Being asked to upload your ID or passport when opening an investment account can feel alarming, and many people wonder whether it is a scam. In most cases it is the opposite: regulated platforms are legally required to verify your identity before they can serve you. The real question is not whether you are asked, but whether the platform is genuine and how you are asked to send your documents. This guide explains why platforms ask for ID and how to respond safely, drawing on AUSTRAC and Moneysmart. Why a platform asks for your ID When a legitimate investment platform asks for your ID or passport, it is usually meeting a legal obligation rather than behaving suspiciously. As AUSTRAC, Australia’s financial crime regulator, explains, a regulated firm must check a customer’s identity by collecting and verifying information before it can provide a service, and since 2021 it may not provide that service at all if identity cannot be verified. These checks, known as know your customer procedures, sit within anti money laundering rules and exist to keep the financial system from being used for fraud or crime. That is why a passport, a driver’s licence and a proof of address are requested so routinely during account opening. Far from being a warning sign, an identity check is one of the things that distinguishes a properly regulated platform from an unregulated one. The genuine risk lies elsewhere: scammers know that people expect to provide ID, so they imitate the process in order to steal documents. The sections below explain when an ID request is normal, how to share your documents safely, and when to be cautious. When an ID request is normal Most identity requests arrive in a recognisable, legitimate context, and the summary below gathers the signs. An ID check is normal when it comes from a regulated platform, during account setup, through the official app or site, using standard documents, via a secure upload flow, and typically before you can deposit or withdraw funds. Seen together, these point to a routine verification step rather than anything unusual, because identity checks are a legal requirement for licensed financial firms. How to share your ID safely The way you provide your documents matters as much as whether you provide them, and the steps below set out the safe approach. Confirm the platform is authorised on the official register, start from its official app or website yourself, and upload only through its secure verification flow. Never send your ID by email, chat or to a link you were given, and keep a record of what you sent and when. Each step keeps your documents within a channel you have confirmed is genuine. A legitimate request versus a harvesting scam The difference between a genuine identity check and a scam built to harvest documents is set out in the comparison below. A legitimate request comes from a regulated platform, through its official secure flow, during normal onboarding, and asks for standard documents. A harvesting scam comes from an unverified contact, by email, chat or a link, often out of the blue, and tends to arrive alongside other red flags. The request can look similar; the context and the channel are what give it away. When to be cautious about an ID request Some circumstances should make you pause before sending anything, and the panel below lists them. Be cautious if you are asked for ID before you can verify the platform, if the request arrives by email or chat, if it comes from an unsolicited contact, if more is requested than seems necessary, or if you are told to send your documents to a link. As Moneysmart advises, think carefully before handing over personal information or identification documents, and confirm the platform first. Verify the firm, then verify yourself The simplest rule to carry is to verify the firm before you verify yourself, and the comparison below sets out what that looks like. The safe actions are confirming the platform is authorised, starting from the official site, uploading through the secure flow, and sharing only what is needed. The actions to avoid are sending ID to an unverified party, emailing a photo of your passport, following a link to upload, or sharing more than asked. The order protects you: a verified firm earns your documents, an unverified one does not. An honest bottom line The honest reality is that an ID or passport request is usually a sign that a platform is doing what the law requires, not a sign of a scam. As AUSTRAC sets out, regulated firms must verify a customer’s identity before providing a service, and these know your customer checks are a frontline defence against fraud and money laundering. So passports, licences and proof of address are standard during onboarding, and refusing every identity check would simply lock you out of legitimate platforms. What deserves your attention is the platform and the method, not the request itself. Confirm the firm is authorised on the official register before you upload anything, begin from its official app or website, and use only its secure verification flow rather than email, chat or a link you were sent. As Moneysmart advises, think carefully before handing over identification documents, and share only what is genuinely needed. If you have already sent ID to a party you now doubt, treat it as possible identity theft, report it, and monitor your accounts. Verify the firm, then verify yourself, and an ID request becomes a routine step rather than a risk. This article is educational information, not financial advice. Normal request, safe habits The takeaway is reassuring: being asked for your ID is a normal, often legally required part of joining a regulated platform, so it is not a reason to panic. The care belongs in how you respond. Verify that the platform is authorised before you upload anything, begin from its official app or website, use only its secure verification flow, and share just what is asked. Handled that way, an identity check is exactly what it should be, a routine step with a genuine firm, rather than an opening for someone to steal your documents. Common mistakes with ID requests These four mistakes either expose your documents or shut you out of legitimate platforms. 1. Assuming any ID request is a scam Why it backfires: Refusing every identity check treats a legal requirement as a red flag and can stop you using legitimate, regulated platforms. Do this instead: Recognise that licensed firms must verify your identity, then focus on confirming the platform is genuine before you upload. 2. Uploading before verifying the platform Why it backfires: Sending your ID before confirming the platform is authorised is exactly how harvesting scams obtain your documents. Do this instead: Confirm the platform is authorised on the official register first, and only then begin identity verification. 3. Sending ID by email or chat Why it backfires: Emailing a photo of your passport, or sending it through a chat or a link, exposes it to interception and misuse. Do this instead: Upload only through the platform’s official secure verification flow, never by email, messaging or an unofficial link. 4. Sharing more than is needed Why it backfires: Providing extra documents or details a firm has not asked for increases your exposure if anything goes wrong. Do this instead: Share only the specific documents requested for verification, and question any request for more than that. Before you act on thisThis article explains how something works. It is general education, not advice about your situation. It does not consider your goals, income, tax position or how much risk you can afford.Investing involves risk, including losing money. Before you act, speak to a licensed professional. You can check whether someone is licensed at Investor.gov and FINRA BrokerCheck.Disclaimer · Terms of Use Frequently asked questions Why does an investment platform ask for my ID? Because regulated financial firms are legally required to verify who you are before providing a service. As AUSTRAC explains, a reporting entity must collect and verify a customer’s identity before providing designated services, as part of know your customer and anti money laundering rules. So an ID request during account opening is normal, not a sign of a scam by itself. Is being asked for my passport a scam? Not on its own. Licensed platforms routinely ask for a passport or driver’s licence and proof of address to meet identity verification rules. What matters is whether the platform is genuine and how you are asked to send the documents, so verify the firm is authorised on the official register before uploading anything. How do I share my ID safely? Confirm the platform is authorised, start from its official app or website yourself, and upload your documents only through its secure verification flow. Never email a photo of your ID, send it through a chat, or upload it via a link you were sent, and share only the specific documents requested. When should I be cautious about an ID request? Be cautious if you are asked before you can verify the platform, if the request comes by email or chat, if it arrives from an unsolicited contact, if more is requested than seems necessary, or if you are told to send your ID to a link. Any of these is a reason to stop and confirm the platform first. What can scammers do with my ID? A stolen identity document can be used to impersonate you, open accounts in your name, or pass another platform’s identity checks. That is why protecting your documents matters, and why you should only ever provide them to a platform you have verified, through its official secure channel. I already sent my ID to a platform I now doubt. What should I do? Treat it as possible identity theft. Stop further contact, report it to your bank and the relevant authority, and monitor your accounts and credit for unfamiliar activity. In some countries you can place a freeze or alert on your credit file, and identity support services can help you take the right steps. Sources All claims in this article are supported by the sources listed below. Verify details against the originals before making investment decisions. AUSTRAC, Customer Identification: Know Your Customer (KYC). Accessed 11 June 2026. Moneysmart (ASIC), Scam Alert: Scammers Impersonating Moneysmart and Requests for Personal Information. Accessed 11 June 2026.
