What it is
Identity theft is when criminals use your personal details to open accounts, take out credit or take over existing accounts. Synthetic identity fraud goes further: real and invented data are combined into a new “person” who builds credit, then disappears with the money.
How it works
- Personal data is stolen through data breaches, phishing, mail theft or social media.
- Criminals open accounts or loans, or take over yours (often with a SIM swap to intercept codes).
- Synthetic identities build a credit history over months before a “bust-out”.
- Accounts may also be used as money mule accounts to move fraud proceeds.
Red flags
- Letters or emails about accounts you didn’t open.
- Your phone suddenly losing signal (possible SIM swap).
- Unexpected credit checks or debt-collection contact.
- Missing post or bank statements.
A real-world example
Lenders often record synthetic identity losses as bad debt rather than fraud, because there is no single real victim to complain — which makes the true scale hard to measure.
How to protect yourself
- Freeze your credit where your country allows it.
- Use unique passwords and app-based two-factor authentication.
- Ask your mobile provider for a SIM-swap PIN or port-out protection.
- Share less personal information publicly.
If it happened to you
- Contact the bank or lender where the fraud happened and ask them to close the account.
- Place a fraud alert or credit freeze with the credit bureaus.
- Report it — in the US at IdentityTheft.gov, elsewhere to the police.
- Change passwords and secure your email account first.
Step-by-step help by country: I’ve been scammed — what now?
The rules
Know-your-customer (KYC) and anti-money laundering rules require financial firms to verify identities. The EU’s new AML rulebook, applying from July 2027, tightens customer due diligence across the bloc.
Source: www.identitytheft.gov
