New Account Fraud

New account fraud, sometimes called account-opening fraud, happens at the very start of the customer lifecycle. Rather than compromising a legitimate account, the fraudster registers a new one under an identity they are not entitled to use, whether a stolen real identity, a fully fabricated one, or a synthetic composite of real and fake data, so the account is malicious from the moment it is created.

To pass onboarding and verification, fraudsters supply data that looks consistent and legitimate: matching names and addresses from stolen identity packages, fabricated or manipulated documents, virtual phone numbers, and disposable emails. They mask the true origin of the signup with VPNs, residential proxies, and anti-detect or private-browsing environments so the registration does not obviously tie to other fraudulent accounts or to a flagged location, and at scale they automate account creation to open many at once.

The purpose of the fresh account varies. It may exist to receive and cash out a stolen card or loan, to farm sign-up bonuses and promos, to launder value, to place fraudulent orders, or simply to accumulate a foothold that can be aged and later abused or sold. Because the account has no prior history, defenses that rely on deviation from a known baseline have nothing to compare against, which is exactly what new account fraud exploits.