Which Personal Documents to Share When Applying for Jobs

A recruiter has asked for your Aadhaar, PAN or bank details and you're not sure whether to send them. The short answer: when you apply, an employer needs your CV and a way to contact you; identity proof, PAN, bank details and certificates usually come only after you have a written offer, when the company sets up payroll and verifies your background. This guide walks through what is normal at each stage, what to hold back, how to share documents safely, and what to do if you have already sent them to someone who turned out to be fake.

What is normal to share at each stage of hiring?

When you apply

Your CV, email address, phone number, the city and country you live in, and links to LinkedIn or a portfolio are enough. Many Indian CV templates still include date of birth, father's name, marital status and a full home address. A remote employer doesn't need any of these to judge your application, so leave them off. Never put an Aadhaar or PAN number on a CV that will be uploaded to job sites and forwarded between recruiters.

During interviews and assessments

Expect to share work samples, details of your current notice period and pay expectations, and later the names and contact details of referees, given with their permission. Showing your face on a scheduled video call sent from a company email address is normal. Being asked to send a photo of your ID card, a selfie holding it, or a bank statement before any offer is not.

After a written offer

This is where documents genuinely come in. An Indian employer will typically ask for identity and address proof, PAN, bank account details for payroll, education certificates and relieving or experience letters from earlier employers, often for a background verification firm. Employers in other countries have their own checks. In the UK, for example, GOV.UK tells employers they must check that an applicant is allowed to work in the UK before employing them, check documents with the applicant present, and keep copies for the length of employment plus two years afterwards. In the US, the Federal Trade Commission (FTC) lists your employer among the organisations that need your Social Security number to identify you.

• Application: CV, email, phone, city and country, LinkedIn and portfolio links.
• Interviews and tests: work samples, notice period, pay expectations, referees' contact details with their consent.
• Written offer accepted: ID and address proof, PAN, bank details, certificates and previous employment letters, sent through the employer's HR system.
• First weeks of work: anything extra the employer's payroll or benefits provider needs, again through company systems.

Which documents should you hold back until there is an offer?

The FTC defines identity theft as someone using your personal or financial information without your permission, and it warns that scammers who advertise jobs often want your personal information as much as your money. A scan of your Aadhaar, a PAN card image and a cancelled cheque together are close to a full identity kit, which is why the order in which you hand them over matters.

• Full Aadhaar copies, front and back, or the Aadhaar number typed into a chat.
• PAN card images, passport scans or voter ID.
• Bank account number, IFSC code, cancelled cheques, passbook pages or bank statements.
• Selfies holding an ID card, or short videos of you reading out personal details.
• Payslips from your current employer, unless a verified employer needs them after an offer to confirm your pay history.
• OTPs, PINs and passwords, which no employer needs at any stage.

If a recruiter says they need these documents to shortlist you, book a slot in a test or reserve a laptop, treat that as a reason to stop and check the company. Our scam guide covers how to verify an employer; this guide is about what you send once you're satisfied.

How do you share an ID document safely?

Use masked Aadhaar where possible

UIDAI, the authority that issues Aadhaar, explains that in a masked Aadhaar the first 8 digits of the number are hidden and only the last 4 are visible. The masked option is available only in e-Aadhaar, the digitally signed copy you download yourself from UIDAI's portal or app. Offer the masked version unless the employer clearly explains why it needs the full number.

Masking is not the same as anonymity. UIDAI says the QR code on every form of Aadhaar, including e-Aadhaar, contains the last 4 digits of the number along with your name, address, gender, date of birth and photograph. Treat even a masked copy as a sensitive document.

Hide what the employer doesn't need

Before sending a bank document, cover the transactions and balance; HR usually needs only your name, account number and IFSC code. For a passport, send only the pages requested. You can also add a faint line of text across the image giving the company's name, the date and the words ‘for onboarding only’, which makes a stolen copy harder to reuse elsewhere. Save the result as a PDF rather than a phone photo, and if you have to email it, password-protect the file and send the password by a different route, such as a phone call.

Send it through the right channel

Upload documents to the employer's HR or onboarding portal, or email them to an address on the company's own domain, the same one that appears on its website and in your offer letter. Avoid WhatsApp, Telegram and personal Gmail or Yahoo addresses, even if the recruiter is friendly and the chat feels quicker. Messages there are easy to forward and impossible to recall, and you have no idea who else in the chat can see them.

Questions to ask before you send anything

The FTC suggests asking a few questions before you hand over a Social Security number, including whether the organisation can use a different identifier or just the last four digits. The same habit works for Aadhaar, PAN and bank details anywhere.

1. Have I received a written offer from an email address on the company's own domain?
2. Why do you need this document, and at this stage?
3. Will a masked or partly hidden copy do?
4. Can I upload it through your HR portal instead of email or chat?
5. Who will see it, including any background verification firm, and how long will you keep it?

A genuine HR team will usually answer these without fuss and may point you to a privacy notice. A fake recruiter tends to push urgency instead: the offer will lapse today, the laptop can't be dispatched, the slot will go to someone else.

What if you have already sent documents to a fake recruiter?

The FTC's job-scam guidance puts it plainly: if you gave your personal information thinking it was for payroll, you may now have an identity theft problem. These steps focus on the documents you shared; our scam guide covers the wider reporting process.

1. Report it. In India, the Ministry of Home Affairs' cybercrime centre says complaints can be made on the 1930 helpline or the National Cybercrime Reporting Portal at cybercrime.gov.in. Include the recruiter's numbers, email addresses and the files you sent.
2. Lock your Aadhaar biometrics. UIDAI's biometric lock lets you lock and temporarily unlock your biometrics, and its app lets you check your authentication history for uses you don't recognise.
3. Tell your bank if you shared account details, and watch statements closely for transactions or new products you didn't ask for. Readers in the US can also place a credit freeze, which the FTC says stops anyone opening a new credit account while it is in place.
4. Keep the evidence: chat exports, emails, the fake offer letter and a list of every document sent. Don't delete the conversation, even if you feel embarrassed.

Set up a safe document routine before your next application

1. Remove date of birth, full address and any ID numbers from your CV today, and save a clean version for uploads.
2. Download a fresh masked e-Aadhaar from UIDAI's own portal when an employer actually needs it, rather than keeping old full copies on your phone.
3. Make a folder of redacted, watermarked versions of the documents you are most often asked for, ready to send only after an offer.
4. Start a sharing log and add every document you send, with the date and recipient.
5. Before any upload, check that the offer and the request come from the same company domain and lead to an HR portal or company email.