Can an Airbnb Host Ask for ID? What Guests Should Check Before Sending It

An ID request is not automatically normal, illegal or fraudulent. The answer depends on who is asking, what rule or purpose supports the request, what was disclosed before booking, which data is actually necessary and how it will be stored and deleted.

A traveler booked a one-night apartment stay in the United States. After booking, the host sent a message requiring every adult guest to submit a valid photo ID and a selfie through the Airbnb message thread. Check-in instructions would be released only after verification, and the booking could be canceled if the documents were not provided.

When the traveler asked why, the host cited security, fraud prevention and a smoother check-in. The host also said the information would be kept confidential, stored securely and deleted after the stay; guests could cover “important information” on the ID; and the requirement had appeared in the listing before booking.

The traveler eventually sent redacted ID images and received the address and access code.

The discussion that followed split into two absolute camps. One said Airbnb had already verified the guest, so no host could ever need another ID. The other said hosts everywhere routinely need passports for government registration, so the request was unquestionably normal.

Both answers skip the decisive facts.

Quick answer: Airbnb verifies the identity of the person making the booking, but it does not give that person's government ID or selfie to the host. Airbnb's current off-platform policy allows a host to require additional identity information when it is required for legal or compliance reasons—such as a local law, HOA rule or building-security rule—provided the listing explained what was required and why before booking. A generic preference for “security” or “fraud prevention” is not the same as identifying that rule. Before sending an ID, ask for the exact basis, required fields, recipient, storage method, retention period and a less intrusive alternative. If the requirement was not properly disclosed or the host conditions access on an unsupported request, contact Airbnb before canceling the reservation yourself.

Editorial note: The opening account is an anonymized summary of user-provided material. The listing, host's compliance basis, building rules, jurisdiction and data-handling practices were not independently verified. Screenshots are not reproduced because they contain platform UI, profile imagery, reservation information and private communications. Platform and government sources were reviewed on August 8, 2026. This article provides general information, not legal or cybersecurity advice. Accommodation-registration and privacy rules depend on the location, property type and data controller.

First Separate Four Different Kinds of “ID Verification”

The phrase can describe four processes with different rules and different data recipients.

One process does not automatically satisfy another. Airbnb can verify the booking guest without giving the host a document image. A local authority may require information for every overnight guest, including companions who do not hold the Airbnb account. A front desk may need to compare a name with the reservation without needing to retain a passport copy.

The word “verification” therefore does not answer the privacy question. It only starts it.

What Airbnb's Current Policy Actually Says

Airbnb says primary hosts, new co-hosts and booking guests must complete its identity-verification process. Depending on the account and region, Airbnb may compare personal information with trusted third-party sources or request a government ID and selfie. Airbnb also says no verification method is perfect. Airbnb: Verifying Your Identity

Two details matter here:

1. Airbnb says the government ID and selfie submitted to Airbnb's verification flow are not shared with hosts or guests.
2. That statement does not cover a separate image that a guest manually sends to a host in a message.

Airbnb's Off-Platform and Fee Transparency Policy generally prohibits hosts from asking guests to send government-ID photos before arrival. The stated exception is additional contact or identity information required for legal or compliance reasons that the host can verify if Airbnb asks—for example, a local law, HOA rule or building-security rule. In those cases, the listing must explain what is required and why so the guest understands the step before booking. Airbnb also places responsibility for applicable data-privacy compliance on the host. The exception does not create a general platform rule allowing hosts to collect a selfie from every adult traveler. Airbnb: Off-Platform and Fee Transparency Policy

This means “the rule was somewhere in the listing” is necessary but not always sufficient. The disclosure should identify the requirement and its reason. A sentence that says only “ID required for safety” leaves important questions unanswered:

• Is this a government guest register?
• Is it a written building-security or HOA requirement?
• Does it apply to every adult or only the booking guest?
• Does the rule require a full copy, an in-person check, selected fields or a selfie?
• Who is the actual data collector?

