As offline transactions are tagged to online profiles — Gmail or Facebook — and mobile number, it’s easy for criminals to steal your online identity.