Card issuers approve credit at a scale few other lenders match. At year-end 2024, U.S. issuers held 608 million open general purpose credit card accounts and 185 million private label accounts, according to the Consumer Financial Protection Bureau [1]. Every one of those accounts began with an application, and the application is exactly where synthetic identities enter the portfolio and where synthetic identity fraud detection must begin. Nearly four in ten financial institutions reported synthetic identity fraud as a persistent (25%) or increasing (14%) problem in a Federal Reserve Financial Services survey of more than 360 institutions, as reported by Payments Dive [2]. For fraud strategy leaders, the conclusion is clear: synthetic identity fraud detection has to happen before the first swipe, not after the first charge-off. This article explains why single-point checks miss these profiles and what layered verification at account opening looks like.
Why synthetic identity fraud passes traditional credit checks
Synthetic identities are built, not stolen whole. A fraudster combines real and fabricated identity elements into a profile that belongs to no actual person, then applies for credit. Issuers often decline early applications, but each inquiry helps establish a credit file. Over time, the profile looks like a thin-file applicant: a young adult, a recent immigrant, or a consumer new to credit.
That resemblance is the problem. Card issuers serve thin-file applicants on purpose, because they represent legitimate growth. A synthetic profile is designed to sit inside that segment and clear the same underwriting rules. Once approved, it behaves well. It pays on time, requests limit increases, and opens additional accounts until the balances are large enough to justify walking away.
The stakes for card issuers that verify identity only once
Losses arrive after the limit is built
Because a synthetic account mirrors a good customer, the loss shows up late. By the time the account defaults, the issuer has already extended credit, granted increases, and booked the profile as performing. Collections efforts fail because no real person stands behind the account. Issuers often classify the loss as credit loss rather than fraud, which hides the true scope of the problem from the teams responsible for stopping it.
Identity fraud volume keeps pressure on account opening
Credit card fraud accounted for 449,032 of the 1,135,291 identity theft reports the Federal Trade Commission (FTC) received in 2024, a category that covers information misused on existing cards and on applications for new ones [3]. That is close to 40% of all identity theft reports.
Synthetic identity fraud also feeds adjacent schemes. The same Federal Reserve Financial Services survey found that nearly half of institutions described mule account activity as an increasing (18%) or persistent (29%) issue, according to Payments Dive [2]. Accounts opened under fabricated identities give fraud networks a ready place to move funds.
Compliance exposure follows weak documentation
Know Your Customer (KYC) verification obligations in lending require issuers to know who they are approving and to demonstrate it. When an approval rests on a single data match, the issuer has little evidence to show an examiner how it confirmed the applicant was real. Weak documentation turns a fraud loss into a compliance finding.
Why legacy identity verification falls short at account opening
Traditional identity verification processes for lenders treat identity as a yes-or-no check at one point in the application. A name, date of birth, and Social Security number either match a record or they do not. Synthetic profiles are engineered to pass exactly that test, because the fraudster has spent months making sure the elements line up in credit files.
Legacy methods also separate identity from the rest of the account opening journey. The issuer checks the applicant at submission, and then the process moves on. Nothing confirms that the person who accepts the cardholder agreement is the same person who was verified. Nothing produces a consolidated record of how the decision was made. Each gap is small on its own. Together, they give a well-built synthetic identity several places to slip through.
What works: layered identity verification for card issuers
Effective identity verification for card issuers layers three controls at the moment of account opening: identity proofing, signer verification, and documented KYC verification. Each layer answers a different question, and together they stop losses before a credit line exists.
Identity proofing that looks past the credit file
The first layer confirms the applicant is a real person who is who they claim to be. TrueYou™ identity verification does this work at application. It confirms identity and detects synthetic identities and identities stolen from deceased individuals, the profiles built to look legitimate. Fraud strategy teams get a clear signal before the approval decision, instead of a charge-off months later.
E-signature identity verification at the cardholder agreement
The second layer closes the gap between verification and commitment. TrueMark™ identity-verified e-signature applies e-signature identity verification, confirming the signer’s ID in real time at the point of signing. The issuer knows the person accepting the cardholder agreement is the verified applicant, and every signature carries a defensible audit trail. Together, TrueYou and TrueMark deliver a complete digital application.
Documented KYC verification for every decision
The third layer is evidence. TrueYou produces compliance documentation for each identity decision, so KYC and compliance teams hold a record of how every applicant was verified. When examiners or internal auditors ask how an account was opened, the answer is already on file.
This is where protection becomes growth. Every synthetic account stopped at application is credit that stays available for real customers. Faster, more accurate synthetic identity fraud detection also lets issuers approve legitimate thin-file applicants with confidence instead of declining them out of caution.
Practical takeaways for fraud strategy and KYC leaders
- Audit where identity is checked. Map every point in your account opening flow where identity is confirmed. If the answer is one data match at submission, you have a single point of failure.
- Treat thin-file growth segments as a verification priority. Apply layered identity proofing to the segments synthetic profiles imitate, so your team approves legitimate applicants and stops fabricated ones.
- Connect verification to the signature. Confirm that the person accepting the cardholder agreement is the person your team verified.
- Review unreachable-borrower charge-offs. Examine credit losses with no reachable borrower for synthetic indicators, so fraud teams see the full scope of the problem.
- Build the audit trail at the start. Capture KYC verification documentation at the moment of decision, not during an exam.
Decide with certainty before the first swipe
Synthetic identities succeed because they are built to pass a single check and then grow into high-limit accounts. With hundreds of millions of open card accounts and credit card fraud behind close to 40% of identity theft reports to the FTC, card issuers cannot rely on one data point at application. Layered synthetic identity fraud detection, combining identity proofing, signer verification, and documented KYC verification, stops the loss before the credit line exists.
Halcyon helps card issuers make that shift while keeping approvals moving for real customers. See how TrueYou identity verification for card issuers detects synthetic and deceased identities at application and documents every KYC decision for your compliance team. Request a demo and decide with certainty before the first swipe.
References
- Consumer Financial Protection Bureau. (2025). “The Consumer Credit Card Market.” https://files.consumerfinance.gov/f/documents/cfpb_consumer-credit-card-market-report_2025-12.pdf
- Payments Dive, reporting on Federal Reserve Financial Services. (2025). “Fed raises alarm on synthetic identity fraud.” https://paymentsdive.com/news/federal-reserve-alarm-synthetic-identity-fraud-scams/744337
- Federal Trade Commission. (2025). “Consumer Sentinel Network Data Book 2024.” https://www.ftc.gov/system/files/ftc_gov/pdf/csn-annual-data-book-2024.pdf
