identity verification risk