Skip to content
Calcrivo

Synthetic Identity Risk Calculator

Estimate synthetic identity fraud exposure from onboarding volume, verification depth, document checks and portfolio value.

Inputs

applications/year
%
%
currency
months
%

Expected Annual Fraud Loss

$2,159,136

Synthetic Applications per Year

1,693per year

Synthetic Identities Approved

480per year

Control Strength

37.0/ 100

Fraud Cost per Application

$17.99

Average Dwell Before Bust-Out

14.0months

Highest-Value Control

Add document authenticity and biometric liveness — data-only matching cannot detect a fabricated identity

Step by step

  1. Values used

    Applications per year = 120,000 applications/year; Baseline synthetic application rate = 1.20 %; Identity verification depth = Data-only bureau match — 6; Device and behavioural signals = Basic device and IP checks — 5; Cross-institution consortium data = Internal history only — 6; Applicants with thin or no credit file = 22 %; Average credit or account exposure = 4,500 currency; Typical months before bust-out = 14 months; Synthetic identities detected before loss = 55 %

  2. Synthetic Identity Risk

    syntheticApplications = applications × baselineRate × thinFileUplift; approved = syntheticApplications × controlPassRate × (1 − detectionRate); loss = approved × averageExposure.

  3. Expected Annual Fraud Loss

    = 2,159,136

  4. Synthetic Applications per Year

    = 1,693 per year

  5. Synthetic Identities Approved

    = 480 per year

  6. Control Strength

    = 37.0 / 100

  7. Fraud Cost per Application

    = 17.99

  8. Average Dwell Before Bust-Out

    = 14.0 months

How it works

Synthetic identity fraud is patient: a fabricated identity is cultivated for a year or more, builds a genuine credit history, then busts out across several institutions at once. Verification depth is the dominant control because data-only bureau matching validates that a record exists, which a synthetic identity has deliberately created. Thin-file populations raise exposure because there is no history to contradict the fabrication, and consortium data is what breaks the cross-institution pattern. Because the identity is fabricated rather than stolen, no real victim ever complains — the loss is written off as credit default, which is why the true rate is systematically under-measured.

Formula

Synthetic Identity Risk

syntheticApplications = applications × baselineRate × thinFileUplift; approved = syntheticApplications × controlPassRate × (1 − detectionRate); loss = approved × averageExposure.

thinFileUplift
Up to 1.8× for a large thin-file population, where synthetic identities hide
controlPassRate
Share of synthetic applications the verification stack lets through
detectionRate
Share caught after approval but before loss
averageExposure
Credit or account balance lost per successful bust-out

Frequently Asked Questions

How is Synthetic Identity Risk calculated?

syntheticApplications = applications × baselineRate × thinFileUplift; approved = syntheticApplications × controlPassRate × (1 − detectionRate); loss = approved × averageExposure. Synthetic identity fraud is patient: a fabricated identity is cultivated for a year or more, builds a genuine credit history, then busts out across several institutions at once. Verification depth is the dominant control because data-only bureau matching validates that a record exists, which a synthetic identity has deliberately created. Thin-file populations raise exposure because there is no history to contradict the fabrication, and consortium data is what breaks the cross-institution pattern.

Why does Synthetic Identity Risk matter?

Because the identity is fabricated rather than stolen, no real victim ever complains — the loss is written off as credit default, which is why the true rate is systematically under-measured.

What values do I need to enter?

This calculator takes 9 inputs: Applications per year, Baseline synthetic application rate, Identity verification depth, Device and behavioural signals, Cross-institution consortium data, Applicants with thin or no credit file, Average credit or account exposure, Typical months before bust-out, Synthetic identities detected before loss. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.

Why does a thin file increase risk?

Because the fraud relies on the absence of contradicting history. A synthetic identity looks exactly like a genuine young or newly-arrived applicant, and any check that leans on established history has nothing to compare against.

Is biometric liveness enough on its own?

No. Liveness proves a real person is present, not that the claimed identity belongs to them, and synthetic identities are often operated by a real accomplice. It works combined with document authenticity and cross-institution signals.

You might also need