> I know his partner consented to this, but this doesn't seem like it should be enough to make this not identity fraud. Most crimes require an intent to commit

> I know his partner consented to this, but this doesn't seem like it should be enough to make this not identity fraud. Most crimes require an intent to commit the crime, with notable exceptions (possession). His intent was not fraud, it was security research. As demonstrated by getting the permission of the potential victim, and carefully avoiding things like forgery.