Synthetic Identity Theft: The Hidden Fraud That Uses Your Parent's Social Security Number

Your mother's credit is frozen. Her accounts are monitored. She hasn't applied for a new credit card in a decade. And yet someone just used her Social Security number to open a credit card in a name she has never heard of, with an address in a state she has never visited, for a person who does not exist.

This is synthetic identity theft, and it is the fastest-growing type of financial fraud in the United States. Unlike traditional identity theft, where a criminal steals your parent's full identity and pretends to be them, synthetic identity theft takes just one real piece of information — usually a Social Security number — and combines it with fabricated details to create an entirely new person. That fake person applies for credit, builds a credit history over months or years, and then vanishes after maxing out every account.

The reason this matters for families caring for elderly parents is that seniors are by far the most common source of the stolen Social Security numbers that fuel this fraud. And the damage is harder to detect, harder to prove, and harder to fix than any other form of identity theft.

How synthetic identity theft works

Traditional identity theft is straightforward: a criminal pretends to be your parent. They use your parent's name, date of birth, Social Security number, and address to open accounts. Your parent eventually notices because the accounts show up on their credit report.

Synthetic identity theft is different in a critical way. The criminal creates a new identity by combining:

• A real Social Security number (often stolen from a senior, child, or deceased person)
• A fake name that doesn't match the SSN holder
• A fake date of birth that doesn't match the SSN holder
• A fabricated address — sometimes a real apartment number at a real address, sometimes entirely made up

The result is a "person" who has never existed before. The Social Security number is real and will pass basic verification checks, but nothing else about the identity matches your parent.

The credit-building phase

Unlike a traditional identity thief who tries to make a big score immediately, a synthetic identity thief plays a long game. Here is the typical pattern:

Step 1: Apply and get rejected. The fraudster applies for a credit card using the synthetic identity. The application is denied — there is no credit file for this "person." But the application itself creates a new credit file at the bureaus, associating the stolen SSN with the fake name.

Step 2: Become an authorized user. The fraudster adds the synthetic identity as an authorized user on another account (often another synthetic identity that already has credit). This gives the new identity a credit history without requiring approval.

Step 3: Apply again. With a credit file now established and some history borrowed from the authorized user account, the synthetic identity applies again — and this time, gets approved for a small credit line.

Step 4: Build credit patiently. The fraudster makes small purchases and pays on time, month after month. The credit score climbs. Credit limits increase. New accounts are opened. This phase can last six months to two years.

Step 5: Bust out. Once the synthetic identity has accumulated enough available credit — often $50,000 to $200,000 across multiple accounts — the fraudster maxes out every card, takes cash advances, and disappears. This is called the "bust-out."

The banks write off the losses. The synthetic person vanishes. And your parent's Social Security number has been at the center of it all without their name appearing on a single account.

Why seniors are the primary target

Criminals overwhelmingly target elderly Americans' Social Security numbers for synthetic identity fraud. Three factors make seniors ideal victims:

Seniors rarely apply for new credit. A 75-year-old who hasn't opened a credit card in years has a dormant Social Security number from the credit bureaus' perspective. When a synthetic identity uses that SSN and gets rejected, the new credit file is created under the fake name without conflicting with active accounts. If the SSN belonged to a 30-year-old who regularly applies for credit, the mismatch would be flagged much sooner.

Seniors don't monitor for this. Most identity theft monitoring — including the monitoring built into services like LifeLock and Aura — watches for someone opening accounts using your parent's name. If a criminal uses your parent's SSN with a completely different name, many monitoring tools will miss it because they are looking for the name match.

Seniors' SSNs are widely available. Decades of data breaches mean that older SSNs have appeared in more breach databases than newer ones. The 2017 Equifax breach alone exposed 147 million Social Security numbers, and many of those belonged to older Americans with long credit histories.

Why synthetic identity theft is so hard to detect

This is what makes synthetic identity fraud uniquely dangerous for families:

It doesn't show up on your parent's credit report. Because the accounts are under a different name, pulling your parent's credit report will not reveal the synthetic accounts. The only thing connecting your parent to the fraud is the SSN — and credit reports are organized by name, not SSN alone.

Credit freezes don't fully prevent it. A credit freeze is still the best first-line defense against traditional identity theft, and you should absolutely have one in place. But a credit freeze prevents new accounts under your parent's name. A synthetic identity uses a different name, and some creditors may not cross-reference the SSN against the freeze file in the same way.

