There’s no excuse to ask for an ID scan to “verify identity” when you can buy a really really good quality automatically generated fake id scan for $5.

Would maybe be defensible if they asked for actually verifiable information, like a dump of the cryptographically signed contents of your chipped passport (haha).