Most people know the "I'm not a robot" single-click version of CAPTCHA which is able to identify that a user is human by the way that they move their mouse. Researchers have now found a way to apply that principle to catching identity thieves in the act.