Identity verification systems are struggling with synthetic fraud