Lex Fridman PodcastMatthew Cox: FBI Most Wanted Con Man - $55 Million in Bank Fraud | Lex Fridman Podcast #409
CHAPTERS
- 0:00 – 1:02
Cold open: girlfriend finds cash stash and discovers he's a fugitive
Matthew recounts a tense moment when a girlfriend finds $40,000 in cash in his freezer and confronts him. He admits law enforcement is looking for him for bank fraud, and reveals that even his name is an assumed identity.
- •Cash hidden in a freezer triggers a confrontation
- •He admits multiple agencies are looking for him
- •Reveals the relationship is built on an alias/identity theft
- •Shows the paranoia and secrecy of life on the run
- 1:02 – 2:03
Lex sets the stage: 13 years in federal prison for fraud and identity crimes
Lex introduces Matthew Cox and summarizes the scope of his crimes and conviction history. The conversation is framed as exploring criminal psychology and human nature at extremes.
- •Convictions include bank/mortgage fraud, identity theft, passport fraud
- •Served 13 years in federal prison
- •Matthew now interviews criminals and writes true crime stories
- •Framing: understanding mindset, incentives, and escalation
- 2:03 – 11:30
First step into mortgage fraud: Wite-Out on a rent record
Matthew describes his first fraudulent act as a mortgage broker: literally whiting out a negative mark on a verification-of-rent document. The fear is less about prison and more about losing income while already drowning in bills.
- •Fraud begins as “small” document alteration
- •Manager instructs and normalizes the act
- •Motivation: financial pressure, fear of getting fired
- •Early rationalization: “gray area” thinking collapses into clear lying
- 11:30 – 16:44
From exception to habit: altering W‑2s, pay stubs, appraisals, and 'helping' borrowers
After the first successful fraud, Matthew escalates quickly—adjusting income figures and other documents to force loans through. He justifies it as helping struggling people, but later recognizes the harm and the flawed logic.
- •Success emboldens repeat behavior
- •Common fraud tools: W‑2s, pay stubs, verifications of rent, appraisals
- •Self-justification as helping people get homes
- •Later reflection: some borrowers were set up to fail and foreclose
- 16:44 – 20:48
How credit really starts: the insight that enables synthetic identities
Matthew explains a key vulnerability: credit bureaus don’t ‘know’ you until you first apply for credit. That means a new profile can be created from supplied identity data—opening a path to building fake-but-functional credit histories.
- •Credit profiles begin at first inquiry/application
- •Bureaus accept submitted name/DOB/SSN/address as initial truth
- •Operating 'on the inside' of lending reveals underwriting patterns
- •Early exposure to 'liar loans' and low-documentation programs
- 20:48 – 34:50
Bootstrapping fake people: child SSNs, forged birth certificates, and secured credit cards
A real-world example (a woman using her child’s SSN) inspires Matthew to systematically manufacture identities. He describes tactics for obtaining SSNs, fabricating supporting documents, and building credit scores via secured cards.
- •Testing: child SSNs produce “no file found” rather than alarms
- •Phone-script iteration with Social Security to learn requirements
- •Forging birth certificates on security paper with seals/embossing
- •Using secured cards to generate a credit score in ~6 months
- 34:50 – 50:33
Turning identities into millions: property flipping, appraisal comps, and recorded-value manipulation
Matthew details how synthetic borrowers become vehicles for large mortgage fraud: buying distressed houses cheap, recording inflated sale values to create comparable sales, and refinancing out cash. He emphasizes how systems and human shortcuts made the scheme scalable.
- •Create comp sales by recording inflated values via doc stamps
- •Curb-appeal renovations + blacked-out windows to pass drive-bys
- •Refinance synthetic owners to extract cash far above true equity
- •Closings often executed by Matthew picking up docs and signing offsite
- 50:33 – 1:01:14
Probation and betrayal: Gretchen’s wire, FBI contact, and the 'don’t snitch' mistake
After earlier legal trouble leads to probation, Matthew describes how an associate (Gretchen) flips and cooperates. He recounts realizing he’s being recorded, hiring lawyers, and rejecting a chance to avoid indictment by cooperating first—something he later regrets.
