And how would the service verify the statements? Why would it take a fake account? It's not that hard to get a sample statement and modify it to seem real. If you could get confirmation from a bank or utility that might be enough to prevent forgeries, but what incentive would there be for them and why would they want to share private information?