Identity theft is only as bad as the fraud that was performed through it. If the act causes a measurable loss to the victim (e.g. credit card fraud), the victim is going to find out about it one way or another. No need for surveillance. However, if you wanted to effectively forbid anyone from impersonating anyone else even when no harm is done, you would definitely need a surveillance society.