Why sending your ID feels like the honest thing to do
The instinct is generous. A buyer is nervous, a landlord wants reassurance, a match asks if you are genuine, and you have a government document that settles it. Sending it says: I have nothing to hide.
Official documents also carry borrowed authority. A card with a government seal feels like the state is vouching for you. For the person receiving it, it feels like the most serious proof a stranger could offer.
Scammers have noticed. Delhi Police's cyber cell describes fraudsters on OLX who pose as soldiers and send fake identity documents of national institutions to gain confidence. The more normal it becomes to trust an ID photo, the more useful a forged one is.
What one ID photo gives away
What the other person needed
- That you are a real person
- That your name matches your profile
- Sometimes, that you are over 18
What the photo hands them
- Your full name and date of birth
- Your home address
- Your document number and a clear photo of your face
- A copy they can keep and forward, forever
The trade is lopsided in both directions. You give away almost everything an identity thief could want, and the other person receives a picture they have no way to check.
Who it fails, and how
The FTC lists what identity thieves do with personal details: open credit cards and phone or utility accounts in your name, steal tax refunds, even get medical care as you. A clear ID image plus a face is a strong starting kit, and it never expires the way a password can be changed.
The offer to swap is the tell that the habit has gone wrong. Two people trading documents they cannot verify have not made each other safer. They have each handed a stranger a permanent copy of themselves.
The principle: show the claim, not the document
Privacy law has a name for the better habit. Data minimisation, as the UK regulator ICO quotes it from the GDPR, means personal data should be adequate, relevant and limited to what is necessary for the purpose. A buyer's purpose is knowing you are real, not knowing where you live.
Digital identity standards build the same idea in. The W3C's verifiable credentials standard defines selective disclosure as the ability to make fine-grained decisions about what information to share. Over 18 is a claim. Your date of birth is the document.
India's own ID system agrees. UIDAI offers a masked Aadhaar that hides the first 8 digits, a digitally signed QR code for offline checks, and an offline e-KYC file that lets a service check the signature without collecting your Aadhaar number. The issuer of the document has built ways to prove things without handing it over.
What works instead
- When someone asks for your ID, ask what they actually need to know. It is usually one fact, not the whole card.
- Offer a check that confirms that fact without the document: a verified profile they can look up themselves.
- If a business genuinely needs your ID, give it inside their official app or website, not in a chat.
- In India, use a masked Aadhaar wherever the full number is not required.
- Do not ask strangers for theirs either. You could not check it, and you would be holding something you do not need.
Saying no to sending your ID is not a sign you have something to hide, and someone else saying no is not a sign that they do.
Questions
How else can I show I'm genuine when selling, renting or dating?
Is a masked Aadhaar safe to share?
I already sent a photo of my ID. What now?
We think proof should travel without your papers: on Realr you verify once, and people see the claim, such as ID checked, never the document itself.
How verification works
