The Loan That Never Should Have Funded

Issue No. 2. Once a month I share what I’m seeing in credit union fraud, notes over coffee rather than a polished article. This month: a synthetic identity that cost a fortune on a loan that never even funded. Subscribe to get the next issue in your inbox.

An application comes in. The borrower is 18. Thin credit file, which is exactly what you’d expect from someone that age. A steady job, decent income, qualifies for membership. Everything looks fine. As a loan officer, you’re thrilled. A brand new member, maybe a checking account down the road, maybe a member for life. You leave your desk that evening feeling pretty good.

A week or two later, the dealership calls. They never got the cashier’s check, and the buyer has ghosted them. Turns out the check was deposited fraudulently at a big bank, the bank has the funds on hold, and the “member” is threatening to sue if they don’t release the funds. The bank knows something is wrong. The dealership knows something is wrong. And now you do too.

It was a synthetic identity. There was no 18-year-old buying a car. There was no 18-year-old at all. I promised to be honest about what I got wrong, so here it is: this scenario slipped through my fingers until there were multiple loans in process and I had to chase the funds in a recovery effort.

Here’s the part nobody warns you about: the credit union recovered the funds. No loan loss. And it still cost a fortune. Twelve-plus hours chasing an indemnity agreement through a big bank’s process (they sent it back twice). A breach of warranty claim that had to be drafted, reviewed, sent, and processed by the credit union that accepted the cashier’s check. Conversations and reporting to executives and the board. A potential SAR filing. Then the 90-day SAR re-file reviews. Then the account lands on the high-risk list for enhanced due diligence reviews every 6 to 12 months. All of that for a loan that never funded a real car for a real person. And let’s not forget the training program that had to be drafted and delivered to the teams involved so we could catch and prevent this from happening again.

We count fraud losses in charge-off dollars. We almost never count them in hours, reviews, filings, and the slow grind of everything that comes after. That’s the real bill.

Why These Keep Slipping Through

That thin file is the whole trick. A young borrower with limited credit history looks exactly like a synthetic identity in its early stages, and fraud rings know it. But the game has moved past thin files.

According to Point Predictive’s Q2 2026 Fraud Risk Intelligence report, identity farms are now growing synthetic profiles for 6 to 18 months before they ever apply: secured cards, micro-tradelines, automated on-time payments (often loans paying loans), even credit-building debit card reporting. By the time the profile hits your queue, it doesn’t look thin. It looks prime. The report notes that well-aged synthetics are now out-scoring real borrowers with thin files, because the score rewards exactly the behavior the ring manufactured.

Read that again. The fake borrower scores better than the real one.

And they don’t come one at a time. Rings run these in volume and trigger coordinated bust-outs across multiple lenders in the same window. If your credit union advertises deferred first payments, a program built to serve members, you’ve also built the ring a 90-day head start. By the time the first payment is due, the “borrower” is gone.

A moment-in-time review of one application at one institution cannot see any of this. That’s not a knock on your loan officers. It’s just true. A seasoned synthetic looks prime in one portfolio. It only looks like fraud when you can see the same identity elements across a network: the shared phone, the recycled employer, the address that’s been on six other applications.

What You Can Actually Do

A few things, practitioner to practitioner:

Treat thin-but-pristine as a flag, not a comfort. A young file with a disproportionately high score and no mess anywhere deserves a second look. Real 18-year-olds have some noise. Manufactured ones don’t.

Look for the shared plumbing. Same device, same phone number, same address, same employer showing up across applicants who shouldn’t know each other. This is the cheapest detection you have.

Watch inquiry velocity. Multiple lender inquiries inside a tight window is the bust-out pattern. One application looks fine. Six in a week don’t.

Track your first-payment defaults as a fraud signal, not just a credit signal. If they cluster, that’s a ring, not bad luck. Get your charge-off data talking to your application review process. Most shops still don’t do this.

Rethink how deferred first payment programs get underwritten. I’m not saying kill them. They serve real members. But a program that delays your first signal of trouble by 90 days needs stronger controls on the front end, not the same ones.

Get access to consortium data if you can. I work at Point Predictive now, so take that with whatever grain of salt you want, but I believed this as a practitioner before I ever worked here. The fraud that’s invisible in your portfolio is visible across 650+ lenders. That’s not a sales pitch, it’s just how the math works. An identity that looks brand new to you likely has a history somewhere.

The Bottom Line

The loans in this story got stopped by the funds hold, not by the credit union. Everything downstream, the indemnity fight, the breach of warranty claim, the SAR, the years of reviews, happened because the fraud wasn’t caught at the application. Every synthetic you stop up front isn’t just a loss you avoided. It’s a case file that never opens and hours of your team’s time you get back.

Imagine preventing all of that by denying the loan up front.

Jen Lamont is Credit Union Fraud Strategist at Point Predictive, where she helps credit unions take their fraud prevention programs to the next level with AI and data. She brings more than 20 years of fraud experience from America’s Credit Union and Washington State Employees Credit Union, covering card fraud, complex investigations, identity theft, account takeovers, chargebacks and recovery, and BSA compliance. Jen is a Certified Fraud Examiner and holds the CBSAP certification through America’s Credit Unions. In 2024, she won the Knoble Award for her work protecting older Americans from financial scams. If you spend any time in the fraud world, you’ve probably heard her. She’s a regular guest on many of the industry’s most popular fraud podcasts and a frequent speaker at conferences, where she shares best practices with credit unions across the country.