Our lenders are wanting to be able to change addresses on uncooperative customers, say who are past due etc., if they know they have moved but refuse to fill out the change of address paperwork.

If we put the necessary mitigation steps in place from an identity theft standpoint should I draw a hard line on this?

You are running the risk of someone else intercepting that customer info. I know it seems a huge pain but I wouldn't do it. That's just my opinion.