§ 37.29  SUSPICIOUS PERSONAL IDENTIFYING INFORMATION.
   (A)   Personal identifying information provided is inconsistent when compared against external information sources used by the municipality. For example:
      (1)   The address does not match any address in the consumer report;
      (2)   The Social Security number (SSN) has not been issued or is listed on the Social Security Administration’s Death Master File; or
      (3)   Personal identifying information provided by the customer is not consistent with other personal identifying information provided by the customer. For example, there is a lack of correlation between the SSN range and date of birth.
   (B)   Personal identifying information provided is associated with known fraudulent activity as indicated by internal or third-party sources used by the municipality. For example, the address on an application is the same as the address provided on a fraudulent application.
   (C)   Personal identifying information provided is of a type commonly associated with fraudulent activity as indicated by internal or third-party sources used by the municipality. For example:
      (1)   The address on an application is fictitious, a mail drop, or a prison; or
      (2)   The phone number is invalid or is associated with a pager or answering service.
   (D)   The SSN provided is the same as that submitted by other persons opening an account or other customers.
   (E)   The address or telephone number provided is the same as or similar to the address or telephone number submitted by an unusually large number of other customers or other persons opening accounts.
   (F)   The customer or the person opening the covered account fails to provide all required personal identifying information on an application or in response to notification that the application is incomplete.
   (G)   Personal identifying information provided is not consistent with personal identifying information that is on file with the municipality.
   (H)   When using security questions (mother’s maiden name, pet’s name, and the like), the person opening the covered account or the customer cannot provide authenticating information beyond that which generally would be available from a wallet or consumer report.
(Res. 2009-041, passed 11-16-2009)