how do you make sure that identity is not abused?