For decades, government agencies have relied on PINs, passwords, and other knowledge-based authentication (KBA) credentials to verify customer identities. The trouble is, KBA information is now easy for criminals to steal, buy, or phish to help them carry out fraud attacks