There are several ways Identities are stolen, I would try my best to itemize a few and possible ways to curtail/prevent them
You are right, hackers and criminals have so many attack vectors, to make victims online from hacking and stealing personal data such like KYC. We have very huge inconvenieces to take to stay safe online against hackers and criminals.