> (they'd at least need to dig through it more than just going by first/last name on the account itself).
FYI this is beyond trivial and automated to the nth degree. There is so much more to go off of than some form fields to uniquely identify a person.
For linking activity back to your person? Without name, payment details, photos of face, or IRL social graph the easiest path that comes to mind is IP address. But that's going to involve additional inquiries and is likely ambiguous (unless you live alone, but determining that is again more work).