Knowledge-Based Authentication (KBA)

Verifying identity by asking for facts the legitimate person is expected to know, such as a national ID number, address or date of birth. It fails once those facts are widely stored or leaked, because knowledge cannot be revoked or rebound.