They won't even need to do that. With enough time and money, they can certainly figure out how to not trigger the ID verification system.