The service should not be used as a means of verifying identity in the battle against fraud, Ofcom says.