This kind of despicable practice should be illegal.
"Some logged in on the bank website and committed identity theft electronically." "I see, did they take anything else?" "Uh, no." "Oh, good, so all the money's still there?" "What?" It's just my identity that's gone. None of your money?"
The banks, of course, figured out loopholes and with the CFPB out of commission, welcome to finance in America
Lo and behold, I get a Discover card in the mail a few weeks later.
So I called them up: I did not sign up, why did you send me the card? They insisted I had signed up. So I asked them to send me a copy of the application, with my signature on it (which they agreed to do).
And a few days later, I get a printed copy of, basically, a database record listing the automatically filled-in information. Nothing else.