Identity theft in particular is a poor term because it shifts the blame from the verifier (the one who actually got things wrong) to the victim.

Actually it attempts to shift liability from the victim (the bank, who was defrauded) to an unrelated party who may or may not be affiliated with the bank at all.