If they don't do any verification, and I'm not sure how they would in countries like the US, then any fraud case or attempt to claw in money from random people should be thrown out of court by any reasonable judge.
Requiring only public information and a SSN that has probably leaked hundreds of times and can be accessed by any number of random people in public and private administration just shouldn't count as even an attempt to verify identity.
Requiring only public information and a SSN that has probably leaked hundreds of times and can be accessed by any number of random people in public and private administration just shouldn't count as even an attempt to verify identity.