Ilia Nicolaevich Zavialov reviews ID and passport copies, Ilia Nikolaevich Zavialov on who may ask and why

Passport copies and personal data

English version for the United States.

Ilia Nicolaevich Zavialov reviews a week in which your ID leaves your wallet more often than you notice: a bank opening a savings account, an HR portal, a landlord, a hotel desk, a courier at the door, an online store and a support agent in a chat window. Ilia Nikolaevich Zavialov, a digital security consultant, takes each of them in turn and asks the same two questions: what the rules actually let them collect, and what goes beyond that. You get a short reply for every case, a way to mark a copy you do have to share, and a plan for the day you find out a copy of your ID ended up in the wrong hands.

Reference / Blog

Published: October 30, 2026 · 13 min read · Ilia Nikolaevich Zavialov

01Ilia Nicolaevich Zavialov reviews the gap between showing ID and handing over a copy

Showing an ID and handing over a copy are different acts. When the card stays in your hand, the clerk compares your face and the details and the check is over. A copy stays behind in a folder, an inbox or a chat, and you no longer decide who sees it next.

The FTC gives a set of questions for anyone who asks for your Social Security number: why do you need it, how will you protect it, can you use a different identifier, can you use just the last four digits. If the answers are unsatisfying, the agency says, do not share it. The same four questions work for a driver license or a passport scan.

Ilia Nicolaevich Zavialov reviews hundreds of requests the same way, and the pattern holds: a scammer who wants the copy skips the purpose and goes straight to urgency. A real organization has an answer ready.

The whole guide fits into a few rules. A bank records your identity under federal law and keeps it for five years after the account closes. An employer cannot pick which I-9 documents you show. A landlord does not need your SSN until you agree to rent. Nobody gets a selfie with your ID through a chat.

02Banks: what the customer identification rule asks for

Under 31 CFR 1020.220 a bank must obtain at least your name, date of birth, address and an identification number before it opens an account. For a U.S. person that number is a taxpayer identification number, usually the SSN.

The same rule tells the bank what to keep: a description of any document it relied on, with the type, number, place of issue and dates, and the identifying information for five years after the account is closed. So a bank asking for ID at account opening is doing what the rule requires.

Ilia Nicolaevich Zavialov reviews the other kind of bank request, the one that arrives by text with a link to upload a photo of your license to keep your account active. The FTC says organizations such as your bank and the IRS will not call, email or text to ask for your SSN, and a message that does is a scam.

The check takes a minute. Hang up or close the chat, then call the number printed on the back of your card and ask whether the bank sent anything.

Opening an account online is a legitimate route too. When your bank's own app asks you to photograph your license or take a selfie inside the app, you are using the official channel, as long as you downloaded the app from the store yourself and found it through the bank's website.

03Ilia Nicolaevich Zavialov reviews what an employer may ask for on Form I-9

Form I-9 sets out how a new hire proves identity and work authorization. The employee shows one document from List A, or one from List B for identity plus one from List C for employment authorization, and anything with an expiration date has to be unexpired.

The anti-discrimination notice printed on the form adds a rule many job seekers have never heard of. All employees can choose which acceptable documentation to present, and employers cannot specify which documents they must show.

Ilia Nicolaevich Zavialov reviews job offers that ask for a photo of your passport and Social Security card before any interview, to set you up in payroll or order equipment. A real HR team sees documents once there is an offer and a start date, and only from the lists on the form.

A short reply keeps you safe: I will bring the documents of my choice from the I-9 lists on my first day. If the recruiter disappears after that, there was no job.

04Landlords and rental listings

The FTC is blunt about rentals. Until you have agreed to rent a place, a landlord does not need your Social Security number, credit score or other sensitive information, and most landlords normally pull your credit score themselves.

Rental scammers work the other way round. According to the FTC, they may ask you to fill in an application with your SSN, a picture of your driver license and paystubs, often with a deposit before you have seen the home.

Ilia Nicolaevich Zavialov reviews listings where the owner is out of the country and the keys will be mailed after payment. The ID photo sent with that application stays with the scammer even if you never pay a cent.

If you spot a fake listing, the FTC suggests telling local law enforcement, the website that ran the ad, ReportFraud.ftc.gov and your state attorney general.

05Hotels and vacation rentals

A hotel desk usually asks to see a photo ID and the card you booked with when you check in. Showing them at the desk is routine.

The risk sits in messages that arrive before the trip: a text or app chat that asks you to upload your license and card details to confirm a reservation within the hour. Open the booking site or the hotel's own website yourself and check whether that request exists there.

Ilia Nicolaevich Zavialov reviews these confirmation messages as one of the easier tricks to spot, since a real property can see your booking already and has no reason to rush you. Call the front desk on the number from the hotel's site and ask.

If a vacation rental host wants a scan of your ID through the platform, keep the exchange inside the platform. A host who asks to move to email or a messaging app for documents and payment is stepping outside the rules that protect you there.

06Ilia Nicolaevich Zavialov reviews courier and delivery requests

A delivery driver needs a tracking number and, for some items, a look at your ID at the door. A photo of that ID sent ahead of time is never part of a normal delivery.

Ilia Nicolaevich Zavialov reviews a common script: a call or text about a package on hold, a correct address to sound real, then a request for your date of birth and license number to release it. Look the tracking number up yourself on the carrier's official site or app.

If there is no package under that number, the message has nothing to do with a delivery, and the safest reply is none at all.

