Most bust-out scams are built around stolen Social Security numbers, typically acquired through phishing or purchased in bulk off the dark web.