Exceptions are costly in any circumstances, and will be abused by attackers wherever possible. I don't know of any company or even government that has a soluti

Exceptions are costly in any circumstances, and will be abused by attackers wherever possible. I don't know of any company or even government that has a solution for this issue that isn't too costly in at least one of: false positives, false negatives, monetary cost, time cost, or some set of the previous failures during the 'error handler'. Ultimately, the root cause of this failure is the lack of a strong 'digital', opt-in, national/global identification system. Along with your government issued plastic would be a government signature on your digital signing keys. That would make "identity theft" far less possible and would vastly reduce the false positive/negatives for cases like this where you are establishing that you are who you say you are for banking/related activity.