Applying for work in South Africa often means sharing personal information. An employer may eventually need your identity document for verification, payroll, tax, or a background check—but that does not mean every recruiter should receive a full copy at the first stage.
Your ID number, date of birth, address and photograph can be misused for identity theft, fraudulent accounts and impersonation. The good news is that you can protect your ID document during a job application without making the process unnecessarily difficult.
Do you need to send your ID document with your application?
Usually, no. A standard first application normally requires:
- A CV
- A cover letter, where relevant
- Proof of qualifications or certificates, if requested
- Contact details
- Work authorisation information, where relevant
A full ID copy is generally more appropriate after an offer has been made or when the employer has explained a legitimate verification requirement. Some regulated industries, public-sector roles and security-sensitive positions may request identity documents earlier, but the request should still be reasonable and connected to the job.
Before sharing anything, ask:
- Why is the document needed?
- Who will receive and store it?
- Is a full copy necessary, or will limited information be enough?
- How long will the employer keep it?
- Will it be shared with a screening company or another service provider?
Under South Africa’s Protection of Personal Information Act (POPIA), organisations should handle personal information lawfully, responsibly and only for a specific, justified purpose. For broader guidance, read this practical guide to POPIA-compliant job applications and what personal information you should share.
Safe rules for sharing your ID document
1. Verify the employer before sending anything
Do not rely only on the logo, email signature or website provided by a recruiter. Scammers can copy a real company’s branding and create convincing fake vacancies.
Check the employer independently:
- Find the company’s official website through your own search.
- Compare the recruiter’s email address with the company’s real domain.
- Phone the organisation using the number on its official website.
- Search the company name alongside words such as “scam”, “fraud” or “complaints”.
- Check whether the vacancy appears on the company’s official careers page.
- Review the recruiter’s LinkedIn profile, but do not treat LinkedIn alone as proof.
- Confirm that the person actually works for the organisation.
Be careful with Gmail, Outlook or Yahoo addresses when the message claims to come from a large company. A personal email address is not automatically fraudulent—small businesses may use one—but it deserves additional verification.
You can also review these practical checks for verifying a South African job advert and avoiding recruitment scams.
2. Share the minimum information necessary
A safe approach is to provide only what is needed at that stage. If an employer only needs to confirm your right to work or your identity number, ask whether you can provide the relevant details through a secure form instead of sending a full scanned document.
Avoid sharing the following unless there is a clear, legitimate reason:
- A full ID copy during the initial application
- Your banking details before a genuine offer and onboarding process
- Your SARS tax number at the first application stage
- Your identity number through WhatsApp or an unverified email address
- Copies of utility bills or proof of address without a specific explanation
- One-time passwords, PINs or online banking login details
Key takeaway: A genuine employer should be able to explain why sensitive information is required. Pressure, secrecy and vague answers are warning signs.
3. Redact sensitive ID details where appropriate
If a full copy is not essential, you may be able to redact information that is unrelated to the stated purpose. For example, you could cover certain fields while leaving your name and photograph visible for basic identity confirmation.
Possible redactions may include:
- The full ID number, if only your name needs to be confirmed
- Your address, where it is not relevant
- The barcode or machine-readable zone
- Your photograph, where a photo is not required
- Your signature, unless it is specifically needed for a form
Do not redact information blindly. Some employers, background-screening providers or government departments may require an unaltered document for lawful verification. Ask first, and explain that you are trying to limit personal data exposure.
A useful message is:
“I am happy to provide the required information. Could you please confirm whether a redacted copy or secure upload will be acceptable, and explain how the document will be stored and used?”
4. Add a clear watermark to the copy
If you must send an ID copy, add a visible watermark across the document. The watermark should identify the intended purpose without covering information the recipient genuinely needs to read.
For example:
For employment verification by ABC Company only — 15 March 2025
A useful watermark can include:
- The employer’s name
- The specific purpose
- The date supplied
- A statement such as “Not for resale or other use”
Use a watermark that is difficult to remove but does not make the document impossible to assess. Do not use a watermark that hides your name, photograph or other details required for verification.
Never send the same unwatermarked copy to multiple recruiters. Create a separate, purpose-specific version for each legitimate request.
How to send an ID document safely
Use a secure upload method where possible
A company’s official applicant portal is usually safer than sending an attachment through an informal chat. Look for:
- An HTTPS website address
- A recognised employer domain
- A secure candidate account
- A privacy notice explaining how information is processed
- A clear confirmation after upload
An HTTPS padlock is helpful, but it does not prove that the website or employer is genuine. A scam website can also use HTTPS, so always verify the organisation separately.
