Synthetic identities

A person who does not exist

Most scams impersonate someone real: your bank, your boss, a supplier. A synthetic identity is different. It is a person who was never there at all, a persona assembled to look and behave like a real human so that it can gain your trust.

These personas are convincing because they are built from a mix of real and fake material. A real photo, or an AI-generated face, sits next to a made-up name. A genuine company name is borrowed to fill in an invented job title. A real street or school gives the profile a believable background. Enough true details are woven in that the whole thing reads as a real person with a real history.

How the pieces fit together

A synthetic identity is not one lie, it is a small ecosystem of them, arranged to reinforce each other:

• A profile on a social or professional network, with a plausible photo, a work history, and a few connections.
• Activity that makes it look alive: posts, comments, a following built up over time or bought.
• References that seem to back it up, a colleague who vouches for it, a company page, a second profile that confirms the first. Those references are often just as fake, part of the same set.

Because each part points at the others, checking one detail against another does not help much. The photo matches the name, the name matches the job, the job matches the company page, and all of it was fabricated together.

Where you meet them

You are most likely to run into synthetic identities where a stranger needs your trust quickly:

• a new contact who connects and soon proposes a deal, an investment, or a job that is a little too good;
• a buyer or seller on a marketplace who wants to move the conversation and the payment off the platform;
• a "recruiter" or "candidate" whose profile and references do not quite survive a second look;
• an online romance or friendship that grows fast and eventually turns to money.

The common thread is not the story. It is that a person you cannot independently verify is asking you to trust them with something valuable.

Be sceptical of the unverified

The defence is a mindset, not a gadget. When a new contact you have no shared history with asks for money, access, or sensitive information, treat unverified as unproven.

• Do not accept a profile as proof of a person. Anyone can make one.
• Verify through something outside their control: a phone call to an official number, a mutual contact you already trust, an in-person or known-video confirmation.
• Be wary when references all trace back to the same small circle, or cannot be checked independently.
• Slow down. Synthetic identities rely on you extending trust faster than you can confirm it.

A real person with a real reason to reach you can withstand a little verification. An identity that only exists to fool you cannot.