This starts with the framing. One does not have their identity stolen. The counterparty is instead defrauded into believing something that is not true - and the problem must be made entirely theirs.
It’s mad. Criminal A defrauds company B by pretending to be some rando C. And somehow this ends up being C’s problem, and we just accept this as normal.
