It’s time to start penalizing these companies in a way that hurts. The real cost of asking hundreds of thousands of people to “monitor their accounts and credit” and the costs of resolving any fraud needs to be assessed, probably at treble damages.