Financial Crime and Fraud Risk
The Global Risks Alliance (GRA)
Identity fraud uses stolen, fabricated or impersonated identities to open accounts, take over existing ones and obtain credit. Digital onboarding, data breaches and AI-generated documents and voices make it easier. This page sets out how identity fraud develops, how it is measured, how identity verification and authentication respond, and who decides the standards.
Identity fraud · Bank B monitoring · Today
red: accounts under review
Fig.Alert triage and investigations. Design wireframe with placeholder names and illustrative values, not a record or a live system.
Identity fraud is the use of stolen, fabricated or impersonated identities to open or take over accounts and obtain credit. Synthetic identities, breached data and AI-generated documents and voices drive it. Onboarding functions, standard setters, identity schemes and data protection authorities hold the decisions.
Night-time lights and population density, the footprint of electrified, connected activity, framed on Mexico; each layer is a dated NASA product.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 2
Connected activity
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
Night-time lights and population density, the footprint of electrified, connected activity, framed on Mexico.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.
Layers and dates
Identity compromise and synthetic identities. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Fraudsters combine real and invented details into new identities, build credit history over time, then borrow heavily and disappear. Victims may not exist to complain.
Credentials and personal data from breaches let criminals pass knowledge checks and take over accounts, often after changing contact details.
AI-generated documents, faces and voices are used against remote onboarding and call-centre checks. Liveness detection and document checks race to keep up.
Identity checks vary in strength. Low-assurance onboarding speeds growth and raises fraud; strong assurance adds friction and can exclude people without standard documents.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Synthetic identity | An identity created by combining real and fabricated details that may match no real person. |
| Account takeover | Criminal control of a legitimate customer's account, often after stealing credentials. |
| Identity assurance level | The degree of confidence that a person is who they claim to be. |
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Identity fraud cases recorded | count | annual | Fraud prevention databases | REPORTED |
| Account takeover incidents | count and value | annual | Industry reports | REPORTED |
| Synthetic identity losses | currency | periodic | Industry studies | ESTIMATED |
| Remote onboarding with liveness checks | share of onboarding | periodic | Firm records | DECLARED |
| False rejection rate in identity verification | share of genuine applicants rejected | periodic | Verification provider data | ESTIMATED |
| Data breaches exposing personal data | count and records exposed | annual | Regulator breach statistics | OFFICIAL |
The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.
Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| Cifas Fraudscape reports | UK identity fraud and account takeover trends | Free to read, Cifas terms |
| FTC Consumer Sentinel identity theft data | Reported identity theft in the United States | Public domain |
| FATF guidance on digital identity | Use of digital identity in due diligence | Free, FATF terms |
| NIST Digital Identity Guidelines (SP 800-63) | Identity proofing and authentication assurance levels | Public domain |
| Federal Reserve synthetic identity fraud resources | Definitions and mitigation of synthetic identity fraud | Public domain |
Financial Crime and Fraud Risk prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| Bank and fintech onboarding functions | What identity assurance to require for which products | Fraud data, false rejection rates and inclusion evidence |
| Regulators and standard setters | Which identity standards satisfy due diligence | FATF guidance and national identity frameworks |
| Digital identity scheme operators | How to certify identity providers | Assurance frameworks and audit results |
| Data protection authorities | How breaches are prevented and sanctioned | Breach records and enforcement |
Identity fraud researchers ask how to verify who someone is, remotely and at scale.
Identity fraud draws on a supply of personal data from breaches, phishing and data brokers. Account takeover uses stolen credentials to access existing accounts. Synthetic identity fraud combines real elements, such as a valid identifier, with invented details, creating an identity with no single real victim who would notice. These identities may be nurtured for months before large-scale borrowing and disappearance.
Remote onboarding relies on document checks, biometric matching and data verification, each of which can be attacked with forged documents, deepfake video or manipulated data. Digital identity systems with strong assurance can raise the bar, but they bring their own risks of exclusion, concentration and privacy intrusion.
Evaluating verification methods with digital identity and public digital systems. Attack methods evolve quickly.
Detecting synthetic identities with machine learning and network science. Synthetic identities resemble thin-file legitimate customers.
Linking breaches to fraud patterns. Linkage is often uncertain.
Assessing who is excluded by verification requirements. Data on excluded groups is limited.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.