Synthetic data generation has become a strategic capability in financial analytics, promising to reconcile the sector’s appetite for data-hungry machine learning with strict privacy, confidentiality, and regulatory constraints. This review provides a structured, evidence-based account of the field that is both conceptual and empirical. On the conceptual side, it explains how the principal generators work, states their objectives formally, and derives the practical consequences of each mechanism for financial data; it then organises evaluation into an operational fidelity–utility–privacy framework, extends it to incorporate the fairness and model-risk requirements imposed by regulated lending and insurance and the validation constraints that differ by data type, and offers explicit guidance on selecting a generator. On the empirical side, it maps the intellectual structure of the field through a science-mapping study of 313 Scopus-indexed documents (1997–2026) retrieved with a four-block Boolean query executed on 27 July 2026 and screened from 591 retrieved records. Performance analysis reveals sustained exponential growth, at an annual rate of 14.1% to 17.5% depending on how the endpoints are set, with 2026 covering only the first 208 days of the year, and 73.8% of output published since 2023. The corpus has accumulated 4359 citations with an h-index of 35 and pronounced inequality (Gini = 0.737; 26.2% of documents uncited), although 96.3% of the uncited documents appeared in 2025 or 2026 and the Gini falls to 0.599 once the analysis is restricted to documents with at least eighteen months of citation exposure, so these figures reflect the citation window as much as scientific impact. Co-word analysis, a strategic thematic map computed from the equivalence index, and an unsupervised clustering pipeline validated using the silhouette, Davies–Bouldin, and Calinski–Harabasz indices, together with seed, subsample, and specification stability tests, identify five overlapping and provisional research fronts: risk modelling and Monte Carlo simulation; fraud and credit-risk detection under class imbalance; privacy-preserving generation; machine-learning analytics and benchmarking; and biomedical simulation methods transferable to finance. The internal validation indices are weak in absolute terms, so these fronts are best read as an exploratory summary of a densely connected intellectual space rather than as sharply delineated lines of enquiry. We conclude that the field’s binding constraint has shifted from generation to certification: realistic financial data can now be produced, but the evidence that would establish a given synthetic dataset as simultaneously realistic, useful and safe—downstream performance on representative financial tasks, quantified disclosure risk, and robustness across market regimes—is still assembled on a study-by-study basis rather than through shared benchmarks.
The Problem Synthetic Data Solve
Financial institutions operate under an apparent paradox. They generate vast quantities of granular data—transactions, orders, prices, credit files, and claims—yet the analytically most valuable records are precisely the ones most tightly restricted by privacy law, commercial confidentiality, and prudential regulation
[1]. Four structural constraints follow. First, sensitive records cannot be freely shared with vendors, academic partners, or even across a firm’s own business units, which starves model development of data. Second, the events that matter most for risk—defaults, fraud, and market dislocations—are rare, producing class imbalance so extreme that a classifier can achieve 99.9% accuracy by predicting that nothing ever happens. Third, historical data document only the scenarios that actually occurred, which is a poor basis for stress testing against those that have not. Fourth, regulatory scrutiny of model risk requires reproducible development environments that cannot always be populated with live customer data.
Synthetic data address all four at once, and this is the source of their strategic appeal. The core idea is deceptively simple: instead of protecting a dataset by perturbing or redacting it, one builds a model of the process that generated it and samples entirely new records from that model
[2,3][2][3]. Because a synthetic record is a draw from a fitted distribution rather than a disguised real record, the one-to-one correspondence with an identifiable individual is severed in principle. The qualification ‘in principle’ is essential, and much of this review is devoted to it: a generator that memorises its training data reproduces real records under a synthetic label, which is why validation, not generation, is the field’s central methodological problem.
Intellectual Lineage
The idea is considerably older than the current deep-learning wave (
Figure 1). Its statistical roots lie in Monte Carlo experimentation, introduced in the late 1940s to study systems too complex for closed-form solution
[4], and in resampling methods such as the bootstrap, which manufactures new samples from an empirical distribution
[5]. The decisive conceptual step for privacy came in 1993, when Rubin and Little independently proposed generating fully or partially synthetic microdata as a principled route to statistical disclosure limitation
[6,7][6][7]. Their insight—that multiple imputation machinery could be repurposed to release analytically useful data without releasing anyone’s actual record—is the direct ancestor of the modern field.
