I work at a University, and we require a copy of someone's Social Security Card in order to make a name change on that person's record. So what does one person do? They mail us (regular US mail...not certified, not Fed Ex...regular mail) their actual Social Security Card!!!!
Now, I know that some of these identity theft stories get blown out of proportion, but come on!