A method and system of detecting identity theft is disclosed. The method and system includes receiving identity data, the identity data including at least an address. Then, the address is compared to an external address database to determine whether the address is potentially fraudulent. The address is checked against a known fraud address table database to determine whether the address is fraudulent. The address may also be checked against a known good address table database to determine whether the address is potentially fraudulent. At least one database is queried for available incidental data associated with the address. And, a user is asked a question based upon the incidental data retrieved from the database, whereby the identity of the user is verified.