Artem Lalaiants is the Founder and CEO of RiskSeal with 10+ years in fintech and deep expertise in alternative credit risk scoring.getty​Credit bureaus have always been at the core of loan origination. But today, they only tell part of the story.The way a person uses the internet has become one of the clearest signals of how they show up in real life, including whether they are likely to repay, default or, in some cases, apply with no intention of repaying at all.Digital footprint analysis is becoming one of the most reliable tools in credit risk. Here are five signals that keep coming up.1. Digital PresenceHere's the thing about digital presence: It's very hard to fake convincingly.Most people who spend meaningful time working, communicating or managing their lives online leave a trace. Email usage, phone activity, account history, app registrations, platform presence—it all accumulates naturally over time.So when someone completes a digital lending application but has almost no footprint tied to their email or phone, that absence is worth pausing on. This includes no meaningful account history, no signs of normal usage and nothing suggesting the identity has been active in the real world.That doesn't automatically mean the person is risky. Some people are less active online by choice, by age, by geography or simply by habit. Context matters.But in digital lending, a total lack of presence can still be telling. Especially when:• The application itself is digital• The contact details are newly created• There are no surrounding signals that help confirm the identityThe issue is when the available digital evidence gives the lender almost nothing to trust.2. Data ConsistencyOne signal that matters more than people expect is whether the applicant looks like the same person across different apps and websites.Does the name attached to the email match the name on Facebook or WhatsApp? Does the age range line up? Does the selfie match the profile photo? Does the gender presentation, location and basic identity pattern make sense across platforms?Inconsistencies can tell a story very quickly. If the same email connects to a middle-aged man on one platform and a young woman on another, that's a red flag.This is not because any single platform is the source of truth, but because identity data shouldn't feel like it belongs to three different people.I've seen cases where a single data mismatch looked like a minor discrepancy, but when stacked with two or three others, it painted a clear picture of a synthetic identity.This is why I always tell lenders not to look for perfectly polished online accounts. A profile can be curated in a week. What matters is years of coherence: the same identity showing up consistently across different places, over time.3. Gambling Site RegistrationsThis one is fairly intuitive, but our data backs it up.Based on our internal data, registration on gambling platforms correlates with higher default rates. Even without documented losses on record, the presence alone carries weight.It isn't a disqualifier on its own. Plenty of people register on a platform once and never return. But when this signal appears alongside others, it becomes more meaningful: a new SIM card, inconsistent identity data or attempts to obscure the applicant’s digital context. At that point, it tends to support a broader pattern of financial impulsiveness rather than contradict it.Risk teams working with thin-file borrowers face this challenge often. There's not enough traditional data to make a confident call, so behavioral signals like this become proportionally more important.A single gambling registration might be noise. Multiple overlapping signals are harder to ignore.4. Tor Browser Or VPN Use At The Time Of ApplicationPeople have legitimate reasons to use a VPN. Privacy concerns are real, and this isn't about judging general browsing habits. But applying for a loan through one is a different behavior entirely.When someone masks their IP at the exact moment they're submitting financial information, it raises a specific question: What are they concealing, and why at this particular step?In my experience reviewing fraud patterns across digital lending portfolios, this specific behavior shows up disproportionately in confirmed fraud cases.The distinction matters. A borrower who uses a VPN daily for work but disables it when applying is behaving normally. A borrower who activates it specifically for the application step is doing something intentional.That intent is worth flagging.5. Email Age And StructureAn email like john.smith@gmail.com carries a different weight than js948201@gmail.com. And a custom domain like john@company.com is a different tier again.I have seen this pattern across lenders in very different markets—from emerging to highly developed ones. The details change, but the signal keeps showing up.A name-based email with years of history usually points to identity stability. A randomly structured email created shortly before the application tells a different story.In portfolios I have reviewed, loans tied to emails created less than 30 days before the application were meaningfully more likely to become non-performing. In some markets, the risk of a loan becoming a non-performing asset was around 25% higher.That does not make every new email suspicious. But in lending, email history is rarely just a technical detail. It is often a sign of continuity, or the lack of it.How These Signals Work Together, Not In IsolationThe value of digital footprint analysis is in pattern recognition, not in treating any single signal as a reason to reject more people.​Credit bureaus are very good at showing what happened before. Digital footprint data is better at showing whether the person applying today looks stable, consistent and real in the environment where the loan is being issued.​This is especially powerful with thin-file borrowers. Some applicants look risky on paper simply because the bureau does not know enough about them yet. But their digital behavior may show years of consistency, normal account history and a coherent identity.​That is where the real opportunity is: not rejecting more people but in approving better ones.​Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?