Identity theft occurs when someone wrongfully obtains and uses another person's personal identifying information (PII)—such as name, Social Security number, date of birth, account numbers, or biometric data—to commit fraud or other crimes. For Certified Fraud Examiners, understanding the major identity theft schemes is essential to detection, investigation, and prevention.

Common identity theft schemes include:

1. Financial Identity Theft: The most prevalent form, where the perpetrator uses stolen PII to open new credit cards, take out loans, or drain existing bank accounts. Account takeover fraud, in which a thief gains control of a legitimate account and changes contact details to hide activity, is a key variant.

2. Synthetic Identity Theft: The fraudster combines real and fabricated data—for example, a genuine Social Security number paired with a fictitious name and address—to create a new identity. This scheme is difficult to detect because no single victim exists, and it often targets children's or deceased persons' SSNs.

3. Medical Identity Theft: Stolen information is used to obtain healthcare services, prescription drugs, or to file false insurance claims, potentially corrupting the victim's medical records.

4. Criminal Identity Theft: The perpetrator provides a victim's identity to law enforcement when arrested, leaving the victim with a false criminal record.

5. Tax and Government Benefits Fraud: Thieves file fraudulent tax returns to claim refunds or apply for unemployment, Social Security, or other benefits in the victim's name.

6. Business Identity Theft: Fraudsters impersonate a company to obtain credit, divert payments, or file false corporate documents.

Methods of acquiring PII include phishing and vishing, data breaches, skimming devices, dumpster diving, mail theft, pretexting, malware, and insider theft by employees with database access.

CFEs investigate these schemes by tracing account activity, analyzing credit reports, reviewing IP and device data, and coordinating with financial institutions and law enforcement. Prevention emphasizes data minimization, encryption, multi-factor authentication, employee training, and robust identity verification controls.

Identity theft occurs when a perpetrator obtains and misuses another person's personal identifying information (PII) such as Social Security numbers, dates of birth, account credentials, or biometric data to commit fraud. Certified Fraud Examiners (CFEs) study the methods criminals use so they can detect, investigate, and prevent these schemes.

Traditional identity theft methods include dumpster diving for discarded documents, mail theft, shoulder surfing at ATMs, skimming devices on card readers, pretexting (posing as a legitimate party to extract information), and insider theft by employees with database access. Digital methods have expanded the threat: phishing emails and smishing texts lure victims into revealing credentials; malware and keyloggers capture keystrokes; data breaches expose millions of records sold on dark web marketplaces; SIM swapping hijacks phone numbers to defeat two-factor authentication; and synthetic identity fraud combines real and fabricated data to create new fictitious identities that evade basic verification.

Artificial intelligence has amplified both the attack and defense sides. Fraudsters use generative AI to craft highly personalized, grammatically flawless phishing messages at scale, deepfake audio and video to impersonate executives or relatives in social engineering attacks, and automated bots to perform credential stuffing against thousands of accounts. AI can also scrape social media to assemble detailed victim profiles.

Conversely, CFEs and financial institutions deploy AI tools for detection and prevention. Machine learning models analyze transaction patterns to flag anomalies in real time, behavioral biometrics assess typing rhythm and device usage to verify legitimate users, natural language processing scans communications for phishing indicators, and link analysis software uncovers networks of related synthetic identities. Document verification systems use computer vision to detect forged or altered identification.

For the CFE, understanding this dual role of AI is essential: examiners must recognize AI-enabled attack signatures while leveraging analytical tools responsibly, maintaining evidentiary standards, data privacy compliance, and professional skepticism throughout investigations.

Identity theft occurs when a fraudster wrongfully obtains and uses another person's or organization's identifying information—such as Social Security numbers, account numbers, or login credentials—for financial gain or other criminal purposes. For Certified Fraud Examiners (CFEs), preventing and detecting identity theft requires understanding both the methods criminals use and the controls that mitigate them.

Prevention begins with safeguarding personal and organizational data. Individuals should shred documents containing sensitive information, avoid carrying Social Security cards, use strong and unique passwords with multi-factor authentication, and be wary of phishing emails, pretext phone calls, and fraudulent websites. Organizations should classify and encrypt sensitive data, restrict access on a need-to-know basis, conduct employee training on social engineering, implement secure disposal policies, and comply with regulations such as the Gramm-Leach-Bliley Act, HIPAA, and the FTC's Red Flags Rule, which requires certain creditors and financial institutions to maintain identity theft prevention programs.

Detection relies on vigilance and monitoring. Individuals should review bank and credit card statements regularly, obtain free annual credit reports, consider credit freezes or fraud alerts, and watch for warning signs such as unexpected bills, denied credit, missing mail, or notices from the IRS about duplicate tax filings. Organizations can deploy automated systems that flag unusual account activity, address changes followed by requests for new cards, multiple applications from the same IP address, or mismatches between application data and verification databases.

When identity theft is suspected, CFEs recommend prompt action: contacting affected financial institutions, placing fraud alerts with credit bureaus, filing a report with the FTC at IdentityTheft.gov, and notifying law enforcement. CFEs investigating these cases trace the misuse of information, identify the breach source, document losses, and help victims restore their identities. Ultimately, a layered approach combining education, technical controls, regulatory compliance, and continuous monitoring is the most effective defense against identity theft.