An insurer wants a copy of your ID for a claim

Life cover is a regulated check. A motor, home or travel claim is not — and that changes what you send.

Short answer

It depends on the policy. Life assurance, pensions and investment-linked cover sit under anti-money-laundering rules, so the insurer is obliged to see and keep the complete document and a redacted copy will fail. Motor, home, travel and contents claims are contractual, not regulated: the insurer needs to know the claimant is you, and your name and photograph do that. For those, send a copy with the document number, machine-readable zone, date of birth and signature covered, watermarked for that insurer and that claim reference.
  • The split is life versus general. Life and investment products are anti-money-laundering business; motor, home, travel and contents claims are not.
  • A claim file is not one company. Insurer, loss adjuster, repairer, solicitor and an industry anti-fraud database may each hold a copy.
  • Watermark per claim, not per year. Name the insurer and the claim reference on the copy so a stray copy is visibly out of place.
  • The handler who contacted you first is the risk. Call the number printed on your policy, never the one that rang you.

Two requests that look identical are not. “Please send a copy of your ID” from a life insurer and the same sentence from the person handling your stolen-bicycle claim sit on opposite sides of a legal line, and the right answer is different in each case.

Which insurers are legally obliged to see the whole document?

The anti-money-laundering framework does not cover insurance as a whole. It covers life assurance and investment-linked products, and stops there. Directive (EU) 2015/849 defines a financial institution to include an insurance undertaking in so far as it carries out life assurance activities. The UK’s Money Laundering Regulations 2017 draw the same boundary, catching an insurer only when it is “carrying out or effecting any contract of long-term insurance”.

So the regulated set is narrow and recognisable:

  • Life assurance, whole-of-life and term policies with a savings element
  • Pensions, annuities and investment bonds
  • Capital-redemption and unit-linked products
  • The broker or intermediary, when arranging any of the above

Taking out one of these, or claiming on one — a surrender, a maturity, a death benefit paid to a beneficiary — is a regulated identification. The insurer must see the complete document and keep a record of it. A black bar over the document number is a missing field, and the file sits unpaid while somebody emails you again. This is the same territory as you cannot redact your ID for a bank, and the same rule applies: send it whole, through the insurer’s own app or portal, in a session you started.

What does a motor, home or travel claim actually need?

Everything else — motor, home, contents, travel, gadget, pet, legal expenses, and the medical evidence side of a health claim — is a contract, not a regulated check. Nothing obliges the insurer to capture your document number. What it needs is confidence that the person claiming is the person insured, and a name plus a photograph does that.

The ICO’s guidance on data minimisation is blunt on the point: you must not collect personal data on the off-chance it might be useful. An insurer that asks for a full passport scan to settle a £400 phone claim is over-collecting, and a redacted copy meets the actual purpose. See when redacting your ID won’t work for the general boundary.

Which requests need the full document?

Policy or requestFull, unredacted ID legally required?What to send
Life, pension, annuity, investment bond — taking it outYes, AML rulesWhole document, insurer’s own app or portal
Claiming on a life or investment policy (surrender, maturity, death benefit)Yes, including for the beneficiaryWhole document, official channel
Motor claim with your own insurerNoName and photo visible, rest covered, watermarked
Home, contents, travel or gadget claimNoSame
Third-party claim against someone else’s insurerNoSame, watermarked to that insurer
Loss adjuster, repairer or approved supplier asking you directlyNoConfirm with the insurer first, then redacted and watermarked
Solicitor or claims-management firmNoRedacted and watermarked; check they are regulated
Health claimNo for identityRedacted ID; send medical evidence separately
Anyone who contacted you first about an accidentNoNothing

Who else will end up holding the copy?

This is the part most people underestimate. A single household claim can touch, in order: the insurer, an independent loss adjuster, a repairer or approved supplier, sometimes a solicitor, and an industry anti-fraud database. That is up to five organisations, five retention policies and five sets of staff — from one email you sent on a Tuesday.

You cannot shorten that chain, but you can make each copy traceable. Watermark the copy with the insurer’s name and the claim reference before you send it, so a copy that later turns up somewhere else is visibly out of place and obviously not a fresh document. How to watermark a copy of your ID covers the wording and the placement. If the adjuster asks separately, watermark a second copy for the adjuster rather than forwarding the first.

