More credit card issuers now approve applicants without a Social Security number, giving scammers new ways to commit identity theft using stolen data.