSN, you may get an IRS notice about income you didn’t earn, or see earnings you don’t recognize on your Social Security record.
• Background check problems for jobs, apartments or loans, if records tied to your number look like yours.
• A young adult’s financial start is delayed while they untangle fraud committed before they were old enough to notice.

Warning signs to watch for

• Your credit report shows names, addresses or accounts that aren’t yours, even if the name is slightly different.
• You get mail, calls or collection notices for someone else at your address, using your SSN or a name you don’t know.
• An IRS notice mentions income from an employer you’ve never worked for.
• Your Social Security earnings record (viewable through a my Social Security account) shows wages you didn’t earn.
• You’re denied credit, or asked extra verification questions, for reasons you can’t explain.
• Your child gets pre-approved credit offers, bills or collection calls in their name.
• You’re told a credit report already exists for your child. Most children shouldn’t have one.

How to protect yourself and your family

1. Freeze your credit at all three bureaus

A credit freeze makes it hard for anyone to open new credit using your SSN, whether under your name or not, because most lenders can’t access the file. It’s free by federal law. Contact Equifax, Experian and TransUnion separately.

2. Freeze your children’s credit

For a child under 16, a parent or guardian contacts each bureau and provides documents such as the child’s birth certificate and Social Security card, plus proof of your identity and your authority to act for the child. Each bureau explains its own process, and some handle these requests by mail. The freeze stays in place until it’s lifted, and the young person can manage it themselves once they’re old enough.

Similar protections are available for adults under guardianship or conservatorship, so check with each bureau if you care for someone in that position.

3. Check whether your child already has a credit report

You can ask each bureau to search for a credit file under your child’s SSN. If one exists and your child has never had credit, that’s a red flag. A sensible time to check, even if you’ve frozen their credit, is well before they turn 18, so there’s time to fix problems before they apply for loans or jobs.

4. Check your own records regularly

• Pull your free credit reports from AnnualCreditReport.com and look for name variations, unfamiliar addresses and accounts.
• Create a my Social Security account and review your earnings record once a year.
• Get an IRS Identity Protection PIN to make tax fraud using your SSN harder.

5. Guard your SSN and your children’s

Only give out a Social Security number when it’s genuinely required. When a school, sports club, doctor’s office or business asks for your child’s SSN, ask why they need it and whether another identifier will do. Store the cards somewhere safe, not in a wallet, and shred documents that show the number.

6. Take breach notices seriously

If a company notifies you that your SSN was exposed, freeze your credit if you haven’t, and take up any genuine free monitoring they offer. Our guide to identity theft protection explains what monitoring does and doesn’t catch.

For broader habits, see our guide to ways to prevent identity theft.

What to do if you find synthetic identity fraud

1. Freeze your credit (or your child’s) at all three bureaus if it isn’t already frozen.
2. Contact each bureau that shows unfamiliar information. Explain that your SSN is being used with a different identity and ask how to remove or separate the information.
3. Contact the businesses where fraudulent accounts were opened, through their fraud departments, and ask them to close the accounts and confirm in writing.
4. Report it to the FTC at IdentityTheft.gov. You’ll get a report and a recovery plan. Our guide to the FTC identity theft report explains how to use it.
5. Deal with tax or earnings problems with the IRS and the Social Security Administration. See our guides on IRS identity theft and social security identity theft.
6. Keep a log of every call, letter and case number.
7. Talk to a lawyer if collectors keep pursuing you, you’re sued, or criminal records appear under your SSN. A consumer protection or identity theft lawyer can explain your options.

A worked example

This is an illustrative scenario, not a real client. When Keisha’s son turns 17, she asks each credit bureau whether a credit file exists under his SSN. One bureau finds a file in a different name, with an address in another state, several credit cards and two accounts in collections.

She sends that bureau the documents it asks for to prove her son’s identity and her authority as his parent, explains that the file belongs to a synthetic identity and asks for the information to be removed. She files a report at IdentityTheft.gov, sends copies to the card issuers’ fraud departments with dispute letters and freezes her son’s credit at all three bureaus.

It takes several rounds of letters over a few months. By the time her son applies for a student loan, his file is clean and frozen, and he knows how to lift the freeze when he needs to.

Common mistakes to avoid

• Assuming it can’t happen because nothing shows under your name. Synthetic fraud often uses a different name.
• Never checking your child’s credit. The absence of bills doesn’t mean the number is unused.
• Freezing only one bureau. Lenders and criminals may use any of them.
• Handing out your child’s SSN whenever a form asks. Ask whether it’s really needed.
• Paying debts that aren’t yours to make collectors go away. Dispute them in writing instead.

If identity fraud has left false records or damaging content attached to your name online, our personal reputation management service can help clean up what people see when they search for you.

Frequently asked questions

What is the difference between synthetic identity theft and regular identity theft?

Regular identity theft impersonates a real person using their name and details. Synthetic identity theft creates a new, partly fake identity, usually by pairing a real Social Security number with a made-up name and date of birth, so the fraud often doesn’t appear under the real person’s name.

Why are children targeted for synthetic identity theft?

A child’s SSN usually has no credit history and nobody is checking it, so criminals can use it for years before anyone notices. Families often find out only when the child applies for credit, a job or an apartment as a young adult.

Does a credit freeze stop synthetic identity theft?

It helps a lot. A freeze blocks most lenders from accessing a credit file, so new accounts are much harder to open. It doesn’t fix fraud that has already happened, and it doesn’t stop an SSN being misused for things like employment, so check your earnings and tax records too.

How do I freeze my child's credit?

Contact each of the three credit bureaus separately and follow its process for minors. You’ll typically need your child’s birth certificate and Social Security card, proof of your own identity and proof you’re the parent or guardian. It’s free for children under 16.