Hiding in Plain Sight: How a Mailbox Address Became an Identity Fraud Factory

A single mailbox address. 490 fraud applications.

Our Head of Fraud Insights, Dr. David Maimon, drove to a Burbank storefront to find out why one address kept showing up across synthetic identities in SentiLink's data.

What he found was a mail receiving agency the Postal Service had no record of, roughly 200 identities running through 70 mailboxes, and a business that emptied itself out before anyone could ask questions.

What the Investigation Found

Between August 2024 and March 2026, more than 490 onboarding applications reached financial institutions from one address in Burbank, California. They traced back to roughly 200 unique identities and about 70 mailboxes.

At least 90% showed clear signs of fraud.

Two thirds were tied to the likely-stolen identities of former legal immigrants — people who came to the U.S. on student, au pair, or seasonal work programs, then went home and left an active SSN behind. Another 24% scored high for synthetic identity risk. Across SentiLink's partners in the second half of 2025, that synthetic rate was 0.58%.

Nearly 89% of the applications targeted deposit accounts, the usual first step before anything more complicated.