Encrypted file upload methods or secure document portals are preferable to ordinary email. If email is the only option, confirm the recipient’s address carefully and ask whether the company has a secure alternative.
Protect scanned ID files
Before uploading or sending your ID:
- Scan from a clean, reputable device.
- Save the document with a neutral name such as
Employment_Verification_ABC_2025.pdf. - Avoid filenames containing your full ID number.
- Use a strong password if the file is encrypted.
- Send the password through a different channel, such as a phone call.
- Delete unnecessary copies from shared computers and public cloud folders.
- Do not upload the file to random “free PDF” websites.
- Check that the attachment is going to the intended recipient.
If you use a smartphone, disable automatic sharing to unknown apps. Also check whether the file contains location or device metadata. Remove ID metadata safely where possible, but avoid using unfamiliar online tools that may store or copy your document.
Avoid sending it through public or informal channels
WhatsApp is convenient, but it is not automatically the right place for a sensitive identity document. A recruiter who contacts you through WhatsApp should still be verified independently, especially if they demand an ID copy immediately.
Do not send your ID:
- In a public job-board comment
- Through a social media direct message to an unverified account
- To a recruiter who refuses to provide a company name
- To a personal number without confirmation
- As a reply to an unexpected job offer
- To access a “training” or “registration” process that requires payment
Job scam red flags involving ID documents
A request for an ID copy becomes especially suspicious when combined with other warning signs.
Immediate urgency
The recruiter says you must send your ID within minutes or you will lose the job. Legitimate employers may have deadlines, but they should still allow reasonable time to verify the request.
A job offer without a proper interview
Be cautious if you are “hired” based only on a CV or a few WhatsApp messages. Scammers often request an ID copy before arranging any meaningful interview.
Requests for money
Never pay a recruitment fee, “admin charge”, security deposit or compulsory equipment fee in exchange for employment. A scammer may collect your ID and money at the same time.
Personal email addresses and strange links
A message from companycareers123@gmail.com, a shortened link or a website with unusual spelling should be checked carefully. Do not open attachments or provide information until the vacancy is independently confirmed.
Requests for banking details and an ID together
Some scammers ask for your ID, proof of address and banking information to create fraudulent accounts or manipulate payments. A genuine payroll process normally happens after a verified offer and formal onboarding.
Poor communication and inconsistent details
Watch for:
- Spelling errors in official-looking messages
- Different company names in the same email
- A recruiter who avoids phone calls
- Salary promises far above the market
- A job description that is vague or copied
- Pressure to keep the opportunity secret
For more warning signs, see this guide to avoiding job scams on South African job boards.
What to do if you already shared your ID
Do not panic, but act promptly. Save copies of the messages, email addresses, phone numbers, payment details and the document you sent.
Take these steps:
- Contact the legitimate company using independently sourced details and ask whether the vacancy and recruiter are real.
- Ask the recipient to delete the document and confirm deletion in writing if the request was suspicious.
- Report the account or listing to the job platform, WhatsApp or social media service involved.
- Contact your bank if you also shared banking details or noticed unusual activity.
- Monitor your bank accounts, credit profile and mobile accounts for unexpected changes.
- Report suspected identity fraud to the South African Police Service and relevant fraud-reporting channels.
- Consider contacting the Southern African Fraud Prevention Service for guidance.
- Keep a written record of every report, reference number and response.
If you shared more than your ID, follow this immediate recovery guide for personal information shared with a recruitment scammer.
A simple ID-sharing checklist
Before sending your document, confirm:
- The employer is real: You checked the organisation independently.
- The request is justified: You understand why the ID is needed.
- The timing is appropriate: It is not an unexplained early-stage demand.
- The recipient is verified: You confirmed the email, portal or recruiter.
- The copy is limited: You removed information that is not necessary, where allowed.
- The document is watermarked: It states the intended purpose and date.
- The transfer is secure: You used an official portal or protected file.
- The record is organised: You noted what was shared and with whom.
You can track this information alongside your applications using a simple job application spreadsheet. Add columns for the employer, recruiter, documents sent, date shared and follow-up date.
Protect your identity without slowing down your job search
Being cautious does not mean refusing every request. It means asking sensible questions, verifying the employer and sharing information in a controlled way.
Your CV should help an employer assess your skills; your ID should only be shared when there is a clear and legitimate need. Verify first, limit what you disclose, watermark every copy and never allow pressure to override your judgement.