The National Privacy Commission (NPC) said Monday that identity theft and other online abuses result from a combination of a person's online activities and cannot be carried out solely using information contained in the QR code of the Bureau of Internal Revenue's (BIR) registration seal.