A synthetic identity mixes real and invented data: a genuine document number, a borrowed or generated face, a fresh email. A money mule is a real person who rents out their identity or card for someone else's transactions. Both pass classic KYC well. A digital footprint looks from another angle: not at the document but at the person's history online.
Pattern one: no footprint
The email and phone from the application are not found on any service. For an adult that is rare: an address in real use collects registrations over the years. Signals carry the no_footprint flag.
Pattern two: a footprint younger than the application
There are accounts, but the oldest is a few months old. The email was registered on a couple of services in recent weeks, exactly when the identity was being prepared. young_footprint is set when the oldest account is under 180 days old; the exact footprint age in days comes alongside.
Pattern three: names do not match
Profiles found by email and username carry a name other than the one in the application. That is name_mismatch. It happens with mules who opened the address in their own name but apply as someone else, and with synthetic identities stitched from other people's pieces.
Pattern four: a virtual number
The phone is VoIP: such numbers are bought in minutes and thrown away after use. The flag is voip_phone. Alone it means little, but together with a young footprint it is the typical picture of an identity made for one operation.
Why never alone
- A student or someone who recently changed email also has a young footprint.
- Many honest customers use virtual numbers for privacy.
- A woman who changed her surname will show a name mismatch.
That is why Oracul returns facts and leaves the decision to your rules. Combinations work well: young footprint plus VoIP number plus name mismatch goes to manual review; an old footprint with a matching name gets a green light with no extra steps for the customer.