Web security consultant troy hunt says scammers can quickly take control of your identity through this method.