The source screenshots stated fraud prevention and security but did not show the listing language or the underlying legal, HOA or building rule. That is not enough to conclude either that the request complied with Airbnb policy or that it violated it.

“All Adult Guests” Can Matter—but It Needs an Explanation

Comments often assume that Airbnb has verified everyone in the traveling party. Airbnb's help materials describe required verification for the booking guest. Companions may be named or invited to a trip, but the host does not receive the booking guest's government ID from Airbnb, and not every companion necessarily completed the same process.

That can create a legitimate operational gap for some properties:

• a country may require a lodging register for each traveler;
• an apartment building may require every adult occupant's name or ID at the desk;
• a gated property may issue access credentials only to registered adults; or
• a licensed accommodation may have a duty to compare each guest with the register.

It does not follow that every host may collect full ID images and selfies from every adult. The scope should match the rule. If a building needs names for a guest list, a retained image of both sides of a driver's license may be more than necessary. If a law specifically requires a passport copy for a defined category of traveler, redacting the passport number may make the submission unusable.

Ask the host to connect each requested item to the requirement:

There Is No Useful “America Versus Europe” Shortcut

Accommodation rules are jurisdiction-specific. The fact that one host in the United States never asks for ID does not prove another U.S. building has no access rule. The fact that one European country requires traveler data does not mean every European host may store complete passport photos indefinitely.

U.S. and international examples show why the details matter.

Palm Springs and Scottsdale: even U.S. local approaches differ

Palm Springs, California, requires a vacation-rental operator to complete a written contract with one Responsible Person before occupancy. That person provides identifying information and a copy of government-issued ID, while the contract separately lists the names of all guests and vehicle information. The city rule does not say that every adult must supply an ID copy and selfie. City of Palm Springs: Vacation Rentals · Palm Springs Municipal Code § 5.25.070

Scottsdale, Arizona, offers a different example. Its official short-term-rental guidance recommends requiring the primary renter to provide valid government-issued photo ID, but labels that advice as a best practice not required by city ordinance. A host may still have another applicable rule, but “the city requires it” would be inaccurate on that source alone. City of Scottsdale: Information for Owners and Operators

These examples do not create rules for the property in the opening scenario. They show why a guest should ask for the actual authority and compare its scope with the host's request.

Japan: a rule can expressly require a passport copy

Japan's Ministry of Health, Labour and Welfare says foreign nationals who do not have an address in Japan must provide nationality and passport number in the lodging register. Its guidance also requests presentation and a copy of the passport. That is a defined category of guest, a defined record and a specific official rule—not a global norm for every stay. Japan MHLW: Request for Producing Passports for Identification Purposes

Spain: traveler registration applies broadly, but the required data still controls

Spain's Ministry of the Interior says lodging providers must collect and communicate traveler information under Real Decreto 933/2021 through the SES.HOSPEDAJES framework, including when a person hosts guests in a habitual residence for accommodation purposes. Spain's Data Protection Agency, AEPD, has separately said that the decree does not authorize accommodation providers to demand a complete DNI or passport copy: the full image contains data beyond the required fields and creates unnecessary identity-theft risk. A provider can have a duty to check and report information without having a right to retain every part of the document. Spain Ministry of the Interior: Hospedajes y Alquiler de Vehículos · AEPD: Complete ID or Passport Copies in Accommodation

Italy: checking and reporting do not automatically mean retaining a copy

Italy's State Police says hotels and other accommodation providers must report guest information through Alloggiati Web, generally within 24 hours of arrival and upon arrival for stays shorter than 24 hours. Its official materials support admitting guests with suitable identification and reporting the required information. The sources reviewed for this article do not establish a universal rule requiring every provider to retain a full document image or selfie. Polizia di Stato: Servizio Alloggiati · Alloggiati Web FAQ

For a U.S. stay, ask for the state, county, city, licensing, HOA or building rule that applies to the actual address. Do not rely on “America doesn't require passports” as the end of the analysis. Also do not accept a reference to another country's hotel law as the basis for a U.S. apartment.

