Skip to content
STI
← Back to Blog

1 Million Points or a $47,000 Mortgage Fraud Bill: Which Identity Theft Risk Should You Actually Worry About in September 2026?

Two people, two very different identity theft problems

Picture two friends comparing notes over coffee this week.

Friend A just wrote up how she booked a family cruise through an airline-branded travel portal and walked away with close to 1 million miles — the kind of story NerdWallet profiled in "How I Earned 1 Million Points With My Family Cruise Booking." Her exposure, if someone gets into that account, is a rewards-fraud problem: points, elite status, maybe a stored credit card.

Friend B is mid-mortgage application. NerdWallet's rate tracker for Friday, September 18 reported mortgage rates held steady — no move up or down that day, which means she's still locked into whatever rate she secured, watching the clock on her rate-lock window while paperwork moves through underwriting. Her exposure, if someone opens a fraudulent account or intercepts her closing documents, is a new-account/mortgage-fraud problem.

Both of them are worried about identity theft. Neither of them is facing the same dollar amount, the same number of recovery hours, or the same urgency. That's the head-to-head comparison most generic identity-protection advice skips entirely — it treats "identity theft" as one risk with one price tag, when it's actually several different risks with wildly different price tags depending on which door the fraud walks through.

Rewards fraud vs. mortgage fraud: the numbers side by side

Rewards/Points Fraud (Friend A)New-Account/Mortgage Fraud (Friend B)
Typical recovery cost$200–$545$8,500–$47,000
Recovery time5–20 hours40–100+ hours
Who absorbs the loss firstAirline/hotel program (often reverses it)You, until banks and credit bureaus sort it out
Time-sensitive triggerAccount lockout, lost redemption valueRate-lock expiration, closing delay, re-appraisal
Recurrence riskModerate — loyalty accounts are common targetsLow frequency, high severity

The wide range on mortgage fraud isn't a typo. It reflects how much the fraud-type gap has shown up consistently across recovery-cost breakdowns this year, from credit card fraud sitting near $200 up through mortgage-related identity theft landing near $47,000 once you count re-underwriting, credit report disputes, and legal fees. The 4-variable exposure formula breaks down exactly which inputs push you toward the low end versus the high end.

This is the kind of comparison Pavelinox runs automatically against your actual accounts — so you're not eyeballing a range table and guessing where you land.

Why September 2026's labor market makes the time cost matter more

The Bureau of Labor Statistics' latest release put the Consumer Price Index up 0.4% in August 2026, unemployment at 4.1%, payroll employment up 162,000, and average hourly earnings up only $0.10. Put those together and you get a specific, unflattering picture: prices are creeping up faster than wages are. If fraud recovery eats into your paid work hours, you're replacing that time at a wage that isn't growing much, while the CPI print means every dollar of direct fraud loss — reissued documents, notarization fees, credit-freeze mailings — buys slightly less than it did a year ago.

Here's a worked example, using a $35/hour wage as an illustrative stand-in (swap in your own):

Friend A, rewards fraud:

  • 12 hours of recovery calls and dispute forms × $35/hour = $420 in opportunity cost
  • Direct loss: $0 (airline reversed the redemption) to $200 (partial loss of a companion fare)
  • Total: roughly $420–$620

Friend B, mortgage fraud during underwriting:

  • 80 hours of recovery work × $35/hour = $2,800 in opportunity cost
  • Direct costs: credit report corrections, notarized affidavits, potential re-appraisal fee ($500–$700), legal consultation ($1,500–$3,000)
  • Rate-lock exposure: if the fraud investigation pushes closing past her lock expiration and mortgage rates move even 0.25 percentage points against her on a $400,000 loan, that's roughly $1,000/year in added interest for as long as she holds the loan
  • Total: $8,500 on the low end, climbing toward $47,000 if the fraud triggers a full re-underwrite, a second credit pull that dings her score, and a rate re-lock at a worse number

Same base wage, same CPI environment, radically different totals. That's the whole point — the fraud type determines the order of magnitude more than almost any other variable. The hidden $22,306 rate-delay breakdown walks through exactly how a mortgage-timeline delay compounds into a five-figure number even when the fraud itself was caught early.

But your numbers will differ based on your specific situation — your hourly wage, your loan size, how close you are to your rate-lock deadline, and whether your card issuer or loyalty program has a habit of reversing fraudulent charges quickly or slowly.

The "free money" wrinkle: down payment assistance widens the mortgage exposure

NerdWallet's piece on homebuying assistance programs — "Locked Out: Should You Take 'Free Money' to Buy a Home?" — flags a trade-off that's easy to miss: down payment assistance programs can lower your upfront costs, but they typically require you to route personal financial documentation through a second organization (a state housing agency, a nonprofit administrator, sometimes a third-party servicer) on top of your lender.

From an identity-theft-exposure standpoint, that's not a footnote — it's an additional data-sharing surface. Every additional party that touches your SSN, income verification, and bank statements during a mortgage transaction is another potential leak point, and mortgage fraud is already the most expensive fraud type on this list. If you're weighing a down payment assistance program, the math isn't just "how much do I save on the down payment" — it's "how much am I widening my exposure window during the most expensive fraud category I could face."

That doesn't mean skip the assistance program. It means the decision should account for both sides of the ledger, which is exactly the kind of trade-off the savings-rate exposure formula is built to quantify — because someone taking assistance to stretch a tight down payment often has a lower savings-rate cushion to absorb a mortgage-fraud hit in the first place.

Which one should you actually protect against?

Run through these questions honestly:

  1. Are you mid-mortgage right now, or within 12 months of applying? If yes, your exposure ceiling is the $8,500–$47,000 band, not the $545 rewards band. Protection spend should prioritize credit monitoring with real-time new-account alerts, not just card-fraud alerts.
  2. Do you hold six figures or more in loyalty points/miles across airline and hotel programs? Rewards fraud recurs more often but costs less per incident — a security-hygiene fix (unique passwords, 2FA on loyalty accounts) usually closes most of this gap for free.
  3. Are you using a down payment assistance program or any third-party mortgage administrator? Add a documentation-tracking step — know exactly which parties have your SSN and when they're supposed to delete or archive it.
  4. Is your hourly wage growth flat, per the BLS's $0.10 August print? If your income isn't outpacing inflation, the opportunity-cost side of fraud recovery hits harder in real terms — worth weighing paid protection that shortens your recovery hours, not just monitoring that flags the problem.

You can model this for your specific situation at Pavelinox — plug in your loan status, your loyalty balances, and your income, and it will tell you which fraud type you're actually exposed to and what the realistic recovery bill looks like, instead of you eyeballing a range table.

The honest trade-off

Paid identity protection services aren't free, and neither is the time spent setting up alerts and freezes across three bureaus. If you're not mid-mortgage, not enrolled in a down payment assistance program, and your loyalty account balances are modest, the free-tools-plus-good-hygiene path (per the free monitoring vs. paid protection comparison) may genuinely be enough. If you're Friend B — active mortgage, rate lock ticking, considering assistance money — the calculus shifts hard toward paid monitoring with new-account and public-records alerts, because the downside isn't $545, it's a five-figure number compounding on top of whatever mortgage rate you didn't lock in time.

Neither answer is universally right. The math — your loan size, your wage, your account balances, your timeline — is what decides it. If you haven't run that math for your own accounts yet, that's the number worth knowing before you decide how much protection to pay for, not after something goes wrong. Start at Pavelinox.

Sources

Ready to calculate your exposure?

Calculate Your Exposure Free