What happens when the system designed to verify your identity becomes a tool that can help criminals steal it?