1. Fraud Ring Name: Tor Bandits

Modus Operandi: On every application, this fraud ring uses TOR* IP addresses and / or VPN proxy services. Over 90 percent of the home phone area codes do not match the home address state and over 40 percent of applicants use an out of state bank. The identities consistently fail some part of identity verification although the SSN used on the fraudulent application has often been seen previously on a legitimate application.

The Big Giveaway: They often use a consistent email address pattern where the first two digits can range anywhere from 1-99. Example: 1D41D8C@GMAIL.COM, 79D41D8C@GMAIL.COM.

Average Number of Applications per Day: > 75

*TOR directs Internet traffic through a free, worldwide volunteer network consisting of more than 7,000 relays to conceal a user’s location and usage from anyone conducting network surveillance or traffic analysis. Using Tor makes it more difficult for Internet activity to be traced back to the user. This includes “visits to websites, online posts, instant messages and other communication forms.”

Clarity’s Clear PC Fraud™ can be used to identify when a consumer is using Tor.


2. Fraud Ring Name: Free and Easy Email

Modus Operandi: This group creates their own email domains such as Quickandeasymail.com, Fastfreemail.com, Instantmobile.com, and uses them for several months before creating new ones to use. On every application, the driver’s license numbers are always eight digits long and numeric regardless of the state. Practically everything on the application is obviously phony. It’s not clear that they even qualify as a fraud ring, but Clarity has been seeing large volumes of applications from these guys for over two years and it is increasing.

The Big Giveaway: Everything.

Average Number of Applications per Day: >100