Synthetic identity forensics glossary

Which questions belong in this field?

State the identity claim precisely. A profile claims a name; a recording resembles a voice; a session record associates access with an account. Those observations concern different links in an attribution chain.

The expression “synthetic identity” also has an established fraud context involving constructed identities. This project’s evidence field includes AI-generated representations, but it does not treat every fictional persona or generated portrait as a fraudulent identity.

Evidence sources and examination context

Preserve the represented content and the surrounding account or communication records within authorized scope. Separate identifiers supplied by a person or platform from independently corroborated identity information.

NIST SP 800-63A-4 addresses identity proofing, while SP 800-63B-4 addresses authentication. Proofing concerns an asserted identity; authentication concerns control of an authenticator associated with an account. These processes are relevant context, not a retrospective guarantee that every account event was performed by its named holder. NIST SP 800-63A-4: Identity Proofing and Enrollment; NIST SP 800-63B-4: Authentication and Authenticator Management.

Compare creation, distribution, access, and authorization evidence. Consider shared accounts, delegated access, stolen credentials, and missing session records where the evidence makes those alternatives relevant. Avoid publishing unnecessary identifying material in a technical example.

A worked evidence example

Hypothetical example: a voice message resembles a staff member and arrives from a familiar account. The similarity and sender account are observations. Whether the speaker authorized the message, whether the account was controlled by someone else, and whether the voice was generated remain separate questions.

Corroborating communication records and account events may narrow the explanation. A voice detector result alone does not establish who sent the message or whether an instruction was authorized.

What this evidence can and cannot establish

Evidence can support bounded associations between a representation, an account, a session, and an observed action. Stronger identification requires evidence appropriate to the specific claim.

A biometric resemblance does not establish consent. Account access does not automatically identify a person. Absence of an authentication event in an incomplete export does not establish unauthorized access. Preserve privacy and uncertainty throughout the report.

Essential terminology

• Synthetic identity — A generated or manipulated representation of identity, potentially combining invented details with elements associated with real people.
• Voice cloning — Synthesis or manipulation of a voice representation that resembles a particular speaker; resemblance alone does not identify an operator.
• Impersonation — Representation or use of an identity in a manner that purports to be another person or entity; operator attribution remains a separate question.
• Account attribution — An evidence-supported connection between activity and a specified account.
• Identity proofing — A process for assessing evidence that connects an applicant to a claimed identity.
• Authentication event — A recorded check used to establish an account or session's access context.
• Authorization context — The permissions and policy applicable to an actor's action.
• Biometric comparison — Comparison of measured biological or behavioral characteristics under a defined method.

All 23 terms in this evidence field

• Account attribution
• Account takeover
• Attribution
• Authentication event
• Authorization context
• Biometric comparison
• Credential verification
• Digital persona
• Email verification
• Identity claim
• Identity fusion
• Identity linkage
• Identity proofing
• Impersonation
• Impersonation artifact
• Liveness detection
• Multi-factor authentication
• Operator attribution
• Presentation attack
• Session token
• Sockpuppet account
• Synthetic identity
• Voice cloning

Continue with an examination reference

• synthetic identity forensics
• attribution
• ethics

Citation and editorial context

This is an editorial reference. Source checks are separate from independent expert review; no independent reviewer is recorded.

Examples are hypothetical. See the editorial policy, methodology, and correction process.

Shelley, Jesse (ed.). “Synthetic identity forensics glossary.” Synthetic Forensics, 1.1.0-glossary-library-1, 2026-10-09. https://syntheticforensics.org/glossary/identity/ Accessed: add the date you consulted this page.

The complete vocabulary

Browse the full glossary of 300 terms or download the machine-readable vocabulary.

Field assignment is the project’s organizational taxonomy; related evidence can span several fields.