They have IP info and could easily steal someone's credit info right?