By Robert Wallos, Director of Enterprise Architecture in Financial Services at Kyndryl

Synthetic identity fraud (SIF) is a type of fraud where criminals create a fictitious identity by combining real and fake information to fabricate a “synthetic” identity for financial crime. Often, this involves combining a real social security number acquired from a cyber breach with a fake name, date of birth and other personal details. The identity is then used to open accounts, obtain credit and commit various types of financial fraud. Traditional fraud detection systems frequently overlook this complex fraud pattern. 

Estimated to hit $23 billion in annual losses by 2030, SIF is the fastest-growing type of financial crime in the U.S., according to the London Stock Exchange Group. While SIF criminals are typically quite skilled, they can’t operate without a highly evolved ecosystem of forums, marketplaces and dark web services to support their efforts.

Here are five ways financial institutions can defend themselves and their customers against synthetic identity theft.

 

Assess your situation

Banks can determine their exposure to SIF crime by reviewing credit card or loan charge-off losses. Implementing advanced categorization methods to track and report fraud loss and activity will provide a clearer picture of its impact. This deeper insight will help in developing a plan for targeted countermeasures, ultimately strengthening defenses against fraudulent activities. You need to know what’s happening before you can act effectively.
 

Know the regulations

Ultimately, every bank is globally connected. That means every bank — and the firms that provide their services — is subject to emerging global privacy and cybersecurity regulations to some extent. These regulations empower banks to implement robust anti-fraud measures while fully complying with legal standards. This alignment protects the institution from legal repercussions and enhances its ability to effectively combat fraudulent activities, ensuring a secure and trustworthy banking environment. Your journey begins with making sure your institution is compliant.
 

Encryption is your friend

How can you make the best use of personal identifiable information (PII) while protecting it? Encryption and tokenization tools can mask PII while still enabling its use in advanced fraud detection systems and by skilled analysts.
 

Make use of the latest, fit-for-purpose technologies

The world is full of digital solutions, but not every tool is right for every situation — and the landscape changes daily. You’ll want platforms that can accommodate massive datasets that include information from client onboarding, credit reports, transactions, application data, device and channel metadata, social media and third-party content. You’ll need an IT infrastructure that enables aggregating and analyzing structured and unstructured data sources to provide visibility and control across operations. And the ability to infuse AI and machine learning across your IT estate will be essential.
 

Create, train and support a rapid response team

The days of siloed approaches to business and technology are long gone. Successful organizations share information across different lines of business and make leadership decisions together. Your rapid response team should have the technical chops and business acumen to identify and document SIF activity and implement countermeasures quickly while remaining mindful of business and technical priorities.
 

Synthetic identity fraud is catching many financial institutions off guard. This type of criminal activity evolves so quickly that it may appear to move faster than any efforts to stop it. But the right preparation can stifle any advantages of speed. And developing the right responses can minimize business impact when the inevitable attacks occur.
 

Learn more about synthetic identity fraud and some ways to combat it.

Robert Wallos

Director of Enterprise Architecture in Financial Services