Scam-o-Meter: It costs $200 to build a fake identity using your stolen data

Key insights

Coveron’s deepfake research reveals some unsettling facts about the synthetic identity market that’s booming on the dark web:

• A complete fake American identity sells for $200 on the dark web. Criminals can buy a single deepfake image for $10-50 to bypass one security check, while a full “digital ghost” package goes for $200 and includes aged accounts, pre-verified financial profiles, and device fingerprint matching.
• Thousands of ready-to-use fake identities are for sale right now. In the past year, our researchers found over 10,000 posts on the dark web offering complete identity packages that bundle synthetic identities with deepfake selfies and matching documents.
• Dark web discussions about deepfakes grew nearly eightfold between Q1 2024 and Q2 2026 — from 40 posts per month to 307. The sharpest jump happened in 2026, when open-source tools and step-by-step tutorials made deepfake technology accessible to anyone — no technical skills required.
• Criminals let fake identities “age” before using them. They create synthetic profiles and let them sit for 6 to 24 months, gradually adding social media activity, purchases, and login details to build a convincing digital history.
• A single synthetic identity can fuel multiple fraud schemes at once — opening bank accounts, applying for loans, filing fraudulent tax returns, and bypassing cryptocurrency exchange verification.
• Victims often don’t find out until it’s too late. Unlike traditional identity theft, synthetic identity fraud may not surface until loan defaults appear on your credit report or debt collectors come calling for money you never borrowed — taken out by a fake “person” using your SSN.

What our expert says

Tomas Sinicki, managing director at Coveron, recommends that you:

• Monitor your personal data for signs of a breach. Companies are required to notify you if your data is compromised, but notifications can be slow. A dark web monitoring service can alert you as soon as it finds your data for sale online.
• Freeze or lock your credit if you’re not actively applying for new accounts. A credit freeze or credit lock stops criminals from opening accounts using your stolen SSN, even if they have other details about you.
• Be skeptical of unexpected identity verification requests. Legitimate organizations will never ask you to verify your identity through an unsolicited email, text message, phone call, or video call.
• Use an identity theft protection service. It should offer credit monitoring, financial account monitoring, and substantial identity theft recovery coverage.

Methodology and sources

This research was conducted jointly by Coveron and NordLayer Intelligence by NordStellar, a threat exposure management platform. Researchers gathered data from dark web forums and Telegram channels using NordLayer Intelligence by NordStellar’s Enterprise Data API. They analyzed 22 targeted queries from Q1 2024 to Q2 2026 and captured over 362,000 posts related to identity fraud, deepfake services, and synthetic identity creation.

What is Scam-o-Meter?

Scam-o-Meter is an ongoing Coveron series where we keep track of online fraud. In each installment, we look at different scam or fraud trends, break down how they work, and share practical tips on how to protect yourself. We also share the latest data — including from our own original research.