A remote employer asks for your passport or ID: when to share it and how to check the request

Treat identity verification as a hiring-stage question

Identity checks can be legitimate. An employer may need to confirm a person’s identity, right to work, qualification or background information for a particular role. That does not make every document request safe or necessary at every stage.

The UK Information Commissioner’s Office says recruiters should explain their verification process as early as possible and collect only the minimum information needed. It also says that, where possible, verification should be carried out for successful candidates rather than every applicant. Requirements vary by location and role, so use that principle as a prompt to ask questions, not as a universal legal rule.

Verify the role and recruiter before you share data →Check a bank-details request after an offer →

Confirm who is asking and why

Pause if an unsolicited message asks for an ID image before a substantive interview, before the employer has been independently verified, or through a personal email account. Find the organisation’s careers page and contact route yourself; do not rely only on a phone number or link supplied in the message.

Ask for the exact reason for the check, the employer or authorised provider carrying it out, the fields they need, how the document will be transmitted, who can access it and how long it will be retained. A legitimate process should be able to answer those questions clearly.

• The legal employer or recruiter name and an independently verified domain.
• The specific check being completed, such as right to work or identity verification.
• Whether the request is for a final candidate, an offer-holder or another clearly explained stage.
• The approved portal or secure submission method and the provider’s privacy notice.
• The fields required, retention period and contact route for a correction or question.

Share the minimum through a verified route

Use an official portal or a verified company route rather than sending a sensitive document to an unfamiliar chat account. Check the URL carefully and make sure it uses HTTPS, but remember that a lock icon alone does not prove that a site is operated by the real employer.

Do not send a password, one-time code, bank login, tax login or a live video of your identity document merely because a sender calls it a verification step. If a request is unclear, ask whether an alternative approved method or a later-stage check is available. Keep a copy of the notice and confirmation, not unnecessary duplicates of your ID in multiple inboxes.

Protect the email account used for your job search →Check a hiring link before you open it →

Know the warning signs without assuming every check is a scam

Pressure, secrecy and mismatched facts matter more than the presence of one document field. Be cautious if a sender changes the employer name, uses an unrelated domain, asks you to pay for verification, refuses a normal interview, or requests documents before explaining the role and process.

The US Federal Trade Commission warns that fake recruiters may use convincing job paperwork to obtain personal information. A real-looking form is not proof that a recruiter or vacancy is genuine. Verify the employer through a route you find independently, then continue only when the hiring stage and data request fit together.

Use this identity-document check before you upload

• Verify the company, recruiter and vacancy using an independent official source.
• Ask why the document is needed now and whether the check applies only to successful candidates.
• Read the provider’s privacy notice and confirm the fields requested are proportionate to the stated check.
• Use only a verified employer or provider portal; do not send an ID through an unexpected chat link.
• Never provide passwords, one-time codes, banking credentials or a payment to complete a routine application check.
• Save the request, privacy notice and submission confirmation in case you need to follow up.
• Seek local advice if a request affects immigration, work-authorisation or employment rights.

Use the broader remote-role decision framework →Browse current checked roles →