- •Earlier case ends with probation and loss of broker license/ownership
- •Gretchen’s attorney pushes her to wear a wire
- •Matthew incriminates himself while trying to coach a story
- •He refuses early cooperation, later seeing co-conspirators cooperate immediately
- 1:01:14 – 1:19:22
Omertà vs reality: why criminals cooperate and how 'loyalty' collapses under pressure
Matthew and Lex discuss the code of silence and why it fails in white-collar (and most) cases. Matthew argues that expecting integrity from people already willing to lie and steal is delusional, and that the system incentivizes cooperation.
- •High cooperation rates; nobody admits it inside prison
- •‘Stand-up’ non-cooperators often lose family/support anyway
- •Ethical inconsistency: criminals demand loyalty while victimizing others
- •Matthew’s worldview shifts toward pragmatic expectations of people
- 1:19:22 – 1:42:30
Reservoir Dogs identities and DIY infrastructure: fake banks, fake appraisals, stand-ins at closings
Back on probation, Matthew describes industrializing the scam: themed synthetic names, fake bank websites/phone verifications, and even appraisals produced using software obtained under someone else’s license. When a title company demands a borrower appear, he recruits a real person to impersonate the fake identity.
- •Naming synthetic borrowers after Reservoir Dogs characters
- •Fake banks used for reserves/down-payment verification calls
- •Appraisal software acquired by impersonating a licensed appraiser
- •Recruiting Eric to appear as 'James Red' using mugshot-based ID
- 1:42:30 – 1:59:17
Getting 'caught' without consequences: banks focus on loss recovery, not prosecution
Matthew tells multiple stories where lenders detect strong fraud signals but prioritize minimizing financial loss and avoiding clawbacks. In one close call, he admits the broader scheme to a bank’s leadership and negotiates repayment to prevent FBI involvement.
- •Southstar Bank confrontation: they suspect borrower doesn’t exist
- •Matthew reveals he controls the comps/identities and offers payoff
- •Washington Mutual and other lenders choose refinance/settlement paths
- •Industry incentives: as long as loans perform past clawback windows, fraud is tolerated
- 1:59:17 – 2:12:48
A separate identity-theft scam with Alison: hair dye, suspicious closings, and a risky check deposit
Matthew shifts to a scheme involving a stolen real identity and a girlfriend (Alison) acting as the victim. A mismatch in appearance triggers suspicion at a closing, and a later attempt to cash a large check through a friend becomes the turning point when police arrest the depositor.
- •Using a stolen identity to transfer deed and refinance repeatedly
- •Operational failure: changing hair color breaks the ‘match’ at closing
- •Attempt to cash a ~$100k check via Travis Hayes’ account
- •Travis is arrested at the bank; Matthew confirms by calling the synthetic number and reaches an officer
- 2:12:48 – 2:22:41
Trigger to run: task force heat, subpoenas, reporter calls, and fleeing Tampa with cash
Warning signs stack up—subpoenas on files, a reporter investigating, and a sheriff’s deputy friend relaying that a task force has handed findings to the FBI. Matthew liquidates what he can, packs, and prepares to vanish rather than face prison.
- •Subpoenas served on multiple transactions signal coordinated investigation
- •Media scrutiny: reporter calling sellers asking if buyers exist
- •Law-enforcement insider warning: FBI arrest imminent
- •Scramble for cash via checks and withdrawals; packs and leaves
- 2:22:41 – 6:00:53
On the run: Becky joins, plastic surgery, stolen identities, DMV-issued licenses, and homeless 'surveys'
Matthew describes building a new life under stolen identities: renting homes, obtaining legitimate DMV licenses in other states, creating virtual offices, and filing forged satisfactions of mortgage to clear titles in public records. He also targets homeless people as low-risk identity sources, collecting full biographical data via fake 'federal survey' forms.
- •Appearance change plan: nose job, facelift, hair transplants, teeth work
- •Identity theft operations: order documents, register to vote, get DMV IDs
- •Forged satisfactions of mortgage filed in county records to clear liens
- •Homeless identity harvesting via clipboard ‘survey’ to gather full KBA-style info