Figure 1. Historical development of synthetic data, from statistical simulation to generative AI. Milestones are grouped by the methodological family they inaugurated; the acceleration after 2014 corresponds to the deep-generative era documented bibliometrically in
Section 3. Source: Authors’ own elaboration
[1].
Quantitative finance developed a parallel and equally rich tradition of simulating markets and risk factors. Agent-based artificial markets reproduced stylised facts of returns such as volatility clustering and fat tails
[8]; GARCH-type models generated value-at-risk paths
[9]; multivariate stochastic-volatility and time-varying density models captured evolving dependence structures
[10,11][10][11]; nonparametric and kernel methods supported time-series prediction
[12]; and copula theory supplied a flexible apparatus for reproducing nonlinear dependence
[13,14][13][14]. Applied work compared model-generated against real observations for prediction
[15], while the plasmode paradigm—resampling real records with known effects injected—showed how realism and controlled ground truth could coexist
[16]. For the imbalance problem, the Synthetic Minority Oversampling Technique (SMOTE) interpolated between minority-class neighbours and became the durable baseline against which later generators are measured
[17].
The field was then transformed by deep generative modelling. Generative adversarial networks framed generation as a minimax game between two competing networks
[18], while variational autoencoders offered a probabilistic, latent-variable alternative
[19]. These architectures were rapidly specialised for the tabular and sequential data that dominate finance
[20,21,22,23][20][21][22][23] and coupled with formal privacy guarantees through differential privacy
[24,25][24][25] and teacher-ensemble mechanisms
[26]. Since 2020, denoising diffusion models
[27,28][27][28] and large language models repurposed as tabular generators
[29,30,31][29][30][31] have advanced the frontier further. An influential industry statement of the opportunities and pitfalls of synthetic data in finance crystallised the agenda for the current decade
[1].
Scope and Contribution of This Review
Despite this momentum, two gaps persist. The field lacks a consolidated, quantitatively grounded map of its own structure, and practitioners face a fragmented evaluation landscape in which no single metric certifies that synthetic data are simultaneously realistic, useful, and safe
[32,33][32][33]. This review addresses both. It explains the mechanisms of the principal generators and states their objectives formally, so that the reader understands not merely what each method is called but why it behaves as it does; it characterises the literature empirically through a bibliometric and natural-language-processing analysis of 313 documents; it organises methods into a four-family taxonomy with explicit selection guidance; and it articulates an operational validation framework.
Section 2 describes the corpus and analytical pipeline,
Section 3 reports the science-mapping results,
Section 4 and
Section 5 develop generation methods and validation,
Section 6 reviews applications, and
Section 7 and
Section 8 set out future directions and conclusions.
Synthetic, Simulated, Augmented, and Privacy-Preserving Data
Four terms circulate in this literature and are often used interchangeably, although they denote different objects and carry different evidentiary burdens. Simulated data are drawn from a stochastic process specified by the analyst; their properties are known by construction, and the question of whether they resemble any particular real dataset need not arise. Synthetic data are drawn from a model fitted to a specific real dataset with the intention that the two be statistically substitutable, which makes resemblance something to be measured rather than assumed. Augmented data are derived from real records by transformation or interpolation—SMOTE is the canonical financial example—so that every new point remains anchored to observations that exist; augmentation enriches a sample without claiming to replace it. Privacy-preserving synthetic data are synthetic data produced under a mechanism that bounds disclosure risk formally, adding a guarantee that ordinary synthesis does not supply.
The distinction matters because each term implies a different validation obligation: simulated data must be justified by the plausibility of the assumed process, synthetic data by measured fidelity to a reference sample, augmented data by whether the interpolation respects the geometry of the region it fills, and privacy-preserving synthetic data by a declared budget together with an explicit attack model. Conflating them licenses a common inferential slip in which the privacy guarantee attaching to one category is claimed for another. The looseness is visible in the corpus itself: 76 of the 313 documents (24.3%) enter through the phrase ‘simulated data’ without using ‘synthetic data’ anywhere in the title, abstract or keywords; these are predominantly Monte Carlo and econometric studies whose purpose is scenario generation rather than record substitution. Throughout this review, ‘synthetic data’ is used in the narrow sense of model-generated records intended to substitute for real ones, and the other categories are named explicitly wherever they are meant.