One point - since the customer must use a PIN to access their account online, wouldn't that be a form of identification? So you have identified him/her, and they have expressed interest in the account, or done a transaction.
A bit weak on the ID side, but....
_________________________
My employer will disavow any knowledge of my responses.