Two Forms of Identity Theft: True Name vs. Synthetic

The difference between true name and synthetic identity theft comes down to whose identity is actually being used: true name theft is a criminal impersonating the real you with your real information, while synthetic identity theft is a criminal stitching together a fake person using one real piece of your data (usually a Social Security number) and inventing the rest. Both are federal crimes, both can damage your credit, and both call for a credit freeze and an IRS Identity Protection PIN, but they announce themselves very differently and the recovery path is not the same.

What True Name Identity Theft Is

True name theft happens when someone gets hold of your actual personal information, such as your Social Security number, date of birth, or driver’s license number, and uses it to pose as you. The Department of Justice describes it broadly as the use of another person’s personal data through fraud or deception, usually for economic gain. It splits into a few recognizable patterns.

Financial account fraud is the most common. A thief opens new credit cards or bank accounts in your name, runs up charges, and often redirects statements to a different address so you don’t catch on quickly. They may also drain existing accounts through unauthorized transfers.

Tax identity theft happens when someone files a federal return using your SSN to grab your refund, or uses your SSN for employment that gets reported to the IRS under your name. You usually learn about it from an IRS letter saying more than one return was filed in your name, or flagging wages from an employer you’ve never worked for.¹

Medical identity theft is someone using your identity to get medical care or prescriptions. Beyond the fraudulent bills, their medical history can contaminate yours, introducing wrong blood types, allergies, or medications into your file. Fraudulent insurance claims can also eat through your policy limits. It’s one of the harder forms to notice, because most people don’t read their medical records the way they read bank statements.

Criminal identity theft is the most alarming version. A thief gives your name and identifying information during a traffic stop or arrest, and the resulting record attaches to you. Victims have been denied jobs, housing, and licenses over charges they knew nothing about. Clearing the record generally means a court petition for expungement, a hearing, and then sending certified copies of the order to law enforcement and the DMV. It takes months.

What Synthetic Identity Theft Is

Synthetic identity theft doesn’t impersonate you. It uses one real piece of information, almost always a Social Security number, and pairs it with a fabricated name, date of birth, and address to build a brand-new “person” that doesn’t exist. The Federal Reserve defines it as “the use of a combination of personally identifiable information to fabricate a person or entity in order to commit a dishonest act for personal or financial gain.”²

Children’s SSNs are a favorite target because those numbers sit unused for years. A fraudster can pair a child’s SSN with any name and birthdate, and no one checks that child’s credit until they apply for their first loan.³ Numbers belonging to deceased people, recent immigrants, and elderly people who don’t actively use credit also get exploited.

The classic pattern is the bust-out. The fraudster applies for credit using the fake identity, gets rejected, but that first application creates a credit file at the bureaus. Over months or years they build the synthetic person’s history with small accounts, on-time payments, and gradually increasing limits. Once the profile looks strong, they max every available line at once and vanish. Because the “borrower” was never real, no victim calls a bank to dispute charges, and many of these losses get written off as credit defaults rather than flagged as fraud. The Federal Reserve notes the losses run into the billions annually across the U.S. payments system.²

How the Two Compare

The core distinction is simple, but it changes everything downstream about how the crime plays out.

Speed. True name thieves move fast, often draining accounts or maxing out credit within days or weeks. Synthetic thieves build for months or years before cashing out.
Who notices first. True name theft leaves obvious traces on the real person’s accounts and credit file, so victims generally catch on fairly quickly. Synthetic theft can go undetected for years because there’s no real person watching the fabricated identity.
Who absorbs the loss. True name victims deal with damaged credit, drained accounts, and disputed charges. Synthetic theft losses mostly land on lenders, because the defaulting “person” never existed.
Detection difficulty. Standard fraud monitoring catches true name theft reasonably well, since it shows up as sudden anomalous activity on a real account. Synthetic fraud mimics a legitimate borrower’s slow credit-building pattern and slips past most filters.

Warning Signs to Watch For

True name theft almost always leaves a trail, and the sooner you spot it the less damage piles up. USAGov and the FTC flag several reliable red flags.⁴

Accounts on your credit report that you didn’t open.
Credit denials that don’t match your actual history.
Bills or collection calls for debts you don’t recognize.
Mail that stops arriving, which can mean a thief filed a change of address.
Charges, withdrawals, or transfers you didn’t make.
An IRS letter saying more than one return was filed under your SSN, or that you earned wages from an unfamiliar employer.¹
Earnings on your Social Security Statement that aren’t yours. The SSA recommends reviewing posted earnings and reporting inconsistencies.⁵

Synthetic theft is quieter. The signs are subtle because the fabricated identity isn’t attached to anyone checking a credit report. A common discovery moment is a young adult applying for student loans and finding a credit history that predates them. For a parent, the practical move is to request a credit freeze on a child’s SSN as a preventive step, which blocks the credit file a synthetic identity needs to grow.

