Operation Mouse

Catching Synthetic Identity Fraudsters in Canada

📅 October 8, 2025

Financial fraud has existed almost as long as business, and the methods used by fraudsters continue to increase in sophistication, scale, and success. One method that is increasingly used to perpetrate fraud is synthetic identities, which use falsified or partially falsified information to open accounts or obtain credit, with the objective of subsequently committing fraud or furthering money laundering.

Key data from Canada and comparable jurisdictions includes:

Canadians lost CA$638 million to fraud in 2024 alone, according to the Canadian Anti-Fraud Centre, with only 5-10% of frauds being reported.
Synthetic identity fraud increased by 311% in North America and deepfake fraud increased 3,400% in Canada, from 2024 to 2025.
An estimated 1-3% of bank accounts in the United States were opened using synthetic identities, according to a
Criminals have used AI to create “falsified documents, photographs, and videos to circumvent financial institutions’ customer identification and verification and customer due diligence (CDD) controls”, according to U.S. FinCEN.

Accounts opened using synthetic identities are subsequently used to perpetrate fraud, such as credit fraud, or to further other illicit activity as funnel accounts for money laundering.

What are synthetic identities?

Synthetic identities are fictitious or partially fictitious personal identities. They can be fully fabricated using invented names, birthdates, and other identities. Alternatively, they can use a combination of authentic and falsified information, such as a real Social Insurance Number (SIN) combined with a fake name. Often, the authentic data elements are used to create multiple different “mix-and-match” identities.

The increase in data breaches, which expose personal information, combined with a rise in artificial intelligence technologies such as deepfakes, provide the material needed to create synthetic identities, complete with realistic supporting information such as photographs, pay slips, bank statements, and phone bills. The result is fraud that ismore difficult to detect and more likely to be successful.

Financial institutions must be alert to the escalating use of synthetic identities and must take action accordingly. One Canadian bank achieved just that: identifying a network of synthetic identities that uncovered CA$25 million in fraud losses.

Real Life Example 1: Operation Mouse

In Toronto, a bank teller noticed that a customer was attempting to open an account. A month earlier, the same customer had already opened a bank account at the same branch under a different name. The bank contacted the police. The man was arrested and in his wallet were 20 genuine identification cards under two fake names, two debit cards, a driver’s license, a social insurance card, and a citizenship card from the government of Canada. He had been promised CA$5,000 from his “handler” for each account he successfully opened.

His arrest led to a five-month investigation called Operation Mouse. Detectives discovered synthetic identities responsible for CA$25 million in fraud losses, representing unpaid credit card bills and mortgages.

That was in 2009. Since then, synthetic identity frauds have continued to increase in scale.

Real Life Example 2: Project Déjà Vu

In 2024, Toronto detectives identified a synthetic identity scheme that had been in operation since 2016 and which had resulted in confirmed losses of more than CA$4 million.

More than 680 synthetic identities had been created, which were used to open hundreds of bank and credit accounts throughout Ontario. In many cases, payments were made into the credit accounts to enable them to be drawn beyond their defined overdraft limit.

Tracing the proceeds of the synthetic identity frauds, police identified identity documents and electronic templates to create false identifications and false documents. They also identified debit cards, credit cards, and charge cards obtained using the synthetic identities, as well as CA$300,000 in Canadian and foreign cash.

As of April 2024, police had arrested 12 people and made 102 charges in the ongoing operation.

Real Life Example 3: International Fraud Networks

Fraud schemes are not limited to one country. In an action brought by the U.S. Department of Justice, several defendants were convicted in 2017 of operating a fraud scheme using more than 7,000 synthetic identities. The fraud resulted in confirmed losses of more than US$200 million, with millions of dollars in proceeds wired to Canada, Japan, China, Pakistan, India, and the UAE.

The fraudsters used a three step process called “make up”, “pump up”, “run up”, also called “bust-out fraud”;

Red Flags for Synthetic Identity Fraud: Bad Debt or Synthetic Identity Fraud?

Some indicators of synthetic identity fraud should be obvious. In one Canadian case, a person used a false identity to gain a driver’s license, bank accounts, telephone number, an apartment address, and a credit rating – all under the name “Server Froze”. Police suspected the person involved had limited English skills and, seeing what he believed was the name he was being directed to use by the operators of the fraud screen, wrote what was displayed on his computer.

In other cases, synthetic identity fraud schemes may operate over months or years. The financial activity appears to be that of a genuine customer: taking out credit and repaying it, resulting in more credit being extended. Finally, the fraud occurs: the fraudster maxes out their credit, often across multiple products – credit cards, lines of credit, loans – then defaults on all of them.

In a real-life example, fraudsters in Canada used synthetic identities and a synthetic company to obtain bank loans and insurance to purchase cement trucks. After making a few payments, they reported the trucks stolen and collected on the insurance. The fraudsters instead shipped the trucks to Dubai and sold them, adding to their illicit profits.

Unless financial institutions are alert to the possibility of synthetic identity fraud, such events may be recorded by the credit department as an operational loss. And if law enforcement pursues action against the person or company running the business, synthetic identities leave little behind.