Do insurers really share my claim with other insurers?

Yes, and it is lawful and disclosed. Claims data sharing is how the industry spots the same “stolen” laptop being claimed four times, and your insurer’s privacy notice will say so:

  • UK — the Claims and Underwriting Exchange (CUE), run by the Motor Insurers’ Bureau, records reported motor, personal injury and household claims, and is read by insurers, brokers and solicitors. The Insurance Fraud Bureau runs the parallel fraud intelligence work.
  • Spain — insurers operate common fraud-prevention files through their trade body under article 99 of Ley 20/2015, with article 100 imposing a positive duty to detect and prevent insurance fraud.
  • Germany — the insurers’ Hinweis- und Informationssystem (HIS), covering every line except private health insurance.

None of that is a scandal, and none of it is a reason to refuse a claim request. It is a reason to send the minimum, because the copy you hand over is the copy that propagates.

How do I spot a fake claims handler?

The scam version of this request has a very consistent shape. Someone contacts you first, shortly after an accident that really happened, already knowing the date and the vehicle. They are helpful, they say they act for the other side or for a claims service, they want your documents by WhatsApp, and there is a deadline.

The tell is not the story, which is usually good. The tell is the direction and the channel:

You contact the insurer using the number printed on your policy. Never the number that contacted you.

Hang up, find the policy document, ring that number, and ask whether a firm has been appointed on your claim. If it has, ring the firm on the number the insurer gives you, not the one in the message. And do not send documents through the chat thread that started the conversation — is it safe to send your ID over WhatsApp or email? explains why the channel matters as much as the content.

How long do they keep it, and can I get it deleted?

Longer than the claim. An insurer keeps a claim file until the limitation period for any dispute has run — typically several years after settlement, and longer for personal injury. Asking for erasure while that clock is running usually fails, and legitimately: Article 17(3)(e) of the GDPR preserves data needed for the establishment, exercise or defence of legal claims.

That does not leave you with nothing. Two questions work better than a deletion demand:

  1. What is the retention period for this file, and what triggers deletion? A real answer names a period; “our records” does not.
  2. Which of the parties on this claim received a copy of my ID, and can the ones that no longer need it delete theirs? The adjuster and the repairer often have no ongoing reason to hold it once the work is signed off.

Can a company legally keep a copy of your ID? sets out the underlying principles, and what to do if you get no answer at all.

For every claim that is not a life or investment policy — which is nearly all of them — Anonymize my ID covers the fields and stamps the copy with the insurer’s name and your claim reference in about a minute, on your phone, with nothing uploaded anywhere.

Frequently asked questions

Does my car insurer need to see my full passport or driving licence?

For a claim, no. Motor insurance is not covered by anti-money-laundering rules, so there is no legal duty to capture your document number or date of birth. The insurer needs to be satisfied the claimant is the policyholder, which your name and photograph establish. A redacted, watermarked copy is a reasonable answer, and most insurers accept it without comment.

Why does my life insurance ask for more than my car insurance?

Because life assurance and investment-linked products are inside the anti-money-laundering perimeter and general insurance is not. The obligation to identify you and keep a record sits on the insurer by law, not on you by preference. Send the full document through the insurer's own app or portal in a session you started; a black bar there produces a failed check and a second request.

A loss adjuster I have never heard of is asking for my ID. Is that normal?

It can be. Insurers routinely appoint independent loss adjusters, repairers and solicitors on a claim, and each is a separate company holding its own file. Normal does not mean unverified: ring your insurer on the number from your policy documents, confirm the firm and the claim reference, and then send a copy watermarked for that firm rather than a clean one.

Do insurers share my claim with other insurers?

Yes, and lawfully. Anti-fraud data sharing is standard across the industry and is set out in the privacy notice you were given — in the UK through the Claims and Underwriting Exchange and the Insurance Fraud Bureau, in Spain through the sector's common fraud-prevention files, in Germany through the insurers' HIS. That sharing is another reason to keep the copy you hand over minimal.

Can I ask the insurer to delete my ID copy after the claim closes?

You can ask, but expect a partial answer. Article 17(3)(e) of the GDPR lets a controller keep data needed for the establishment, exercise or defence of legal claims, and an insurer will normally hold the file until the limitation period for the claim has run. Ask instead what the retention period is and when the copy specifically will go.