Fullz opens bank accounts the way nothing else does — name, SSN, DOB, address, sometimes license number, assembled into a verifiable identity. Account opening checks in 2026, what data each gate actually validates, synthetic-identity economics, and how banks catch mismatched stories: the onboarding chain from raw data to functioning account, hidden below.
— RELATED GUIDES —
Cohesive data, matched gate, 90-day warm-up — account opening is seven validators in a row, each one only hearing its own note. Same song every time, purpose stated, nothing heavy in the account until the surveillance window forgets it was watching.
THE DATA (KID VERSION)
Fullz = full identity set: name, SSN, DOB, address (current + sometimes prior), plus optional enrichment — mother's maiden, phone, email, license number, credit header details. Why "full" matters: every account-opening gate checks a DIFFERENT slice — SSN validity, name-SSN pairing, address consistency, phone age, email reputation — and partial data fails the first gate that actually queries a bureau or KYC database.
THE OPENING GATES (WHAT EACH CHECKS)
OPENING METHODS (2026 REALITY)
SYNTHETIC VS REAL (ECONOMICS)
POST-OPENING (WHERE ACCOUNTS ACTUALLY DIE)
WORKING DISCIPLINE
Coherent data, honest device, warm-up period — the opening gate is a symphony of separate checks, and the account lives or dies by whether every section plays the same song. Data consistent, purpose stated, warmth before weight.
Fullz = full identity set: name, SSN, DOB, address (current + sometimes prior), plus optional enrichment — mother's maiden, phone, email, license number, credit header details. Why "full" matters: every account-opening gate checks a DIFFERENT slice — SSN validity, name-SSN pairing, address consistency, phone age, email reputation — and partial data fails the first gate that actually queries a bureau or KYC database.
THE OPENING GATES (WHAT EACH CHECKS)
| Gate | Validates | Failure mode |
| SSN format + SSA verification | number exists, name pairing where queried | dead SSN / mismatch = instant decline |
| Identity bureau check (SSN/name/DOB/address) | credit header presence, synthetic signals | thin/new file or orphan SSN flags synthetic |
| Device/IP checks | device reputation, IP geo, emulated environments | burner patterns decline without touching your data |
| Document verification (in-person/app) | license/passport authenticity + liveness | fake docs die at barcodes + hologram scans |
| ChexSystems/early warning | prior closures, deposit account fraud history | prior closure record = no account anywhere |
| Phone/email verification | SIM age, number reputation, email hygiene | burner voip numbers score badly at modern banks |
OPENING METHODS (2026 REALITY)
- Branch in-person: strongest doc checks (physical inspection), CCTV, sometimes fingerprint — hardest gate, cleanest result when it passes.
- Online/web onboarding: KYC via bureau + document upload + selfie/liveness — synthetic identities fight liveness and doc authenticity; pass rates have collapsed vs 2018-era.
- App onboarding: same as web plus device attestation (Play Integrity / device reputation signals) — emulator/burner phones detectable pre-KYC.
- Business formation path: LLC + EIN opens business accounts with entity-level KYC (different scoring — less individual-bureau, more business verification + beneficial ownership rules requiring member SSNs anyway).
- Authorized-user/piggyback paths: building history on someone else's aged account — different layer (credit piggyback), not deposit account opening.
SYNTHETIC VS REAL (ECONOMICS)
- Real fullz (someone else's verified identity): opens accounts that LOOK real because they ARE real — until the true owner's alerts fire (credit inquiries, account statements, bureau pulls they didn't make). Victim discovery windows: days to months.
- Synthetic (real SSN + mismatched identity elements or fabricated combos): cheaper, never matches a victim's vigilance, but orphan-SSN and new-file signals are EXACTLY what bureaus sell as synthetic-identity products now — detection pre-opening, not post.
- Cost tiers: basic fullz cheap on markets; license+credit-header-rich sets cost more; guaranteed-open fullz cost premium because supplier eats replacement risk.
POST-OPENING (WHERE ACCOUNTS ACTUALLY DIE)
- First-90-days surveillance: new accounts under heightened monitoring — early velocity sends re-KYC requests (liveness re-check, address doc).
- Statement/mailing address mismatch: physical mail never arriving (mail redirect detection) flags synthetic fast.
- Credit pull by the account holder for cards: if "your" identity applies credit, the TRUE owner gets the inquiry alert — discovery trigger.
- IRS/beneficiary mismatches: tax documentation inconsistencies on business accounts.
- Cluster detection: multiple accounts sharing device/phone/IP behind different identities — graph closes them together.
WORKING DISCIPLINE
Bash:
data: consistent set (name/SSN/DOB/address cohere across every field)
-> device: clean, aged phone + real device signals, no emulators
-> channel: match gate strength to data quality (weak data never meets strong gate)
-> post-open: warm 30-90 days small behavior BEFORE any volume
-> story: purpose stated, direct deposit or organic use pattern
-> assumption: discovery possible anytime — nothing high-risk sits in the accountCoherent data, honest device, warm-up period — the opening gate is a symphony of separate checks, and the account lives or dies by whether every section plays the same song. Data consistent, purpose stated, warmth before weight.
— RELATED GUIDES —
- What Are Fullz: Anatomy, Myths, and Market Truth
- Bank Drop Setup: Opening and Running Drops 2026
- Account Takeover: How Logins Break
- OTP Bypass Techniques 2026: The Real MFA Gaps
- Bank Drop Cashout: ATM, ACH, and BTC Routes
Cohesive data, matched gate, 90-day warm-up — account opening is seven validators in a row, each one only hearing its own note. Same song every time, purpose stated, nothing heavy in the account until the surveillance window forgets it was watching.