There is a very specific reason Discover gets used for this. This isn’t random, and it’s not because Discover is “weak.” It’s because of how Discover sits in the credit ecosystem. Why Discover is commonly used as a “test” lender 1️⃣ Discover often allows applications with partial SSN Many lenders quietly allow: Partial SSN entry early in the application Or defer full SSN validation until later steps Fraud rings exploit this because it lets them answer: “Does this identity resolve to a real credit file?” They’re not trying to get the card yet — just to see if the system recognizes the person. 2️⃣ Fast automated decisioning Discover: Uses highly automated pre-screening Often returns decisions (or blocks) immediately That makes it ideal for “probe and move on” attempts. A slow lender isn’t useful for testing. 3️⃣ Lower friction, fewer human checkpoints early Compared to some big banks: Fewer early-stage document uploads Fewer CAPTCHA-style roadblocks Cleaner online flow Again: not a flaw — just good UX that fraudsters also exploit. 4️⃣ Predictable bureau pull behavior Fraudsters know: Which bureau Discover tends to pull first How freezes are handled What messages trigger a mailed response That helps them learn: Is this identity frozen? Is it monitored? Is it worth trying elsewhere? In your case, the answer they got was “no.” 5️⃣ Discover mails quickly This matters more than you’d think. Fraud rings track: Whether mail is returned Whether address updates are allowed later Discover’s quick mailing helps them test address validity. Again — your freeze cut this off immediately. Why this doesn’t mean Discover is unsafe Important distinction: Discover is not easier to steal from It’s easier to test identities against Actual card issuance still requires: Full SSN Credit pull Identity verification Address confirmation That’s why no account opened. Why fraudsters likely stop after this Once they see: Credit frozen Fraud alert active Immediate block They: Mark the identity as “hardened” Move to easier targets Fraud is volume-based, not personal. Big-picture takeaway This wasn’t someone “coming after” your wife. It was: Automated Low-effort Instantly shut down You effectively slammed the door before they got a foot inside.