Comment by twiclo

They're also required to identify the user with an address and ID. My understanding is some take your SSN