I have heard 123rf are starting to ask for verification of identity (scanned passport ID card) by e-mail. They also have a link on their website unfortunately they seem to be blissfully ignorant of ID theft so the link isn't to a secure server.
Of course I uploaded my passport pic to FT, iStock and SS months ago without thinking but now I am paranoid.
I suppose the rest will get wise eventually.