TL;DR: Synthetic identities built around the World Cup were used to defeat ticketing controls, harvest data and create delayed fraud exposure, according to Mitek Systems. Enrollment controls and identity proofing have to stop treating ticketing sign-up as the only risk point.
Editorial analysis by NHI Mgmt Group, based on content published by Mitek Systems: “The World Cup is over. The synthetic identities it built are just getting started.”.
Key questions
Q: Why does synthetic identity fraud often surface late in loss reporting?
A: Synthetic identity fraud often surfaces late because the identity is built gradually and can remain credible until credit is extended, account activity matures, or a delinquency is reported.
Q: How should organisations detect synthetic identities after onboarding?
A: They should treat onboarding as the start of verification, not the end.
Q: What are the signs that synthetic identity fraud is being used on an account?
A: Common warning signs include unusually large unsecured debt, a spike in recent credit inquiries, and an account history that does not fit the person’s age.
Practitioner guidance
- Move fraud controls upstream into enrolment Apply stronger verification at the first point of account creation, especially where demand spikes create bot and synthetic identity pressure.
- Monitor account aging as a fraud signal Track whether new accounts are accumulating normal-looking behaviour too quickly, because aging is what turns synthetic profiles into monetisable assets.
- Join fraud and credit loss telemetry Correlate charge-offs, check fraud and application fraud indicators so synthetic identity activity is not hidden inside routine portfolio losses.
Bottom line: Synthetic identity fraud is most dangerous when it is treated as a one-time onboarding issue rather than a lifecycle risk.
Glossary terms: Synthetic Identity Fraud, Charge-Off, Identity proofing, KYC Bypass
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Scarcity events turn identity proofing into a fraud assembly line: when demand exceeds supply, the control failure happens at enrolment, not at the point of access. Synthetic identity fraud thrives because the first accepted application becomes the seed of a longer-lived asset. Fraud teams need to treat event onboarding as a lifecycle issue, not a single transaction decision.
A question worth separating out:
Q: What is the difference between account takeover and synthetic identity fraud in fintech?
A: Synthetic identity fraud starts with an identity that blends real and fabricated details and is usually used to open a new account or obtain a product. Account takeover begins when an attacker uses stolen credentials to seize an existing legitimate account. Both can cause losses, but they require different controls, because one targets onboarding and the other targets established trust.
👉 Read our full editorial: World Cup synthetic identities bypass ticket checks and fuel later fraud