There really should be an investigatory process when credit is fraudulently taken out in someone else's name. How did the company get duped into making the loa

There really should be an investigatory process when credit is fraudulently taken out in someone else's name. How did the company get duped into making the loan? If the answer is something like "we treated an SSN as identification", that company should lose the right to be a credit issuer.