How do you verify identity, e.g. could an attacker use this to cancel a target's service? When you call customer service, cable companies usually have a few security questions to confirm the customer's identity. A letter usually has a customer signature. How do you close the identity loop with the person keying data into your web form?