Built from real data fragments. Pass standard KYC checks. Only persistent device signals catch re-use across multiple applications.

New account, fresh device claim. Fingerprint detects whether the same physical device has applied for credit elsewhere recently.

Credential stuffing at login. A persistent device ID flags the attacker's device across multiple login attempts and account targets.