Skip to content
ENExplore Calculators

Synthetic Identity Risk Calculator

Estimate synthetic identity fraud exposure from onboarding volume, verification depth, document checks and portfolio value.

About Synthetic Identity Risk Calculator

Synthetic identity fraud is patient: a fabricated identity is cultivated for a year or more, builds a genuine credit history, then busts out across several institutions at once. Verification depth is the dominant control because data-only bureau matching validates that a record exists, which a synthetic identity has deliberately created. Thin-file populations raise exposure because there is no history to contradict the fabrication, and consortium data is what breaks the cross-institution pattern. Because the identity is fabricated rather than stolen, no real victim ever complains — the loss is written off as credit default, which is why the true rate is systematically under-measured.

Formula

Synthetic Identity Risk

syntheticApplications = applications × baselineRate × thinFileUplift; approved = syntheticApplications × controlPassRate × (1 − detectionRate); loss = approved × averageExposure.

thinFileUplift
Up to 1.8× for a large thin-file population, where synthetic identities hide
controlPassRate
Share of synthetic applications the verification stack lets through
detectionRate
Share caught after approval but before loss
averageExposure
Credit or account balance lost per successful bust-out

Worked example

With the default values below, Synthetic Identity Risk Calculator returns Expected Annual Fraud Loss of $2,159,136. Change any input above and every figure here is recalculated in your browser.

Inputs used

Applications per yearaccepts 1–100,000,000 applications/year
120,000 applications/year
Baseline synthetic application rateaccepts 0–100 %
1.2 %
Identity verification depthone of Document plus biometric liveness plus bureau match — 2, Document with automated authenticity checks — 4, Data-only bureau match — 6, Self-declared details — 9
Data-only bureau match — 6
Device and behavioural signalsone of Device fingerprint, velocity and behavioural analytics — 2, Basic device and IP checks — 5, None — 8
Basic device and IP checks — 5
Cross-institution consortium dataone of Consortium and shared-signal participation — 2, Internal history only — 6, No historical checks — 9
Internal history only — 6
Applicants with thin or no credit fileaccepts 0–100 %
22 %
Average credit or account exposureaccepts 0–10,000,000 currency
4,500 currency
Typical months before bust-outaccepts 1–120 months
14 months
Synthetic identities detected before lossaccepts 0–100 %
55 %

Results

Expected Annual Fraud Loss
$2,159,136
Synthetic Applications per Year
1,693 per year
Synthetic Identities Approved
480 per year
Control Strength
37.0 / 100
Fraud Cost per Application
$17.99
Average Dwell Before Bust-Out
14.0 months
Highest-Value Control
Add document authenticity and biometric liveness — data-only matching cannot detect a fabricated identity

Step by step

  1. 1Values used
  2. 2Synthetic Identity Risk
  3. 3Expected Annual Fraud Loss= 2,159,136
  4. 4Synthetic Applications per Year= 1,693 per year
  5. 5Synthetic Identities Approved= 480 per year
  6. 6Control Strength= 37.0 / 100
  7. 7Fraud Cost per Application= 17.99
  8. 8Average Dwell Before Bust-Out= 14.0 months

Assumptions and limits

  • The result is derived only from the 9 inputs listed above. Anything not among them is not part of the calculation.
  • In particular, this calculator does not take inflation, tax or fees or charges into account.
  • Figures are rounded for display to 2 decimal places, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.

How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.

Frequently Asked Questions

How is Synthetic Identity Risk calculated?

syntheticApplications = applications × baselineRate × thinFileUplift; approved = syntheticApplications × controlPassRate × (1 − detectionRate); loss = approved × averageExposure. Synthetic identity fraud is patient: a fabricated identity is cultivated for a year or more, builds a genuine credit history, then busts out across several institutions at once. Verification depth is the dominant control because data-only bureau matching validates that a record exists, which a synthetic identity has deliberately created. Thin-file populations raise exposure because there is no history to contradict the fabrication, and consortium data is what breaks the cross-institution pattern.

Why does Synthetic Identity Risk matter?

Because the identity is fabricated rather than stolen, no real victim ever complains — the loss is written off as credit default, which is why the true rate is systematically under-measured.

What values do I need to enter?

This calculator takes 9 inputs: Applications per year, Baseline synthetic application rate, Identity verification depth, Device and behavioural signals, Cross-institution consortium data, Applicants with thin or no credit file, Average credit or account exposure, Typical months before bust-out, Synthetic identities detected before loss. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.

Why does a thin file increase risk?

Because the fraud relies on the absence of contradicting history. A synthetic identity looks exactly like a genuine young or newly-arrived applicant, and any check that leans on established history has nothing to compare against.

Is biometric liveness enough on its own?

No. Liveness proves a real person is present, not that the claimed identity belongs to them, and synthetic identities are often operated by a real accomplice. It works combined with document authenticity and cross-institution signals.

Synthetic Identity Risk Calculator | Calcrivo