Reading a Fraud Scan Report: A Field Guide to the Data
A practical reference covering the key terms, codes, and record types you're likely to encounter in a fraud scan section of a background check.
Photo: searchopenrecords editorial
—— In This Article
What a Fraud Scan Section Actually Contains
A fraud scan is a structured data query layered into a broader background check. Rather than pulling criminal court records, it cross-references identity attributes — name, Social Security Number, date of birth, address history — against databases designed to surface inconsistencies linked to identity fraud. For a fuller introduction to what these scans are and where their data originates, see our overview for those new to fraud scans.
When you open the fraud scan section of a report, you will typically find four types of content:
- Identity validation fields — confirmation or conflict between the subject's provided data and records on file
- Flag codes — short labels identifying specific alert categories (e.g.,
SSN_DISCfor SSN discrepancy) - Watchlist results — matches or near-matches against government-maintained lists such as OFAC
- Address and SSN history — a timeline of associated addresses and any SSN variants found in connected records
Understanding how to read each layer prevents misinterpretation. A flag code without context is nearly meaningless; its significance depends entirely on what triggered it and how strong the underlying data match is.
| Primary law governing fraud scan data | Fair Credit Reporting Act (FCRA) (U.S. Consumer Financial Protection Bureau) |
| Common flag types in a fraud scan | SSN discrepancy, address velocity, deceased indicator, OFAC match |
| OFAC list maintained by | U.S. Department of the Treasury (treasury.gov) |
| Right to dispute inaccurate records | Guaranteed under the FCRA for consumer reports (15 U.S.C. § 1681) |
| Fraud scan data sources | Public records, credit header data, SSA death records, government watchlists |
| False positive risk | High — flags require manual review before conclusions are drawn |
Decoding Common Flag Types
Fraud scan reports vary by provider, but several flag categories appear consistently across sources. The data pools each provider draws from affect which flags appear and how they are labeled, so the definitions below reflect general industry usage rather than any single vendor's terminology.
Fraud Indicator
A data point flagged in a background check report that suggests a potential inconsistency or pattern associated with identity fraud. Indicators are signals, not proof — they require contextual interpretation.
SSN Issuance Discrepancy
A mismatch between the state or year a Social Security Number was issued and the biographical data on file for the individual. This can signal identity fraud or a simple data-entry error.
Address Velocity
The rate at which an individual's address changes over a given period. An unusually high number of address changes in a short window is sometimes flagged as a potential fraud pattern.
Synthetic Identity
A fabricated identity created by combining real and fictitious information — often a legitimate SSN paired with invented biographical details. Synthetic identities are among the hardest fraud types to detect.
OFAC Match
A hit against the U.S. Treasury's Office of Foreign Assets Control watchlist, which lists individuals and entities subject to economic sanctions. A potential match requires careful verification before drawing conclusions.
Deceased Indicator
A flag suggesting that the SSN associated with a person has been reported as belonging to a deceased individual. This is a common indicator in identity theft cases where a fraudster uses a deceased person's identity.
FCRA
The Fair Credit Reporting Act — a federal law that governs how consumer reporting agencies collect, share, and use personal data, and that grants consumers specific rights to dispute inaccurate information.
Header Data
The identifying information — name, address, SSN, date of birth — that appears at the top of a credit file and is often used as a source layer in fraud scans.
SSN-Related Flags
An SSN issuance discrepancy occurs when the number's issue date or issuing state conflicts with the subject's reported age or birthplace. A deceased indicator means the Social Security Administration's death records associate that SSN with a deceased individual — a common vector in identity theft. Neither flag is conclusive on its own.
Address and Velocity Flags
Address velocity flags are triggered when an unusually large number of distinct addresses are linked to an identity within a compressed timeframe. Context matters: frequent legitimate moves (military service, temporary work assignments) can generate the same pattern as fraudulent address manipulation.
Watchlist Flags
An OFAC match is one of the more serious flag types, but it is also prone to false positives driven by common names. Before treating any OFAC result as significant, verify the match against the Treasury's own search tool using full identifying details. The comprehensive guide to fraud indicators in public records covers each of these categories in greater depth.
Flags Are Signals, Not Verdicts
Every fraud indicator in a report is a prompt for further investigation — not a finding of wrongdoing. Data errors, common names, and system mismatches routinely generate false positives. Under the FCRA, consumers have the right to dispute inaccurate information with the reporting agency. If you believe a flag on your own report is incorrect, contact the source agency directly and request a formal review.
How to Apply This in Practice
Reading a fraud scan accurately means resisting the instinct to treat any single flag as definitive. The most common interpretation errors almost always involve treating an indicator as a conclusion rather than a starting point.
A structured review process helps:
- Note the flag type and its severity tier — most reports distinguish between informational alerts and high-priority flags.
- Cross-reference with other sections of the background check. An address discrepancy that also appears in the credit header section carries more weight than one appearing in isolation. See our walkthrough of background report sections for guidance on reading the full document together.
- Consider the source depth. The real limits of what fraud scans can surface mean that an absence of flags does not equal a clean record — only that nothing surfaced in the queried databases.
- Consult a qualified professional for any consequential decision. Fraud scan data informs judgment; it does not replace legal or professional analysis.
For decisions involving employment, tenancy, or financial transactions, the FCRA imposes specific obligations on how flagged information may be used. Consulting legal counsel before acting on a fraud indicator in a formal screening context is strongly advisable.
This article is for general informational purposes only and does not constitute legal, financial, or professional advice. Consult a qualified attorney or licensed professional for guidance specific to your situation.
Background Checks Editorial Team
Background Checks Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.
View author profile