Sharing an identity document online can expose information that may be useful to someone attempting impersonation or fraud.
First, stop sending additional documents, passwords, PINs, or one-time passwords until you know who you are dealing with.
Keep a record of what you shared, when you shared it, where you sent it, and the organisation or person who requested it.
If you shared the document with an organisation, contact that organisation through an independently verified official channel and ask how the information is being handled.
If the request was connected to a suspected scam, preserve the messages, profile details, website address, and other evidence.
Watch for unusual account activity, unexpected applications, unfamiliar communications, or other signs that your information may be being misused.
Avoid posting additional personal information publicly in an attempt to explain or correct the situation.