Attack vs. Defence: Bots, Synthetic Identities and the Invisible Tactics Behind This Summer of Football
Not all fraud attacks are obvious, or even noticeable. Some are happening in the background - fast, automated and largely invisible.
Every second, as users log in, browse and transact, another kind of activity is unfolding: coordinated, scalable and increasingly sophisticated.
This is the world of bot attacks and synthetic identity fraud, and it’s growing rapidly.
The attack
Fraud has evolved. It’s no longer the work of individuals, but coordinated networks operating at scale through automation.
These attacks test stolen credentials across platforms, create thousands of accounts simultaneously, and mimic real users to evade detection.
At the same time, fraudsters are building entirely new identities.
Synthetic identities — created from a mix of real and fabricated data — are now one of the fastest-growing threats: fraud cases linked to synthetic identities have increased by 184% since 2019.1 Up to 5 million identities in the UK may be synthetic.1
These identities don’t just appear, they are built over time, establishing credibility before being used to commit fraud
Account takeover: the second half comeback
While onboarding is the first target, existing accounts are just as valuable. Account takeover fraud has risen by 37% year on year.2 Using stolen credentials and bot-driven attacks, fraudsters can access legitimate accounts and change details to make transactions appear genuine.
From the outside, everything looks normal. But behind the scenes, control has changed hands.
Why these attacks are so hard to stop
The challenge isn’t just scale, it’s believability.
Modern bots can: mimic human behaviour, replicate interaction patterns and blend into legitimate traffic. Synthetic identities can pass traditional verification checks and appear consistent across multiple interactions. As a result, the line between real and fake is becoming harder to differentiate.
The defence: seeing what others miss
To counter these threats, defence needs to be as adaptive as the attack.
For consumers, protection comes down to a few key habits:
- Enable multi-factor authentication
- Use strong, unique passwords, or adopt passkeys where available
- Regularly monitor accounts for unusual activity
Final whistle: staying one step ahead.
High-profile sporting moments drive spikes in digital activity, and fraudsters move just as quickly.
As bots and synthetic identities become more advanced, both businesses and consumers need to adapt. Because in this invisible match, the difference comes down to which organisations are combining the relevant analytics and systems to protect users.
Check out our latest guide — Verifying Digital Identities — for more details on how TransUnion uses Document Verification and Facial Biometrics (DVFB) to empower organisations to verify identities with confidence.
Contact Us
We're sorry, your request failed. Please try again in a little while.