They updated the app sign-up process with a step where you had to take a photograph of your driver's license with your phone, and then take a photo of yourself (to confirm that the license you were signing up with was indeed yourself). These two photographs were not checked manually but were "analyzed" but a facial recognition thing. They did this to streamline the sign up process and get people access to the vehicles with an active membership quicker.
But, when this feature was introduced it was almost immediately abused by a network of fraudsters that had stolen driver's license and stolen credit cards. They used GIS (google image search) to find photos of similar faces to the faces that were on their stolen driver's licenses and uploaded a photo of that face with their phone.
I discovered this when tracking unusual car activity and investigating the new accounts that were driving them and seeing the weird staged headshots of US Senators and other professionally taken photographs that populate GIS results as the submitted "selfie" photo's that were supposed to confirm the new member's identity.
BTW, much like the article mentions, our European counterparts were surprised with this abuse and "hacking" of the system and said they never experienced it over there while running this feature for months before us.