Talib Hussain, 75, and his son Mirza Khan, 48, both of Pittsford, face federal charges after a grand jury indicted them on 19 counts for allegedly operating a synthetic identity fraud scheme that caused more than $2.2 million in losses, according to the U.S.
Federal prosecutors state the scheme operated from about 2012 through July 23, 2024. According to the indictment, Hussain and Khan obtained valid Social Security numbers belonging to real people—specifically targeting children whose credit histories receive less frequent monitoring—and used them without permission to build synthetic identities.
Indictment Details and Financial Losses
The defendants allegedly submitted about 1,072 online applications for credit and debit cards from various major financial institutions. According to prosecutors, Hussain and Khan rented apartments in the Western District of New York to use as mailing addresses for the plastic cards.
Bank. The total losses to these lenders reached approximately $2.26 million, alongside severe damage to the credit ratings of the identity-theft victims.
Assistant U.S. Attorney Meghan K. McGuire is prosecuting the case.
Retail Purchases and Property Tax Payments
After acquiring the credit and debit cards, the father and son allegedly used them to make purchases at retail stores including Apple, BJ’s Wholesale Club, and Sam’s Club. Prosecutors state the cards were also deployed at businesses operated by the defendants, which included Lucky Beverage, Chili Express Mart, and Easy Food Market.
The indictment further alleges that Hussain and Khan used the fraudulent credit lines to pay property taxes on three separate Rochester properties. To manage the accounts, the defendants allegedly made payments toward card balances using fraudulent checks, which temporarily raised their spending limits before the full balances ultimately went unpaid.
Legal Penalties and Official Warnings
The 19-count indictment charges Hussain and Khan with conspiracy to commit bank, wire, and access device fraud, substantive access device fraud, and aggravated identity theft. According to the U.S. Attorney’s Office, these charges carry a maximum statutory penalty of 30 years in prison and a $1 million fine.
“This case serves as a warning that those who commit identity theft will be prosecuted,” U.S. Attorney Michael DiGiacomo said, while also urging families to monitor their children’s credit closely to prevent synthetic identity abuse.
Keep reading