At what point do the grantors of credit become responsible for their actions? They are the ones who are supposed to use "due diligence" in approving any and all credit and loan applications. If a social security number belongs to a 3 year old, is it not a red flag something is wrong when a 3 year old applies for credit? If a credit check shows multiple addresses currently being used by an applicant, is that not cause for concern? I have always felt that victims of identity theft should counter sue those who granted the credit or loans for not exercising due diligence and neglect in their fiduciary duties. That would put a lot of pressure on banks etc. that mindlessly approve credit applications.