Synthetic Identity Fraud Meets Tradelines: How a Fake Credit File Grows on a Real Account

Picture a bird building on a branch that isn't its own. From a distance the nest looks real, it holds weight, and nobody can tell the branch was borrowed. That is close to how a synthetic identity behaves inside the credit system. Someone assembles a person who does not exist, attaches that invented person to a real, well-aged account, and waits until a credit file forms around it and starts to look like a stranger with a history.

Here is the direct answer, up front: a synthetic identity is a fabricated person seeded with a stolen or made-up Social Security number, and one documented way it is "grown" is by being added as an authorized user on genuine, aged tradelines until the file appears scoreable. An authorized user, or AU, is someone allowed to piggyback on another person's credit card history. Ordinary AU arrangements between family members are common and legal. The fraud is not the tool; it is who is holding it and why.

We wrote this so you can recognize the pattern, read your own nest for signs of it, and know exactly what to do if a fake profile ever leans on your account. None of this asks you to panic. It asks you to look closely, and looking closely is a skill you can build in an afternoon.

Start with what the word "synthetic" is doing. A stolen identity copies a real person wholesale. A synthetic identity is a collage: a Social Security number that belongs to someone else, often a child, a recently deceased person, or a number that has never been used, stitched to a name, a birthdate, and an address that were chosen precisely because they do not all trace back to one living human. Because the invented person has no past, the builder's whole project is to manufacture one that a lender's software will accept.

Fraud analysts at SentiLink and the industry writer behind Frank on Fraud have documented how this works in practice. The number gets applied to credit somewhere, gets declined, and, counterintuitively, that first inquiry can be enough to make the bureaus open a thin file in the fabricated name. From that seed, the builder needs age, activity, and a payment record. Those are the three things a brand-new file lacks, and they are exactly the three things an old, healthy account can appear to lend. The patience involved is what makes these files so hard to catch: a builder may nurse a fabricated identity quietly for months or years, letting it accumulate the small, boring markers of a real financial life before ever cashing out.

This is where tradelines enter the story. In an authorized-user arrangement, the primary account holder's history, the account's age, its limit, its on-time payments, can report on the authorized user's file too. For a real relative building credit, that is a gift. For a synthetic identity, it is camouflage. The builder gets the fabricated person added onto a real, aged card, and overnight the empty file inherits years of seasoning it never earned. SentiLink and Frank on Fraud both describe this alongside a related "fake-tradeline shell game," where profiles are shuffled onto and off of accounts to keep the borrowed history looking fresh.

Sit with that last figure for a second. Thirteen thousand dollars, walked away from, on a person who was never real. Multiply it across enough grafted files and you get numbers with a lot of zeros, but resist the urge to trust the giant round figures that float around online, because the credible measurements are the lender-exposure ones above. If you have ever wondered why account-opening feels slower and more suspicious than it used to, this is part of the reason. It is worth taking a few minutes now to pull your own reports and see what your file says about you.

Regulators do act in this space. In the Federal Trade Commission's (FTC) "Credit Game" matter, a civil enforcement action, not a criminal prosecution, the agency sued Michael and Valerie Rando (matter 192-3059). A court issued a temporary restraining order on May 3, 2022, the FTC proposed a permanent ban in December 2022, and more than $3.5 million in refunds went out to consumers in June 2025. The agency's allegations included filing thousands of false identity-theft reports on consumers' behalf and pitching credit piggybacking. Notice the shape of it: the harm ran in two directions, toward the lenders who got defrauded and toward ordinary consumers whose names and files got used as raw material.

Here is the short routine to run:

• Look for accounts you do not recognize, especially ones where you are listed as an authorized user on a card you never asked to join.
• Check for a name, address, or employer variant that is close to yours but not quite right; synthetic files love small mismatches.
• Watch for inquiries from lenders you never applied to, which can be the first fingerprint of a number being tested against your file.

If everything traces back to you and the people you actually share credit with, that is a healthy sign. If something does not, you have found a thread worth pulling. Do not assume a single odd line means you are a victim; mixed files and clerical mismatches happen constantly. The point of the routine is simply to notice, then let the dispute process sort out what is real.

Suppose Marcus, a hypothetical rebuilder, pulls his report and sees an AU card he never joined, opened two years before he would have been eligible. He does not argue with a chatbot or pay anyone to make the problem vanish. He disputes the item with each bureau that shows it, keeps copies, and if a lender is involved he notifies them too. That is the whole playbook. It is unglamorous, it is free, and it is yours by law, which is a good reason to check now rather than after a loan application is already in motion.

And keep the categories straight in your own head. Adding your teenager to your card so their file grows on your good habits is not fraud; it is exactly what authorized-user status was built for. The problem is never the branch. It is a stranger tying an invented bird to it. Knowing the difference keeps you from either overreacting to a legitimate account or waving past a fabricated one, and it lets you use the tools that genuinely help without tripping over the ones that harm.

Come back to that borrowed branch from the beginning. What makes synthetic-identity fraud unsettling is not some exotic technology. It is that it runs on the ordinary machinery of credit, the same seasoning and piggybacking that help millions of honest people build a file. The fabricated bird is only convincing because the branch underneath it is real.

That is also the reassuring part. Because the machinery is ordinary, so is the defense. You read your own reports, you recognize what belongs in your nest and what does not, you freeze what you are not using, and you exercise your dispute rights when something is off. None of that requires special access or money. If you do one thing after reading this, pull your three reports this week and look, calmly, line by line. A file you check is a file that is much harder to grow a lie on, and a stronger nest for the things you are actually trying to build.

1. How does a synthetic identity use tradelines?

• A synthetic identity is seeded with a stolen or fabricated Social Security number, then added as an authorized user on real, aged credit card tradelines so the empty file inherits age, limit, and payment history it never earned. SentiLink and Frank on Fraud document this practice and a related fake-tradeline shell game.

2. How much do synthetic identities cost lenders?

• TransUnion measured more than $3.3 billion in U.S. lender exposure to synthetic identities on newly opened accounts for the year ending 2024, and $2.7 billion in the first half of 2025 across auto, bank card, retail card, and unsecured personal loans. Equifax states the average charged-off loss per known synthetic identity is about $13,000.

3. Was the FTC "Credit Game" case a criminal prosecution?

• No. FTC v. Michael and Valerie Rando (matter 192-3059) was a civil enforcement action by the Federal Trade Commission. A court issued a temporary restraining order on May 3, 2022, the FTC proposed a permanent ban in December 2022, and more than $3.5 million in refunds went out in June 2025.

4. How do I check my credit file for a synthetic identity?

• Pull all three free bureau reports and read line by line for authorized-user accounts you never joined, name or address variants that are close but not quite yours, and inquiries from lenders you never applied to. Dispute anything that is not yours; under FCRA Section 611 the bureau must investigate.

5. Is buying an authorized-user tradeline the same as synthetic identity fraud?

• No. Buying an authorized-user tradeline to pad a real person's file is a legal-but-debated practice with its own risks. Attaching a fabricated human to an account is fraud. The line is the identity, not the technique.

6. Does a "Section 609 dispute letter" remove a synthetic tradeline?

• No. Section 609 is really just your right to a copy of your file, not a magic eraser. The bureau's duty to investigate a disputed, inaccurate item lives in Section 611 of the Fair Credit Reporting Act, so that is the right you file under when a listing is not yours.

7. How do I stop my Social Security number from seeding a synthetic file?

• Freeze your credit at all three bureaus when you are not actively applying for anything; a freeze is free and stops new accounts from opening in your name, which makes your number useless as a seed. Guard your Social Security number, and be especially protective of your children's numbers.