Identity Theft and Fraud: What Do We Know from Research and Practice