An identity request can involve sensitive information. Verify where the request came from and distinguish required fields from data that is unnecessary for the stated purpose.
What to check
- Verify the request through a known channel.
- Check which details are needed.
- Avoid sharing documents in public threads.
