Is it safe to send a picture of your ID, passport or driver's license?
Sending a picture of your ID can be legitimate, but it is never risk-free: first verify who needs it, why, and how to send it through their official app or website. A stolen copy can help someone attempt identity fraud, so share only the details genuinely needed and, when the recipient accepts it, add a watermark naming the recipient, purpose and date.
People get asked for a picture of their ID all the time: by a landlord, a new employer, a bank app, a hotel, an Airbnb host. Many requests are routine; others are how identity theft starts. The risk depends on who receives the copy, what they genuinely need and how they handle it.
Prepare a safer copy, free. Once you have verified a legitimate request and confirmed which details are needed, hide unnecessary details and add a watermark with the recipient and date. Both tools run in your browser: your document is not uploaded. Keep required fields readable and check that the recipient accepts an edited copy before sending it.
How to send a picture of your ID safely
When you do have to send one, these habits reduce unnecessary exposure:
- Verify who is asking through a phone number or website you found yourself, not one given in the message.
- Use the official upload in the company's app or website instead of email, text or WhatsApp. Open it independently rather than following an unexpected message's link. An upload avoids an extra attachment in chats and inboxes, but the recipient still controls how the copy is stored.
- Mark the copy when accepted. Add a watermark for free naming the recipient, purpose and date. It makes the intended use visible and may discourage reuse, but it can be edited or removed and does not prevent identity theft.
- Send only what they need. If they ask for the front, do not send the back. Hide details they do not need only after confirming the requirements. If you hide a passport number, cover its repetition in the machine-readable lines too, as the example above shows. Some official checks require an unaltered document.
- Keep selfie checks inside the verified service's own process. An unexpected request to email or message a selfie holding your ID is a warning sign. A still photo can help a fraud attempt, but it is not the same as passing a live identity check.
- Ask what happens to it. A business should be able to tell you how long it keeps the copy. Ask for it to be deleted once the check is done.
The Dutch government's guidance on ID copies gives a concrete example: hide unnecessary information, including repeated data in the number lines, and mark the copy with its intended recipient or purpose and the date. Its legal rules concern the Netherlands; the fields another recipient must collect depend on the document, country and check.
What someone can do with a picture of your ID
A clear photo of a passport or driver's license can expose your full name, date of birth, document number, signature and face. With those details, a thief can try to:
- Open accounts in your name. The FTC describes identity theft involving new credit cards, phone and utility contracts, and even jobs and medical care obtained with someone else's details. A document photo can contribute to those attempts; it does not guarantee that a verification check will succeed.
- Pass weak identity checks. Plenty of services still accept a photo of a document as proof. The stronger ones add a live selfie, but not all of them do.
- Run the next scam with your face. Fake rental listings and fake recruiters collect ID pictures as "paperwork", then reuse them to look legitimate to their next victim.
- Build a fuller profile. Your license gives away your address, your passport its number. Combined with a leaked password or a phone number, it makes account takeovers easier.
None of this means one picture will ruin your life. It means a copy of your ID is worth protecting the way you protect a card number: give it to those who need it, and only them.
When sending a picture of your ID is normal
Some requests are legitimate, and they share a pattern: they happen inside the company's own process.
- A bank, a brokerage, a car rental or a marketplace asks you to scan your document inside its own app or website, often followed by a selfie.
- An employer in the United States checks your documents for the I-9 as part of onboarding, through its HR process. In the UK, a manual right to work check needs the original document with you present: an employer may not rely on a scan you email.
- A hotel or travel agency asks through its official booking channel, for a reason it can state.
When it is a red flag
- The request arrives in a chat or an email you did not expect, especially with urgency ("send it now or lose the booking").
- A rental host or landlord wants it before you have seen the place or signed anything. Fake listings work exactly this way.
- A recruiter wants it before any interview, often for a job that sounds too easy.
- An Airbnb host asks you to send it outside the app. Airbnb's policy prohibits hosts from asking for government ID photos before arrival, except for legal or compliance reasons disclosed in the listing. Verify any claimed exception through Airbnb before sending a copy.
- A buyer on a marketplace wants it "to confirm you are real". You are the one selling; they have no reason to need it.
Email, text, WhatsApp: does the channel matter?
The channel matters, and so does what happens after delivery. WhatsApp and iMessage encrypt messages in transit, but the recipient can save or forward the picture. Email attachments can also remain in inboxes and backups long after the conversation. Encryption does not control those later copies. Prefer a verified upload route, confirm the recipient's handling practices, and minimize the details you share; a watermark alone does not make a channel safe.
If you already sent a picture of your ID to a scammer
Act quickly, but do not panic: a picture is not the document itself.
- In the United States, report it at IdentityTheft.gov, which builds a recovery plan for you. Place a credit freeze at Equifax, Experian and TransUnion: it is free, it does not affect your score, and it stops new credit being opened in your name. A fraud alert is free too.
- In the UK, report it to Report Fraud, which replaced Action Fraud in December 2025 (Police Scotland handles reports on 101). Cifas Protective Registration, a paid service, flags your name so lenders run extra checks.
- Everywhere, watch your bank and credit reports for accounts you do not recognize, warn your bank, and be wary of anyone who contacts you claiming to "fix" the problem.
A photo of your passport does not mean you need a new passport. Report a passport as lost or stolen only if the physical book is gone.
Where Dokus fits
Dokus is a document wallet for iPhone, iPad and Mac. It keeps your passport, ID card and driver's license encrypted on your device, with Face ID or Touch ID where supported. It needs no Dokus account, and we never receive your documents; optional sync uses your own iCloud. When someone legitimately needs a copy, you can hide unnecessary details and add a watermark naming the recipient and the date while keeping the original unchanged. The mark makes the intended use visible, but it does not stop someone from editing the copy or attempting to misuse it.
Common questions
Is it safe to send a picture of my ID through email?
Prefer the business's verified upload route. An emailed ID can remain in inboxes and backups or be forwarded. If a business requires email, verify the address independently, confirm which details it needs and whether it accepts a watermarked or redacted copy, and ask how long it must keep the file. A watermark does not make email risk-free.
Is it safe to send a picture of my passport on WhatsApp?
WhatsApp encrypts the message in transit, but the recipient can save or forward the picture. Verify who is asking and why, prefer the organization's official upload route, and share only the details required. A watermark can show who the copy is for, but it does not prevent editing or misuse. An unexpected request from a stranger is a red flag.
Should I send a picture of my ID to an Airbnb host?
Usually not before arrival. Airbnb's policy prohibits hosts from requesting government ID photos before arrival except for legal or compliance reasons disclosed in the listing. Airbnb also runs its own identity verification. Verify any claimed exception through Airbnb before sending a copy, and report requests that do not meet the policy.
What can someone do with a picture of my driver's license?
They may try to open accounts in your name, pass weak identity checks or reuse your picture to make a scam look legitimate. Your license can also reveal your address and date of birth. A photo can help those attempts, but does not guarantee that a verification check will succeed.
Does a watermark prevent identity theft?
No. A watermark naming the recipient, purpose and date makes the intended use visible and may discourage reuse, but an image can be edited and the visible details can still be copied. Verify the request, share only the information required and confirm that the recipient accepts a marked copy. Some official checks require an unaltered document.
I sent a picture of my ID to a scammer. What do I do?
In the United States, report it at IdentityTheft.gov and place a free credit freeze at Equifax, Experian and TransUnion. In the UK, report it to Report Fraud and consider Cifas Protective Registration. Then watch your accounts and credit reports for anything you do not recognize, and do not send the scammer anything else.