Can this scheme actually work? It’s like you get a random (or almost random) person’s ID copied and just walk into a bank to withdraw the money from their personal account. Can this actually work when the bank clerk is not that attentive, for instance? 
It’s not that difficult to get a fake ID from idgod.to or a similar website. It’s simple and not expensive at all. But you need to be ready to face the consequences because it’s still considered a forgery, and forgery is a fraud in all fifty states. 
I don’t want a random person to withdraw all my money. How can I additionally secure my account?