And in the US they can’t issue a debit card within 30 days of an address change without specifically verifying the change is legitimate: https://www.ecfr.gov/cgi-bin/text-idx?SID=a04646f38f28731e83...