GUÉP
SIF · Synthetic Identity Fraud

Your next customer may never have existed.

Generative AI has industrialized identity fraud: up to 80% of new-account fraud is already synthetic, and deepfakes grew 830% in Brazil in a single year. Kavuka detects the identity with no past: life depth, link graph, document forensics and deepfake defense.

Seconds
identity depth measured
Entire base
link graph
Injection + presentation
anti-deepfake liveness
Pre bust-out
maturation pattern monitored

Detection in production over credit portfolios, digital banks and marketplaces — identity depth measured on the deepest Brazilian data, with a link graph that lights up the whole fraud factory.

How much of your "default" was never default?

The digital Frankenstein

A real tax ID, an altered name, a fabricated history: the identity that builds credit for months and busts out at once — for someone who never existed.

The victimless fraud

No one disputes the bill of someone who does not exist; the loss enters the books as default and the root cause is never addressed.

The face factory

Deepfakes grew 830% in Brazil in a year; AI-generated documents and selfies defeat traditional KYC right at the front door.

Cost Up to 80% of new-account fraud is already synthetic identity, with global losses estimated between US$ 20 and 40 billion per year and over US$ 3.3 billion of exposure among US lenders alone. In Brazil, deepfakes grew 830% in twelve months. How much of your "default" was never default?

How it works

From fabricated identity to the alert before the bust-out.

  1. 01

    Measure the depth

    The depth of an identity in Brazilian data: real life leaves years of trace; the identity fabricated yesterday does not.

  2. 02

    Cross the graph

    Shared phones, addresses, devices and patterns reveal the whole factory — not just the isolated piece.

  3. 03

    Examine the artifact

    Document forensics + liveness with injection and presentation detection against deepfakes and AI-generated documents.

  4. 04

    Watch the maturation

    The synthetic identity's temporal pattern monitored by ML up to the pre bust-out alert — before the account drains everything and vanishes.

Coverage

The engine behind the detection

Six layers that traditional KYC lacks cross data, ties, artifacts and behavior — and surface what a fabricated identity cannot simulate: a past.

Identity depth

Depth across Brazilian data

Link graph

Shared phones, addresses and devices

Document forensics

Fonts, microprinting and physical consistency

Anti-deepfake

Liveness with injection and presentation detection

Session behavior

Behavioral biometrics and robotic signals

Maturation ML

Synthetic lifecycle and pre bust-out alert

Decision engine

Configurable score and policies by cohort

Anti-fraud integration

Native with Digital Onboarding and Fraud Prevention

Segments

Who decides with Kavuka detection

Credit

Credit, BNPL & Cards

The classic bust-out target: the synthetic identity builds a limit and busts out. Trigger: anomalous loss in new cohorts and early "default".

AML

Banks & Payments

Synthetic identities as money-laundering mule accounts and mass opening via emulators. Trigger: AML pressure and a wave of suspicious openings.

Abuse

Betting & Marketplaces

Multi-accounts for bonus and promo abuse — disposable synthetics at scale. Trigger: promo costs exploding.

Activation

Telecom & Benefits

Fraudulent line activation (feedstock for other synthetics) and fraud in programs and benefits. Trigger: activation default and integrity audits.

Legal shield

Detection your compliance team can defend

Synthetic identity detection was designed for data-protection law from the first record and for the explainability regulators demand. When they ask "how was this account opened?", the answer comes with rationale, source and date — separating fraud from credit in the books.

  • Adequate legal bases: legal obligation in regulated sectors; legitimate interest and fraud prevention elsewhere.
  • Score explainability: each risk decision with rationale, triggered signals and source layer.
  • Native integration with the AML/CFT pipeline and the fraud-prevention manual.
  • Per-record audit trail: source, date and the reason for the block or approval.
  • Public or legally permitted sources; encryption in transit and at rest.
Already operating this way
We ran the diagnostic and found that a relevant share of our new-cohort "default" was never credit — it was undiagnosed synthetic fraud.
Head of Credit · lending fintech
The link graph lit up a whole factory: the same phone across 14 records, one device that opened 9 accounts. We dismantled it at the source, not one by one.
Risk Director · digital bank
Liveness blocked a live video injection in our demo. It was exactly the attack our previous control missed.
Compliance Manager · payment institution

Find out how much of your base is already synthetic.