A Promise to “Delete It After the Stay” Is Not a Privacy Plan

The host in the source account reportedly said the ID would be kept strictly confidential, stored securely and deleted after the stay. Those are positive promises, but they are too general to evaluate.

A guest can ask:

• Who is the data controller: the named host, a property-management company, the building or a third-party verification service?
• Who can access the image?
• Is it downloaded from the message thread to a phone, computer, cloud drive or property-management system?
• Is the full image necessary, or are selected fields enough?
• What exact event or date triggers deletion?
• Are copies removed from downloaded files, shared inboxes and backups?
• Is any information retained for a government register, incident file, tax record or legal claim?
• How can the guest request access, correction or deletion where the law provides those rights?

Where the EU General Data Protection Regulation applies, its principles include a specified purpose, data minimization, storage limitation, integrity and confidentiality. An organization should collect only data necessary for the stated purpose, keep it no longer than necessary and protect it against unauthorized or unlawful processing and accidental loss. European Commission: Principles of the GDPR

The GDPR does not apply to every host worldwide merely because the guest is discussing Europe. U.S. state privacy laws also do not automatically cover every individual host; coverage, exemptions and rights vary. For example, California's comprehensive privacy law applies through statutory business connections and thresholds, not merely because any individual owns a California property. California Privacy Protection Agency: Does My Business Need to Comply With the CCPA?

The practical questions—purpose, minimum data, access, security and deletion—remain useful even where a particular comprehensive privacy statute does not apply. The Federal Trade Commission's data-security guidance tells businesses to collect only what they need, restrict access, protect sensitive information in transit and at rest, retain it only as long as necessary and dispose of it securely. It also warns that ordinary email is not a secure method for sending sensitive data. FTC: Protecting Personal Information—A Guide for Business

Redaction Helps Only When It Matches the Purpose

Covering an ID number, address or date of birth can reduce exposure. It does not make an unnecessary request necessary, and it may prevent a legitimate registration from working.

Use this sequence:

1. Ask which fields are required.
2. Ask whether the host needs to inspect, record or retain a copy.
3. Ask whether a front desk, official portal or in-person presentation is available.
4. Confirm in writing which fields may be covered.
5. Add a narrow watermark if the receiving system and document authority allow it—for example, identifying the stay purpose and date—without covering required security features or data.
6. Do not send unrelated identifiers such as a Social Security number, tax number, bank record or the reverse side of a document unless the stated requirement genuinely needs them.

A redacted image can still reveal a face, full name, signature and other personal information. A selfie sent with the document creates an additional matching pair. Treat the combination as sensitive even if several numbers are hidden.

Use This Decision Tree Before Sending an ID

Step 1: Find the pre-booking disclosure

Reopen the listing description, house rules, “other things to note,” guest requirements and cancellation policy. Save screenshots showing whether the ID requirement and reason appeared before booking.

Do not rely only on a host's later statement that it was disclosed. The version visible at booking is the relevant evidence, although it may be difficult to reconstruct without saved screenshots or Airbnb support.

Step 2: Ask for the authority and scope

Request the name or link for the local law, registration program, HOA rule or building-security policy. Ask why it covers this property and which guests and data fields it requires.

For a building rule, the host may not be able to send a private security manual. They should still be able to identify the organization, purpose, recipients and required fields clearly enough for the guest and Airbnb to understand the compliance basis.

Step 3: Compare the request with the stated purpose

• Government registration: Does the authority require a copy, or only specified data?
• Front-desk access: Can the guest show the original at arrival instead of sending an image?
• HOA or building security: Does the written rule require every adult and a selfie?
• Host fraud control: Why is Airbnb's booking-guest verification insufficient, and which Airbnb policy exception supports the additional collection?

Step 4: Choose the least intrusive workable channel

Prefer, in order:

1. an official government or Airbnb verification flow;
2. in-person inspection by an authorized front desk or accommodation operator;
3. a documented, access-controlled registration provider linked to the stated rule; or
4. another method whose recipient, security and deletion practices the host can explain.

