why are puerto rican security numbers used for income tax identity theft