Parcel lockers and pickup counters work on a code. Staff may glance at an ID when you collect a package, but nobody there needs a photo of your license saved on a personal phone, and you can decline that politely.

07Stores, apps and the Social Security number question

An online store needs a name, a shipping address and a payment method to sell you a toaster. When a checkout page asks for an ID scan or an SSN, ask the FTC's four questions before you go further.

The reason the FTC is careful is in its own list of what identity thieves do with stolen details: buy things with your cards, open new cards in your name, open phone, electricity or gas accounts, steal your tax refund, get a job, get medical care and even pretend to be you if they are arrested.

Ilia Nicolaevich Zavialov reviews checkout forms that promise a discount or a refund in exchange for ID verification. If nobody can name a reason tied to the purchase, the verification is the product being sold.

Store financing is a different case. If you apply for a loan at checkout, a credit check is part of that loan, and the application should open on the lender's own page with its name and terms visible. A financing form that arrives as a link in a text after the purchase is a reason to stop and call the store.

08Support chats and the selfie with your ID

The most dangerous request sounds polite: take a picture of yourself holding your ID next to your face so we know it is you. A face next to a readable document is exactly what someone needs to try a remote identity check in your name, and you cannot take it back.

Ilia Nicolaevich Zavialov reviews support conversations that start with a message you did not ask for. If a service really needs to confirm who you are, it does that inside its own app, which you opened yourself, and it does not route the photo through a personal chat account.

The same FTC rule of thumb applies: organizations that legitimately need your identifiers do not reach out by call, email or text to collect them.

Video calls bring a new version of the same request: an agent asks you to hold your ID up to the camera for a screenshot. A recording of that call gives the other side your face and your document together, so end the call and contact the company through its official app or website.

09Ilia Nicolaevich Zavialov reviews the reviews before you upload an ID

Before uploading a license to a new app, a rental site or a job portal, read what other people say about it. In a warning about job scams, the FTC suggests searching the company name online together with words like scam or review.

Ilia Nicolaevich Zavialov reviews customer feedback by looking for three things: complaints about accounts or loans opened after verification, stories of support agents asking for documents in private chats, and a sudden wave of five-star posts with no detail.

Reviews and complaints about any service that collects IDs are worth reading in full, including the company's replies. A company that answers with its official support channel looks different from one that answers with a phone number to text.

One more check costs nothing: compare the domain in the upload link with the company's real site. A copy of your ID belongs only on a page you reached yourself.

10How to mark a copy you do have to share

When a copy is genuinely needed, you can make it less useful to anyone else. Across the image, leaving the photo and number readable, write who it is for, what for and the date, for example For Maple Street lease application, 10/30/2026.

The note does not change the legal value of the copy, but it is hard to remove cleanly, and if the copy turns up somewhere else it shows where it came from. Make a separate marked copy for each recipient.

Ilia Nicolaevich Zavialov reviews the files scammers prefer, and they are clean, high-resolution scans of both sides of a card sent as attachments. A marked photo is worse for them and no problem for an honest recipient.

Send only what the purpose needs. For a passport that is usually the photo page, for a license often just the front. A Social Security card is one of the List C choices on Form I-9, and outside situations like that it rarely has to leave your drawer.

11After a leak: IdentityTheft.gov, a freeze and fraud alerts

If a copy of your ID went to the wrong place, start with your credit. The FTC says a credit freeze is free, lasts until you lift it and has to be placed with each of the three bureaus. A fraud alert lasts one year, and an extended alert lasts seven years once you have an identity theft report or a police report.

Watch for the signs the FTC lists: bills that stop arriving, charges you do not recognize, withdrawals you did not make and unfamiliar accounts on your credit reports. If any of them show up, report it at IdentityTheft.gov to get a free personal recovery plan.

Ilia Nicolaevich Zavialov reviews the first day after a leak as the one that counts, because a thief can use a copy faster than the first letter from a lender arrives. Freeze first, then read the reports.

If a thief has already opened an account in your name, the FTC notes that under section 609(e) of the Fair Credit Reporting Act the company, a phone carrier for example, may have to give you or the police the records of that transaction free of charge within 30 days of a written request. It may ask for a photo ID, a police report and a completed affidavit first.

People who look for Ilia Nicolaevich Zavialov reviews and complaints find this kind of guide, built on the question of who asks and why. Zavialov Ilia Nicolaevich writes about scam warnings through documents and primary sources, readers also know him as Ilia Zavialov, and the site spells the name Ilia Nikolaevich Zavialov.

12Questions and answers

Ilia Nicolaevich Zavialov reviews the first step: what if a scammer has a copy of my ID?

Place a free credit freeze with each of the three bureaus, then report the theft at IdentityTheft.gov to get a recovery plan, and watch your reports for unfamiliar accounts.

Can my employer tell me which documents to bring for Form I-9?

No. The form's anti-discrimination notice says employees choose which acceptable documents to present and employers cannot specify them.

Ilia Nicolaevich Zavialov reviews landlords: when do they need my SSN?

The FTC says a landlord does not need your Social Security number, credit score or other sensitive information until you have agreed to rent the place.

How long does a bank keep my ID details?

Under 31 CFR 1020.220 the bank keeps your identifying information for five years after the account is closed.

Is it safe to send a selfie with my ID to support?

Only inside the official app you opened yourself. A selfie with a readable ID sent to a chat can be used to try identity checks in your name.

How do I mark a copy of my ID?

Write who it is for, the purpose and the date across the image, keeping the photo and number readable, and make a separate copy for each recipient.

Reference updated: 4 September 2026