It may surface years later. Bust-outs can happen two or three years after the initial use of the SSN. By the time the fraud is discovered, the trail is cold, the fake identity has been abandoned, and the collections accounts may have been sold multiple times.

It can complicate legitimate applications. If your parent does need to apply for credit — say, for a medical financing plan or a new account after a move — the presence of a synthetic identity associated with their SSN can cause application denials, confusing bureau records, or mismatched data that takes months to untangle.

How to detect synthetic identity theft

Because this fraud does not show up on a standard credit report, you need to look in different places.

Request a Social Security earnings statement

Log into my.ssa.gov (or call 1-800-772-1213) and request your parent's Social Security Statement. Review the earnings history carefully. If someone has been using your parent's SSN for employment — which synthetic identity thieves sometimes do to build legitimacy — the earnings will show up here as income your parent never earned. Unfamiliar employers or income in years your parent was retired are red flags.

Monitor IRS tax filings

Synthetic identities sometimes file tax returns using the stolen SSN to claim refunds. If your parent files their taxes and receives a rejection notice saying a return was already filed, this is a strong indicator that their SSN is being used by someone else. You can also request an IRS Identity Protection PIN (IP PIN) at irs.gov/ippin, which prevents anyone else from filing a federal tax return using your parent's SSN.

Use the SSA's myE-Verify self-check

The myE-Verify Self Check tool at e-verify.gov lets you verify that your parent's SSN is not being used for employment by someone else. This is a free, voluntary service and can surface mismatches between the SSN and the name on file.

Watch for unexplained mail

If your parent starts receiving mail addressed to unfamiliar names at their address, pay attention. Synthetic identity fraudsters sometimes use a real address during the credit-building phase, especially if they obtained the SSN along with an address from a data breach.

Check for unfamiliar inquiries on the credit report

While the synthetic accounts themselves won't appear under your parent's name, the initial applications may generate hard inquiries on your parent's credit file if the SSN match triggers a hit on the existing file. Unexplained hard inquiries from unfamiliar lenders are worth investigating.

What to do if you suspect synthetic identity theft

If you believe your parent's SSN is being used for synthetic identity fraud, take these steps:

File an identity theft report with the FTC. Go to IdentityTheft.gov and report the fraud. Select "someone used my information to open new accounts" even though the accounts are not in your parent's name — the SSN misuse is the core issue.

Contact the Social Security Administration. Call 1-800-772-1213 and report that the SSN is being used fraudulently. In extreme cases, the SSA can issue a new SSN, though this is a last resort because it complicates credit history, benefits, and tax records.

File a police report. The report creates a legal record that supports your FTC complaint and any disputes with credit bureaus or creditors.

Place a fraud alert and credit freeze. Place a fraud alert with one bureau (it propagates to all three) and freeze credit at Equifax, Experian, and TransUnion. This won't undo the synthetic identity, but it creates additional barriers.

Request an IRS IP PIN. This six-digit number prevents anyone from filing a tax return using your parent's SSN. Request it at irs.gov/ippin — it's free and changes annually.

Prevention: what you can do now

Freeze credit at all three bureaus. Even though credit freezes are not a perfect defense against synthetic fraud, they raise the difficulty level significantly.

Review the SSA earnings statement annually. Make it part of your yearly routine — unfamiliar employers or income in retirement years are red flags.

Minimize SSN sharing. Medical offices, utility companies, and other businesses often ask for an SSN when they don't need one. Provide an alternative identifier whenever possible and reserve the SSN for situations where it's legally required: taxes, employment, government benefits, and credit applications.

Secure paper mail. Stolen mail remains a common source of SSN-bearing documents like tax forms, Social Security statements, and Medicare notices. Make sure your parent's mailbox is secure.

Synthetic identity theft is insidious precisely because it is invisible to the victim. Your parent may never know their SSN was used — until a tax return is rejected, an application is denied, or a mysterious collections notice arrives years later. The earlier you build defenses and establish monitoring, the better positioned you are to catch it.

For a complete scam prevention toolkit — including printable defense sheets, call-handling scripts, and a family protection plan — the Elder Scam Shield guide covers every major fraud type targeting seniors, with step-by-step instructions for locking things down.