[mjwhansen]

Anecdote: I used to work with donation processing, and we had a situation where we had transactions that I knew we're identity theft (email addresses were the same, IP the same, but zip, CVV, name correct, and all submitted in a short timeframe). I refunded the transactions and called the banks to report that the cards had been stolen, and the banks basically threw their hands up in the air.

[kevinconroy]

I work with donation processing. We found the same response from the banks, so we've started trying to look up the identify theft victims in the white pages and calling them. Sadly, we only get a 20% hit rate for working phone numbers and typically only get in touch with half of them.