PanicStation.org
UK USA
us Legal, police, prison & official contact urgent identity verification request • compliance review notice • 48 hour deadline email • verify notice is legitimate • government impersonation scam • agency impersonation call • asked for passport scan • asked for drivers license copy • asked for proof of address • suspicious urgent deadline • provide documents securely • phishing link to upload id • unexpected compliance request • identity theft prevention • stop and verify first • report fraud ftc • avoid sending id by email • secure document upload • protect personal information • scam reference number

What to do if…
you receive a compliance review notice asking for identity documents within 48 hours

Short answer

Don’t send your ID yet. First, verify the request by contacting the claimed organization using contact information you look up independently (not the number/link in the notice), then provide only the minimum documents through a secure method.

Do not do these things

  • Don’t click links, open “secure upload” buttons, or scan QR codes from an unexpected notice before verification.
  • Don’t email photos/scans of your driver’s license, passport, or Social Security-related documents to an address you haven’t used before.
  • Don’t pay “processing fees,” “expedite fees,” or “failure-to-comply penalties” to meet a deadline.
  • Don’t stay on the line with a caller who pressures you; hang up and call back using a trusted number.
  • Don’t send more identity information than requested “to be safe.”

What to do now

  1. Preserve what you received. Save the email/letter as-is (screenshots, attachments, envelope). Write down the date/time and what it asked for.
  2. Identify who is supposedly asking. Is it a federal agency, state agency, court, police department, employer, bank, or a private company’s “compliance team”? The verification path depends on this.
  3. Verify using independently found contact details.
    • For a government agency: go to the agency’s official website (type it in yourself) and use the published main switchboard or case/contact process.
    • For a bank or service provider: use the phone number in your app, on your card, or on a prior official statement—then ask if there is an active compliance request on your account.
  4. Ask for specifics before sending anything (on the verified channel).
    • “What is the legal/policy reason for this request?”
    • “Exactly which documents are required, and what is the acceptable format?”
    • “What secure submission method do you require (portal, in-person, mail)?”
    • “Can you note my account/file that I called to verify authenticity?”
  5. If it’s real, use a safer submission method.
    • Prefer an authenticated portal you access by going directly to the official site (not through an email link).
    • If they offer in-person verification, that can reduce the risk of document copies circulating.
  6. Minimize exposure of your identity documents.
    • Send only what’s required (front/back only if requested).
    • Avoid sharing extra identifiers (full SSN, full account numbers) unless explicitly required and you’re using a verified secure method.
    • If submitting images, consider adding a clear note on the image (for example “For [Organization] compliance review only, [date]”) to reduce reuse risk.
  7. If you already sent documents, clicked a link, or gave personal information, act quickly to limit harm.
    • Stop further communication through that channel.
    • Contact the real organization using verified details to alert them.
    • Change passwords for any account involved and turn on multi-factor authentication.
    • Report the scam at ReportFraud.ftc.gov.
    • If you shared personal information, go to IdentityTheft.gov for step-by-step actions to protect your identity.

What can wait

  • You don’t have to figure out the perfect response or gather every possible document right now—verification comes first.
  • You don’t need to argue with the sender or “prove” it’s a scam; it’s enough to use a trusted callback method.
  • You don’t need to make big decisions (closing accounts, moving money, changing addresses) until you’ve confirmed what’s going on.

Important reassurance

A short deadline can make anyone feel cornered. Verifying independently before sharing identity documents is a normal, protective step—and legitimate organizations are used to people confirming requests.

Scope note

This covers the first steps to verify and safely respond to an urgent identity-document request. If you’re facing an actual enforcement action, court matter, or detention-related issue, you may need qualified local help—but you can still reduce risk immediately by verifying and minimizing disclosure.

Important note

This is general information, not legal advice. Requirements vary widely by agency, state, and organization. When in doubt, use official websites and trusted phone numbers you locate independently, and avoid sending identity documents through unverified links or email.

Additional Resources
Support us