I couldn't have asked that better myself.
It's not only interesting, it's highly problematic. I know dozen's of people's names, phone numbers and dates of birth (relatives, coworkers, neighbors, friends, enemies). That's all I (or anyone) need to maliciously add cards to those unsuspecting people's CRs. Their cards would arrive at my address; they would be none the wiser... until cards mysteriously appear on their CRs thanks to CapOne's laxity.
I wonder what would happen if you challenged that card, demanding its removal. (Not that you would, but hear me out.) I gather (correct me if I'm wrong -- as if) the reporting agency would then contact CapOne to verify the card was added legitimately. One wonders what CapOne would say. "Uhh, no, we don't have a SS#, but good golly we're kinda pretty sure that's probably maybe the right authorized user."
Yes, agreed. It seems a bit to easy to add someone without their permission.
I actually removed myself as an AU on my wifes account earlier this week. From what I've read it should be removed from my credit report within 30 days. I'll report back if that's actually the case.