Keeping the conversation inside Airbnb is valuable because it preserves the reservation record. It does not convert a manually attached ID into Airbnb's own identity-verification submission, and it does not prevent the recipient from downloading or copying the image.

Step 5: Do not cancel impulsively

If the request was clearly disclosed and falls within Airbnb's permitted compliance exception, refusing it may leave the guest subject to the reservation's cancellation policy.

If the requirement first appeared after booking, the host cannot identify a legal or compliance basis, or access is being withheld, document the issue and contact Airbnb before selecting “Cancel.” Airbnb's Terms say a guest's voluntary cancellation is generally governed by the host's cancellation policy. Different rules may apply if the host cancels or Airbnb determines that a covered reservation issue disrupted the stay. Airbnb's home refund policy requires a guest to report a reservation issue within 72 hours after discovery, although a check-in problem should be reported immediately. Airbnb Terms of Service · Airbnb: Trouble Checking In · Airbnb: Rebooking and Refund Policy for Homes

Do not ask the host to cancel as a tactic and do not manufacture an access problem. Ask Airbnb to review the actual listing disclosure, policy basis and messages, then confirm the refund consequence before acting.

A Message You Can Send the Host

Hi, I understand that some jurisdictions and buildings require guest registration. Before I send identification, could you please confirm: (1) the local law, HOA or building-security rule that requires it; (2) whether it applies to every adult guest; (3) the exact fields and whether a copy and selfie are required; (4) who receives and can access the information; (5) where it is stored and the specific deletion period; and (6) whether we can instead present ID at check-in or use an official registration portal? Please also point me to where the requirement and reason appeared in the listing when the reservation was made. Thank you.

The request is neutral. It does not accuse the host of fraud, and it produces the facts Airbnb would need if support becomes involved.

A Message You Can Send Airbnb Support

My host is requiring government-ID photos and selfies from all adult guests before releasing check-in instructions. The host says the purpose is [quote the stated reason]. I found/did not find this requirement and reason in the listing before booking. The host has identified [name the law, HOA or building rule—or state that none was provided]. Could you confirm whether this request complies with Airbnb's current Off-Platform and Fee Transparency Policy and what my cancellation, rebooking or refund options are before I cancel or transmit the documents? The request and my questions are documented in the Airbnb message thread.

Do not send the document to support unless Airbnb's own secure process asks for it. The first goal is policy review, not creating another copy.

If You Already Sent the ID

Sending an ID does not mean identity theft has occurred. Take proportionate steps:

1. Save the request, the host's stated purpose and deletion promise.
2. After the stated purpose ends, ask for written confirmation that retained copies were deleted, subject to any identified legal retention duty.
3. Watch for unexpected account, credit or identity-verification activity.
4. If the image is misused, a breach is reported or fraud appears, preserve the evidence, notify Airbnb and use the reporting and recovery process of the document issuer and the relevant authority.
5. U.S. consumers can use the Federal Trade Commission's official recovery plan at IdentityTheft.gov when personal information is actually misused.

Do not immediately replace a passport or driver's license solely because an authorized accommodation collected a required record. The issuing authority can advise whether the specific exposure warrants cancellation or replacement.

Where Pine Fits

An ID dispute can quickly fragment across the listing, house rules, booking confirmation, message thread, cancellation policy, screenshots, building instructions and support case. The core issue is often not one dramatic message; it is whether the requirement existed before payment and whether the host can connect each requested data field to a permitted purpose.

Open Pine to organize the listing disclosure, ID request, host explanation, reservation terms and support messages into a dated record; identify unanswered questions; and prepare a focused request for the host, Airbnb or an appropriate local professional.

Pine does not verify identities, store an ID on behalf of a host, decide whether a law applies, cancel a reservation or provide legal or cybersecurity advice. Its value is making the evidence and questions clear before the guest sends more data or gives up refund rights.