How to Protect Yourself From Both

No single step eliminates risk, but a few layered protections make you a much harder target, and the same tools work against both forms.

Credit Freeze

A credit freeze restricts access to your credit report so no one can open new accounts in your name. It’s free under federal law, and you place it separately with Equifax, Experian, and TransUnion, online, by phone, or by mail.⁶ When you need to apply for credit legitimately, you lift the freeze temporarily and re-freeze afterward. The whole process takes minutes online.

Don’t confuse a freeze with a credit lock. Locks are commercial products from the bureaus that can run up to $30 a month and don’t carry the same legal protections. A freeze does the same core job for free. Parents can place freezes on their minor children’s credit as well, which is the single strongest step against synthetic identity theft using a child’s SSN.

Fraud Alert

A fraud alert tells lenders to verify your identity before opening new credit in your name. It doesn’t block access the way a freeze does, but it adds a verification step. You only contact one bureau, and that bureau notifies the other two.⁷ An initial alert lasts one year and is open to anyone who suspects a problem. An extended alert lasts seven years but requires an FTC identity theft report or a police report. Both are free, and placing an initial alert also gets you a free credit report from each bureau.

IRS Identity Protection PIN

An Identity Protection PIN is a six-digit number assigned by the IRS that has to be on your federal return. Without it, no one can file using your SSN, which shuts down tax identity theft. A new PIN is issued each year, anyone with an SSN or ITIN can enroll, and parents can request IP PINs for dependents.⁸ It’s one of the most underused protections available.

Regular Credit Monitoring

Federal law entitles you to a free credit report from each bureau every 12 months, and the three bureaus have permanently extended free weekly reports through AnnualCreditReport.com.⁹ Checking regularly is the fastest way to catch unfamiliar accounts or inquiries early.

What to Do if You’re Already a Victim

Speed matters. The longer fraudulent accounts sit uncontested, the harder they are to unwind.

Start at IdentityTheft.gov, the FTC’s recovery portal. You describe what happened, and the system generates a personalized recovery plan plus the letters and forms you need to dispute fraudulent accounts with creditors and bureaus. It also creates your official FTC Identity Theft Report, which you’ll need for extended fraud alerts and some creditor disputes.¹⁰

Place an extended fraud alert or a credit freeze immediately. The extended alert requires the FTC report you just generated. A freeze is the stronger barrier because it blocks new credit outright rather than adding a verification step.⁷

Under the Fair Credit Reporting Act, you can also ask the credit bureaus to block fraudulent information that resulted from identity theft. You identify the specific items, prove your identity, and submit a copy of your identity theft report. Once a fraudulent debt is blocked, creditors notified of the block cannot sell or place that debt for collection.

Check your Social Security and tax records. Review your Social Security Statement for earnings you don’t recognize, and call SSA at 1-800-772-1213 if anything looks wrong.⁵ For tax issues, contact the IRS at 1-800-908-4490 and enroll in the IP PIN program.⁸

Pull all three credit reports at AnnualCreditReport.com and go through each one line by line. Flag every account, inquiry, and address you don’t recognize. Dispute each item with the bureau and the creditor who reported it. Check again in 30 to 60 days to confirm the removals held and nothing new has appeared.

Federal Penalties

Federal law takes identity theft seriously. Under the general identity theft statute, prison exposure runs up to 5 years for basic offenses, up to 15 years when the crime involves government-issued identification documents, birth certificates, or results in gains of $1,000 or more in a year, up to 20 years if it facilitates drug trafficking or a violent crime, and up to 30 years for terrorism-related offenses.¹¹

The aggravated identity theft statute adds a mandatory 2-year prison term on top of the underlying felony sentence, running consecutively, with the court barred from shortening the underlying sentence to compensate. For terrorism-related offenses, the add-on rises to 5 years. Probation is not available for an aggravated identity theft conviction.¹²

1
Federal Trade Commission. What To Know About Tax Identity Theft
2
FedPaymentsImprovement.org. Synthetic Identity Fraud
3
FedPaymentsImprovement.org. Protecting Your Kids From Synthetic Identity Fraud
4
USAGov. Identity Theft
5
Social Security Administration. What Should I Do if I Think Someone Is Using My Social Security Number?
6
USAGov. How To Place or Lift a Security Freeze on Your Credit Report
7
Federal Trade Commission. Credit Freezes and Fraud Alerts
8
Internal Revenue Service. Get an Identity Protection PIN
9
Federal Trade Commission. Free Credit Reports
10
Federal Trade Commission. How To Recover From Identity Theft
11
Office of the Law Revision Counsel. 18 U.S. Code 1028 – Fraud and Related Activity in Connection With Identification Documents
12
Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft