GRA · Financial Crime and Fraud Risk
Spatial financeWhere capital meets hazard, exposure and transition
Identity fraud
Identity fraud uses stolen, fabricated or impersonated identities to open accounts, take over existing ones and obtain credit. Digital onboarding, data breaches and AI-generated documents and voices make it easier. This page sets out how identity fraud develops, how it is measured, how identity verification and authentication respond, and who decides the standards.
How the work runs.
Alert triage and investigations
Identity fraud · Bank B monitoring · Today
- Alerts today2339
- Escalated to cases6pct of alerts
- Open cases older than 30 days88Watch
- Reports filed this month60Normal
Alert queue
- HRapid in-out through new accountsScenario TM-07 · score 861 h
- MTrade invoice price outlierScenario TB-03 · score 737 h
- MStructuring below thresholdScenario TM-02 · score 653 h
- LName match, sanctions listLikely false positive2 h
Counterparty network, case CS-7501
red: accounts under review
Case path
- Alertscenario
- Triageanalyst
- Investigatecase
- DecideMLRO
- Reportto FIU
- Feedbacktuning
Fig.Alert triage and investigations: example names and illustrative values, not a record or a live system.
Identity fraud: how the risk develops.
Identity compromise and synthetic identities. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Synthetic identities build history
Fraudsters combine real and invented details into new identities, build credit history over time, then borrow heavily and disappear. Victims may not exist to complain.
Breached data fuels takeover
Credentials and personal data from breaches let criminals pass knowledge checks and take over accounts, often after changing contact details.
Deepfakes challenge verification
AI-generated documents, faces and voices are used against remote onboarding and call-centre checks. Liveness detection and document checks race to keep up.
Assurance levels differ
Identity checks vary in strength. Low-assurance onboarding speeds growth and raises fraud; strong assurance adds friction and can exclude people without standard documents.
What identity fraud means for exposure, loss and capital.
The exposure, loss, scenario and capital views a risk officer, supervisor or ministry of finance would ask for, with the frameworks they report against. Structures follow supervisory and actuarial practice. Values are illustrative: never prices, ratings or advice.
Transmission channels
How a shock in identity fraud reaches credit, market, underwriting, liquidity and operational risk, and feeds back.
What is measured, and how well.
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Identity fraud cases recorded | count | annual | Fraud prevention databases | REPORTED |
| Account takeover incidents | count and value | annual | Industry reports | REPORTED |
| Synthetic identity losses | currency | periodic | Industry studies | ESTIMATED |
| Remote onboarding with liveness checks | share of onboarding | periodic | Firm records | DECLARED |
| False rejection rate in identity verification | share of genuine applicants rejected | periodic | Verification provider data | ESTIMATED |
| Data breaches exposing personal data | count and records exposed | annual | Regulator breach statistics | Published statistics |
Where the evidence comes from.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| Cifas Fraudscape reports | UK identity fraud and account takeover trends | Free to read, Cifas terms |
| FTC Consumer Sentinel identity theft data | Reported identity theft in the United States | Public domain |
| FATF guidance on digital identity | Use of digital identity in due diligence | Free, FATF terms |
| NIST Digital Identity Guidelines (SP 800-63) | Identity proofing and authentication assurance levels | Public domain |
| Federal Reserve synthetic identity fraud resources | Definitions and mitigation of synthetic identity fraud | Public domain |
Who decides, and what the evidence serves.
Financial Crime and Fraud Risk prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| Bank and fintech onboarding functions | What identity assurance to require for which products | Fraud data, false rejection rates and inclusion evidence |
| Regulators and standard setters | Which identity standards satisfy due diligence | FATF guidance and national identity frameworks |
| Digital identity scheme operators | How to certify identity providers | Assurance frameworks and audit results |
| Data protection authorities | How breaches are prevented and sanctioned | Breach records and enforcement |
Outputs this topic produces
- Guide to identity fraud types and assurance levels
- Brief on deepfakes in remote onboarding
- Method note on balancing fraud prevention and inclusion
- Questions for boards on onboarding controls
What experts ask.
Identity fraud researchers ask how to verify who someone is, remotely and at scale.
- How do synthetic identities pass onboarding checks, and how can they be detected?
- How vulnerable are remote verification methods to deepfakes and document forgery?
- How do data breaches fuel identity fraud?
- How can digital identity systems improve verification while protecting privacy and inclusion?
- How should institutions balance fraud prevention with access for people without standard documents?
Identities assembled, borrowed and faked.
Identity fraud draws on a supply of personal data from breaches, phishing and data brokers. Account takeover uses stolen credentials to access existing accounts. Synthetic identity fraud combines real elements, such as a valid identifier, with invented details, creating an identity with no single real victim who would notice. These identities may be nurtured for months before large-scale borrowing and disappearance.
Remote onboarding relies on document checks, biometric matching and data verification, each of which can be attacked with forged documents, deepfake video or manipulated data. Digital identity systems with strong assurance can raise the bar, but they bring their own risks of exclusion, concentration and privacy intrusion.
How the evidence is built, and where it stops.
- 01
Identity verification analysis
Evaluating verification methods with digital identity and public digital systems. Attack methods evolve quickly.
- 02
Anomaly detection
Detecting synthetic identities with machine learning and network science. Synthetic identities resemble thin-file legitimate customers.
- 03
Breach data analysis
Linking breaches to fraud patterns. Linkage is often uncertain.
- 04
Inclusion assessment
Assessing who is excluded by verification requirements. Data on excluded groups is limited.
How it is studied, and what the methods cannot say.
- 01Digital identity and public digital systemsAssurance levels for onboarding · Defending against deepfakes · Inclusion testingApplied here
- 02Artificial intelligence and machine learningReal-time fraud scoring · Alert prioritisation · Fairness in fraud controlsApplied here
- 03Data engineering, interoperability and stewardshipScreening data quality · Monitoring coverage checks · Retention and minimisationApplied here
- 04Network science and contagionMule network detection · Ownership chain analysis · Cross-institution patternsApplied here
Questions and answers.
What is synthetic identity fraud?
What is account takeover?
What is liveness detection?
What is a synthetic identity?
Can deepfakes defeat video verification?
Does stronger verification exclude people?
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GRASend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGlobal Risks AllianceSee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring an exposure or capital question to the Alliance.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.