Frequently Asked Questions

Can an Airbnb host ask for my passport or driver's license?

Airbnb allows additional identity information when it is required for legal or compliance reasons, such as a local law, HOA rule or building-security rule, and the listing explained what was required and why before booking. A host preference or generic security statement should not be treated as equivalent to a verified compliance basis.

If Airbnb verified my identity, why would a host need ID?

Airbnb does not share the government ID or selfie from its verification flow with the host. Local guest-registration or building-access rules may require the accommodation operator to collect specific information, sometimes for every guest rather than only the booking guest.

Does every adult guest have to send ID?

Not automatically. Some lodging registers and building rules cover every adult or every overnight guest. Ask which rule applies and whether it requires a retained copy, selected data or only in-person presentation.

Is sending ID through Airbnb messages safe?

Keeping the request in the Airbnb thread preserves evidence, but manually attaching an ID is not the same as submitting it to Airbnb's identity-verification system. Ask who can download it, where it will be stored and when every retained copy will be deleted.

Can I cover my ID number and address?

Only after confirming which fields are required. Redaction can reduce exposure, but it may invalidate a lawful guest-registration submission. It also does not remove every sensitive element from the image.

Can the host withhold the address or door code until I send ID?

A disclosed and permitted registration step may be part of check-in. If the host adds an unsupported requirement after booking or the dispute leaves you unable to access the property, document the messages and contact Airbnb promptly rather than canceling first.

Is an ID check required for every Airbnb stay longer than 30 days?

No universal Airbnb or U.S. rule makes every stay over 30 days subject to the same background check or document package. Longer stays can create different tenancy, building and local-law issues, but the host must identify the actual requirement that applies to the property and reservation. The FTC explains the rules a landlord must follow if a tenant-screening consumer report is used; it does not impose a nationwide requirement to order one for every 30-day stay. FTC: Using Consumer Reports—What Landlords Need to Know

Does GDPR make it illegal for a European Airbnb host to ask for ID?

No. GDPR can permit processing supported by a lawful basis, including a legal obligation, while requiring transparency, data minimization, security and limited retention. The question is not simply whether ID was requested; it is whether the collection and handling comply with the applicable rule. Spain illustrates the distinction: an accommodation-registration duty does not necessarily authorize a full passport copy.

What should I do if the ID requirement was hidden in the listing?

Save the listing section and ask Airbnb to review whether it adequately explained what was required and why before booking. Do not assume that overlooking a disclosed rule guarantees a refund, and do not assume that placing a rule deep in the listing automatically makes every version of the request enforceable.

Official Sources

• Airbnb: Verifying Your Identity
• Airbnb: Submit an ID for Verification
• Airbnb: Off-Platform and Fee Transparency Policy
• Airbnb Terms of Service
• Airbnb: Trouble Checking Into Your Home Reservation
• Airbnb: Rebooking and Refund Policy for Homes
• City of Palm Springs: Vacation Rentals
• Palm Springs Municipal Code § 5.25.070
• City of Scottsdale: Information for Owners and Operators
• Japan Ministry of Health, Labour and Welfare: Request for Producing Passports for Identification Purposes
• Spain Ministry of the Interior: Hospedajes y Alquiler de Vehículos
• AEPD: Complete ID or Passport Copies in Accommodation
• Polizia di Stato: Servizio Alloggiati
• European Commission: Principles of the GDPR
• California Privacy Protection Agency: Does My Business Need to Comply With the CCPA?
• FTC: Protecting Personal Information—A Guide for Business
• FTC: Using Consumer Reports—What Landlords Need to Know
• Federal Trade Commission: IdentityTheft.gov

This article provides general information, not legal or cybersecurity advice. Platform rules, accommodation-registration duties, building access requirements, cancellation terms and privacy rights vary by location and reservation. Confirm the current rule with Airbnb, the relevant authority and a qualified local professional before sending sensitive documents or canceling a stay.