A diagnostic on a real sample of your portfolio, in 15 minutes: we run the sample and show how much of it never existed.

  • For businesses only. No purchase commitment.
  • Data used solely for commercial contact.
  • Enterprise leads answered within 1 business day.

In 15 minutes you see the platform in action and get a proposal for your volume.

What synthetic identity fraud is

A synthetic identity is the Frankenstein of digital crime: a fabricated identity combining real and fictitious data — a valid tax ID with an altered name, new phone and email, a fake address and a patiently built history. Unlike classic identity theft, there is no victim to complain: no one gets the wrongful bill, no one disputes it. The synthetic identity opens accounts, builds credit and reputation for months — and then "busts out": drains everything, disappears, and the company discovers it lent to someone who never existed.

Why has this become THE threat? Because generative AI has industrialized identity fabrication. Estimates indicate that up to 80% of new-account fraud is already driven by synthetic identities, with global losses between US$ 20 and 40 billion per year. Sumsub recorded over 300% growth in synthetic-document fraud in a single year, and deepfakes jumped from 500,000 files in 2023 to a projected 8 million in 2025, already accounting for around 40% of biometric-fraud attempts. Brazil is at the epicenter: an 830% rise in deepfake cases in twelve months, concentrating nearly half of Latin America's facial-manipulation cases.

Detection works in layers that traditional KYC lacks. Identity consistency asks whether the tax ID, name, date of birth and history add up — or whether the identity has no past, with a phone three days old and an email that never appeared anywhere. The link graph reveals the production line: the same phone across 14 records, the same address for 40 "people", the device that already created 9 accounts. Document forensics compares fonts, microprinting and physical consistency against AI-generated documents. Liveness with injection and presentation detection faces the deepfake injected into the camera and the filmed screen. Behavioral biometrics catches robotic form-filling and the "candidate" reading off another screen. And maturation ML learns the synthetic lifecycle, from the dormancy that builds a limit to the typical pre bust-out behavior.

The summary is simple: the identity that never lived does not pass. Real life leaves years of depth — ties, history and temporal consistency — that the identity fabricated yesterday cannot simulate, no matter how perfect its documents. Kavuka's edge is the depth of Brazilian data to measure that depth like no one else, combined with a national link graph, Brazilian document forensics and deepfake defense. The result is the correct diagnosis: the synthetic blocked at the door, the factory dismantled at the source, the alert before the bust-out — and the loss finally with the right name, fraud treated as fraud and credit treated as credit.

FAQ
What is synthetic identity fraud?

It is fraud with fabricated identities: real data (such as a valid tax ID) combined with fictitious data (name, contact, address) and, increasingly, AI-generated faces and documents. The identity opens accounts, builds credit and "busts out" — with no real victim to dispute it.

How is it different from identity theft?

In theft, there is a real victim who gets the bill and complains — detection comes from the dispute. In synthetic fraud, the "person" does not exist: no one complains, and the loss disguises itself as default for months or years.

Why does my traditional KYC miss it?

Because the synthetic identity is built to pass it: the tax ID is real, the document is convincing (or AI-generated) and the selfie may be a deepfake. Detection requires layers classic KYC lacks: identity depth, link graph, document forensics and deepfake defense.

What is "identity depth"?

It is the depth of the trace a real life leaves in data over the years — ties, history, temporal consistency. The identity fabricated yesterday lacks that depth, no matter how perfect its documents. Kavuka measures it on the deepest Brazilian data in the market.

How does the deepfake defense work?

On two fronts: presentation detection (the photo, screen or mask shown to the camera) and injection detection (the synthetic video injected directly into the camera stream, bypassing the lens) — the fastest-growing technique that simple liveness misses.

How do I know if my "default" hides synthetic fraud?

Typical signs: loss concentrated in new cohorts, debtors who vanish without any contact, limits maxed out quickly before default. The Kavuka diagnostic runs a portfolio sample and separates what is credit from what never was.

Does this integrate with my current onboarding?

Yes — detection runs inside the Kavuka Digital Onboarding and KYC pipeline, or via API over your current flow, in real time, with no extra friction for legitimate customers.

Let's talk

Your next high-impact decision starts with the right data.

Talk to a GUÉP specialist and find where applied intelligence creates the most value in your operation.