People I know IRL sometimes ask me for advice on security/privacy matters. Something that comes up fairly often is "X company just asked for a scan of my passport" - what should I do?
It would be helpful to have an answer here I could point them to. There are some related questions (e.g. this) but I couldn't find an exact match.
I have a feeling that if I ask this, it will be closed as "opinion based" or "too broad". Is it suitable for the site?
FTR, I usually advise people to just send the scan, but maybe I'm being too cavalier.