SMH hit piece, page-3

Exactly. It's an anti fraud measure that they outsource to Illion. Afterpay doesn't have direct access to the data.

When Afterpay on-boards a new customer they are supplied an ID with name and address, so the new customer is voluntarily supplying personal information. 

Afterpay then check with Illion to determine if the information they've been given matches records. They can't scour the data for leads, which seems to be what the article's attempting to imply.

Otherwise I don't understand the point of the article, there's no issue.