Identity theft investigation