Loading story…
Auto lenders are facing a significant rise in fraud losses due to criminals exploiting synthetic identities to pose as superprime borrowers. According to a recent report by TransUnion, individuals with credit scores above 720, typically considered the lowest risk, are now generating three times more fraud losses than subprime borrowers. This trend is attributed to fraudsters creating synthetic identities that appear to be 'perfect borrowers,' allowing them to bypass traditional fraud detection measures. The average loss per superprime auto loan fraud case reached $53,796 in 2023, compared to $16,015 for subprime cases. Fraudsters are leveraging the fact that lenders focus their most advanced fraud prevention tools on subprime applicants, leaving prime and superprime applications with minimal scrutiny. This has resulted in an 'inverted risk pyramid,' where the highest-value transactions are the least protected. Criminals using synthetic identities often engage in bust-out fraud, acquiring multiple vehicles—sometimes six to ten—in a short period, which significantly increases the financial impact. The economic incentive for targeting superprime loans is clear, as the potential payoff is much higher than with lower credit tiers. The report highlights a critical blind spot in the lending industry's risk management strategies, emphasizing the need for enhanced controls across all credit segments. Lenders are urged to reassess their fraud prevention frameworks to address the growing threat posed by sophisticated synthetic identity schemes. The data underscores the evolving tactics of fraudsters, who are now exploiting the trust placed in high-credit-score applicants. Industry experts warn that without a shift in focus, auto lenders will continue to suffer substantial losses. The findings also suggest that synthetic identity fraud is not limited to auto lending and may impact other sectors where high-value, low-scrutiny transactions occur. The report calls for greater collaboration between lenders, credit bureaus, and technology providers to detect and prevent synthetic identity fraud. Enhanced identity verification processes and real-time monitoring are recommended as key measures to mitigate this risk. The growing prevalence of synthetic identity fraud represents a major challenge for the financial services industry, requiring immediate and coordinated action. Failure to adapt could result in escalating losses and erosion of trust in the lending system. The TransUnion report serves as a wake-up call for the industry to address vulnerabilities in their fraud prevention strategies.
See the actors and campaigns active against you right now.
1 event from the most recent confirmed update back to the earliest known activity.
BankInfoSecurity and GovInfoSecurity published reports describing fraudsters posing as highly creditworthy "perfect borrowers" to obtain loans and cause significant losses to lenders. The provided references do not include underlying incident details, victim names, or dated milestones beyond the publication of the reports.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Fraudsters are increasingly exploiting outdated and weak state business registration systems in the United States to create synthetic businesses at minimal cost, often less than $150 per entity. These synthetic entities, fabricated using AI-generated documents and stolen data, can yield fraudulent payouts exceeding $100,000 per identity. The lack of robust identity verification and address validation in many state systems allows criminals to register fake businesses with ease, turning what was once a niche threat into a significant and mainstream risk for the financial sector. Andrew La Marca, vice president of operations at Dun & Bradstreet, highlights that artificial intelligence tools are now being used to automate the creation of convincing bank statements and invoices, further accelerating the formation of synthetic entities. Private equity firms and lenders are advised to be vigilant for red flags during due diligence, as online registries and insufficient controls continue to facilitate this growing fraud vector. The rapid evolution of synthetic entity fraud underscores the urgent need for improved regulatory oversight and modernization of business registration processes to mitigate systemic risk.
Jun 29, 2026
Artificial intelligence-powered scams, particularly those leveraging deepfakes and synthetic identities, escalated significantly in 2025. Experts warn that the quality and volume of deepfakes have reached a level where they are nearly indistinguishable from authentic media for most people, enabling fraudsters to deceive victims on a global scale. Voice cloning and visual deepfakes have been used to facilitate large-scale scams, while the emergence of synthetic entities has further blurred the line between real and fake identities, complicating fraud detection for financial institutions. The misuse of stablecoins and lax cryptocurrency oversight have created new avenues for cross-border fraud, with experts predicting these trends will intensify in 2026. Industry leaders emphasize the urgent need for improved data, reporting, and regulatory measures to counteract these evolving threats. The rapid proliferation of generative AI tools has enabled "pig butchering" scams and other fraud operations to target vast populations, underscoring the growing risk posed by synthetic media and AI-driven deception in the financial sector and beyond.
Jun 29, 2026
Security researchers have observed a significant evolution in digital identity fraud, with threat actors increasingly leveraging automation, AI, and coordinated infrastructures to perpetrate large-scale attacks. Fraudulent activities now include the use of synthetic personas, credential replay, and high-speed onboarding attempts, all orchestrated through systems that learn and adapt over time. Deepfake experimentation and document spoofing have become part of connected ecosystems, where machine-driven agents iterate on attack methods using feedback from failed attempts. This shift means that fraud is less reliant on skilled human operators and more on scalable, automated workflows, making detection and prevention more challenging for security teams. In parallel, the 2025 holiday shopping season has seen a surge in industrialized online retail fraud, with threat actors registering hundreds of fake domains to impersonate major brands and deceive consumers. These campaigns utilize automated tools to mass-produce convincing counterfeit websites, often promoted via social media, to harvest sensitive financial data and distribute malware. The infrastructure supporting these attacks is highly organized, allowing rapid deployment and evasion as domains are taken down. The convergence of these trends highlights the growing sophistication and scale of automated fraud, posing significant risks to both organizations and individuals.
Jun 30, 2026