To do so, GAO designed four test scenarios that simulated the actions of a malicious individual who had access to an American citizen’ s personal identity information. GAO created counterfeit documents for four fictitious or deceased individuals usin…