Synthetic Identity Fraud: Why Due Diligence Must Go Beyond Documents

Artificial intelligence is making it easier to create convincing documents, professional profiles, images and communications that can support a false or misleading identity.

For businesses conducting due diligence, this creates an important challenge.

Traditional verification often relies on a combination of documents, public records, professional history and digital information. These sources remain valuable, but increasingly sophisticated fraud means they should not always be considered in isolation.

A convincing document or professional profile can form part of the evidence supporting an identity. It should not automatically be treated as conclusive proof that every underlying claim is genuine.

What Is Synthetic Identity Fraud?

Synthetic identity fraud involves combining genuine, altered or fabricated information to create an identity that appears credible.

This may involve:

• Genuine personal information belonging to another individual.
• Fabricated employment history.
• Manipulated identity documents.
• False professional qualifications.
• Artificially generated photographs.
• Invented company roles.
• False references.
• Created or manipulated online profiles.

The objective is often to create enough consistency across different information sources to pass standard verification checks.

Synthetic identities can potentially be used in financial fraud, corporate deception, recruitment fraud and other situations where establishing trust is important.

Why AI Makes False Identities More Convincing

Fraudulent identities are not new.

What has changed is the speed and quality with which supporting material can be created.

Generative AI can assist in producing:

• Professional-looking documents.
• Convincing written communications.
• Artificial images.
• Voice recordings.
• Video content.
• Corporate biographies.
• Website material.
• Social-media content.

That does not mean every unusual digital profile is fraudulent.

It does mean that businesses should be cautious about assuming several pieces of apparently consistent digital information automatically represent independent corroboration.

Multiple sources can sometimes originate from the same false narrative.

Documents Remain Important

The growth of synthetic identity fraud does not make documentary verification obsolete.

Identity documents, corporate records, professional qualifications and other formal records remain essential components of due diligence.

The issue is how those documents are used.

Where a relationship or transaction carries significant risk, businesses should consider whether important claims can also be corroborated independently.

For example:

• Does the employment history match independent records?
• Can the professional qualification be confirmed with the awarding body?
• Does the company genuinely employ the individual?
• Do independently obtained contact details match those provided?
• Is the person's stated corporate role reflected in authoritative records?

The objective is to build a consistent picture from sources that are genuinely independent of one another.

Public Records Can Provide Valuable Corroboration

Corporate and regulatory records remain particularly useful because they can help establish whether claimed appointments or relationships have an independently documented basis.

Depending on the circumstances, relevant information may include:

• Company directorships.
• Persons with significant control.
• Regulatory registrations.
• Insolvency history.
• Court records.
• Professional memberships.
• Previous corporate interests.

However, public records also have limitations.

They may be incomplete, delayed or dependent on information supplied by the individuals or businesses being recorded.

They should therefore form part of the wider assessment rather than automatically determining the outcome.

Conflict International's Due Diligence Services support organisations requiring deeper verification of individuals, businesses and commercial relationships.

Check Whether the Digital Footprint Makes Sense

An established professional may reasonably be expected to have some history that predates the current transaction or relationship.

That does not mean everyone needs a large public profile.

Some legitimate individuals have very limited online visibility.

The more useful question is whether the available digital information is consistent with the person's claims.

Potential inconsistencies might include:

• Professional profiles created very recently despite claims of long experience.
• Employment history that cannot be corroborated elsewhere.
• Company websites with little independent history.
• Repeated biographies using identical wording across unrelated websites.
• Contact information that cannot be independently confirmed.
• Images that appear across multiple unrelated identities.

No single indicator establishes synthetic identity fraud.

A combination of inconsistencies may justify additional verification.

Independent References Can Add Context

Professional references can be useful, but they should be obtained and assessed carefully.

A reference provided through contact details supplied by the subject is not necessarily independent verification.

Where appropriate, organisations may consider confirming:

• That the referee genuinely holds the claimed position.
• That the organisation exists.
• That independently sourced contact details correspond with those provided.
• That the relationship between the referee and subject is credible.

The purpose is not to distrust every reference.

It is to determine whether the reference genuinely corroborates the information being assessed.

Corporate Relationships Should Be Examined in Context

Synthetic identity concerns can become particularly important in high-value commercial transactions.

A business may be introduced to an individual who claims to represent:

• An investor.
• A fund.
• A family office.
• A supplier.
• A professional adviser.
• A corporate purchaser.
• A potential joint-venture partner.

Where significant capital or reputation is at stake, due diligence should establish not just whether the individual exists, but whether they genuinely have the authority or relationship they claim.

Useful questions may include:

• Does the company recognise the individual?
• Does their stated role appear in independent sources?
• Do corporate records support the claimed relationship?
• Are payment instructions consistent with the contracting entity?
• Are other supposed representatives independently verifiable?

These questions help distinguish identity verification from broader commercial due diligence.

Human Judgement Still Matters

Automated verification tools can process large volumes of information efficiently.

They can identify document inconsistencies, compare data points and flag unusual patterns.

However, many due diligence questions require context.

A system may determine that a document appears authentic while being unable to establish whether the surrounding commercial story makes sense.

Human review can help assess:

• Why information conflicts.
• Whether explanations are credible.
• Whether relationships appear commercially plausible.
• Which discrepancies matter.
• What additional verification would be proportionate.

The strongest approach therefore combines technology with informed human assessment rather than treating either as sufficient on its own.

Synthetic Identity Risk Should Be Assessed Proportionately

Not every commercial relationship requires enhanced verification.

The appropriate level of scrutiny should reflect factors such as:

• Transaction value.
• Seniority or authority of the individual.
• Jurisdictions involved.
• Complexity of the corporate structure.
• Regulatory exposure.
• Payment arrangements.
• Identified inconsistencies.
• Potential financial or reputational consequences.

Where the risk is low, standard verification may be sufficient.

Where significant inconsistencies or higher-risk factors are present, deeper enquiries may be justified.

Our guide to What Is Due Diligence? explains how the scope of due diligence can be adjusted according to the circumstances.

Warning Signs That May Justify Further Checks

Potential indicators of synthetic identity or wider verification risk can include:

• Inconsistent dates or employment history.
• Recently created professional profiles.
• Unverifiable qualifications.
• Documents containing unusual discrepancies.
• Corporate roles that cannot be confirmed.
• References that cannot be independently verified.
• Payment instructions that do not match the claimed relationship.
• Resistance to reasonable verification.
• Several apparently independent sources repeating the same unsupported information.

These indicators should be considered together and in context.

The existence of one inconsistency does not prove deception.

Due Diligence in an AI-Enabled Environment

Artificial intelligence is likely to make fabricated information increasingly convincing.

That does not mean businesses should abandon established verification processes.

It means those processes should increasingly focus on independent corroboration.

Documents, public records, references, digital information and direct verification can each contribute part of the picture.

Where important decisions depend on an individual's identity, background or authority, the strongest approach is to establish whether those different sources genuinely support one another.

Conflict International provides due diligence and corporate intelligence support to businesses, investors, legal teams and professional advisers in the UK and internationally.

If your organisation requires deeper verification of an individual, company or commercial relationship, contact Conflict International for a confidential discussion.