This is why I immediately nope out of anything that requests a copy of a photo ID.
We really need some sort of standard for sharing specific and limited authenticated info about ourselves to third-party websites that doesn't require sharing a full photo ID.
We really don't need a standard for sharing it online, at least nothing easy for businesses to implement. There are very few legitimate scenarios for an online service to ask for that. Online pharmacy, online signup with a bank, and online government interactions are the only that immediately come to mind.
I'm not even sure that the pharmacy case is legitimate now that I think about it. I don't need ID when I go in person. The prescriber can validate the mailing address for them.
> Presumably online alcohol or marijuana sales would also require some retained evidence that a dl was presented.
Why? Is that required for in person purchases where you are? I thought violations were typically caught with sting operations. I don't see why online should be any different.
> Maybe car insurance too.
Why? I guess the provider could choose to for due diligence if they felt there might be fraud. But I'm struggling to come up with any realistic scenarios. For what it's worth I've never once been asked for any official documentation in order to purchase car insurance. Simply provided information over the phone and received documents in the mail a few days later.
Just to register for one-more-app / one-more-webboard? Nope.
Some private app for rating other human beings? Nope.
Providing a digital copy of my ID to someone who otherwise would have no copy of my ID, digital or otherwise, is a different matter.
I dislike it to such a degree that I try to avoid services that require it.
Sometimes, however, it's worth trying to access services without giving the ID and just saying oh I'd like to keep that private or just not providing it and submitting an application for services without it.
Additionally, try to apply in person as often they'll accept paper.
It doesn't work in the majority of situations but it's worth a try.
Actual banks (not fintech barnacles) enjoy a very privileged position in terms of verifying identity and legal mechanisms afforded to them.
If a non-bank actor can verify against an actual bank, that should be enough…
It is absurd that, for instance, a small saas/iaas provider should perform any form of KYC when we can match a successful payment against a bank.
For the IRS it doesn't even make sense because I can drop paper forms in the mail. Don't need any ID whatsoever for that.