An ID scan seems like a rather simple thing to fake...