The real problem is figuring out whether an address has been actually stolen, or whether the user is indulging in a spot of insurance fraud.