We use Experian's Knowledge-Based Authentication, which is similar to what ben1040 mentioned above. It is based on your name, address, and sometimes your SSN.

You can read more on Experian's KBA here: https://www.experian.com/products/pdf/knowledge_iq.pdf Or here: https://www.experian.com/esolutions/esolutions/products/frau...