What should we do about identity fraud?