How can financial institutions take effective action?

The most critical action to identify and respond to synthetic identity fraud is to recognize the risk that it presents and to ensure measures are in place specific to synthetic identities, including the use of AI.

Implement a unified response between relevant teams

Synthetic identity fraud intersects teams including AML, fraud, cyber, and credit risk. To achieve an effective and unified response, the institution should establish joint working groups and data sharing.

Ensure policies, processes, systems, and controls specifically address synthetic identity fraud

As methods used by fraudsters continue to evolve, the institution’s anti-fraud programs must continue to adapt too. Relevant sources of information include internal investigations into potential fraud, law enforcement and regulatory advisories, and knowledge shared through public-private partnerships.

Sources of information should not be limited to one jurisdiction: best practices can be gained by tracking fraud trends and countermeasures globally. Some useful resources include:

Financial institutions could also consider implementing advanced analytics or AI solutions to help with their anti-fraud programs. These can help identify patterns and anomalies that may indicate fraud.

Conduct ongoing monitoring and “re-review” (“lookback”)

Synthetic identities and identity elements (such as a SIN or address) are often used to open multiple accounts. Financial institutions should conduct ongoing monitoring of all customers. For example, if new accounts are opened that have the same phone number or email address as an existing customer, it may indicate they are synthetic identities controlled by the same fraudster.

Where a credit loss occurs, or a fraud is identified, the institution should investigate the account history and account opening documents to identify indicators of synthetic identities and/or wider fraud.

Related accounts or those with similar characteristics should also be investigated, such as credit cards where balances have been paid off from the same external account. This may indicate they are in the process of building up credit ahead of a “bust-out” fraud.

Provide customized staff training and raise customer awareness

Institutions should provide staff with training customized for their role. Customization enhances relevance and knowledge retention. For example, customer-facing staff should be trained to identify synthetic identities or documents, whereas investigative teams should be trained to effectively identify wider fraud schemes.

Institutions can also help their customers avoid being victims of identity theft. Resources such as the Canadian Government’s ITSAP.00/003 Protecting yourself from identity theft online provide a starting point as well as actions individuals can take if their identity has been compromised.

Report and share intelligence

Synthetic identities are usually used to open accounts across multiple institutions: this maximizes the potential fraudulent gains from each synthetic identity. Financial institutions should report synthetic identities, frauds, and suspicious activity in accordance with their jurisdictional requirements. Where permitted, they should also share intelligence with other financial institutions.

“Fraudsters are using sophisticated technology to create scams that feel more real than ever… The more we learn about their tactics, the less chance criminals have to defraud us.”

– Matthew Boswell, Commissioner of Competition, Competition Bureau Canada

Need to train your team on the latest in fraud prevention?

Our course Foundations of Anti-Fraud offers a comprehensive overview of various definitions of fraud, its risk factors, and prevention strategies. Through a series of videos and interactivities, learners will acquire the foundational knowledge necessary to recognize fraud and implement effective strategies to combat it.

Learn more and strengthen your team’s compliance skills today.

Explore Courses

Recommended Blogs

September 2026 Monthly Sanctions and Export Controls Report

October 6, 2026

Explore this month’s Sanctions and Export Controls Update, highlighting IFI’s take on key developments from September 2026.

The Data Behind the Payment

September 30, 2026

Two changes have raised the bar on what banks can expect to see in a payment. Explore how corporate banks can put ISO 20022 and FATF's revised Recommendation 16 to work in transaction monitoring.

The Judgment Gap in Market Abuse Compliance

August 25, 2026

While banks may know the set of rules outlined in the EU’s Market Abuse Regulation, exposure sits in the judgment calls related to delayed disclosure, information barriers, and market soundings. Dive into where the risk lies in each area.

Beyond the Course Library

August 12, 2026

A comprehensive compliance course library doesn’t guarantee prepared staff. Here's how forward-looking teams are moving beyond static course libraries toward learning that keeps pace with risk.

July Monthly Sanctions and Export Controls Report

August 4, 2026

Explore this month’s Sanctions and Export Controls Update, highlighting IFI’s take on key developments from July 2026.

A Financial Institution’s Guide to Updated EU Market Abuse Regulation

July 29, 2026

MAR sounds straightforward until a real case tests it. This guide breaks down what the regulation covers, who it applies to, and the disclosure rules, court rulings, and regulatory guidance that shifted the ground under compliance teams in 2026.

The Hidden Factor Behind Effective Compliance Training

July 22, 2026

Discover why the success of a compliance training program depends on more than just quality content—it begins with how employees perceive its value. Learn how organizations can improve engagement, drive meaningful behavioral change, and demonstrate measurable training ROI by rethinking the learner experience.

Social Engineering Is Rewriting the Fraud Playbook

July 8, 2026

Fraudsters have shifted from breaching systems to manipulating people. This article examines how social engineering, from deepfake video calls to business email compromise, is outpacing traditional defenses, and what it takes to train employees to recognize and resist it.

June 2026 Sanctions and Export Controls Report

July 1, 2026

Explore this month’s Sanctions and Export Controls Update, highlighting IFI’s take on key developments from June 2026.

Previous Next