Is it safe to share your passport number? Yes, when the party asking has a legal reason to collect it — an airline filing a passenger manifest, a consulate processing a visa, an employer completing Form I-9, a foreign hotel keeping a guest register required by local law, a bank meeting anti-money-laundering rules. Outside those situations, be skeptical. A passport number on its own is relatively low-value to criminals, but it rarely stays on its own once it leaks, and paired with your name, date of birth, and address it becomes a useful tool for identity fraud.
When You Have to Share It
A handful of situations legally require your passport number. Recognizing them makes the illegitimate requests easier to spot.
International flights. Federal regulations require every airline flying into or out of the United States to transmit a passenger manifest to U.S. Customs and Border Protection through the Advance Passenger Information System. The manifest must include your passport number, country of issuance, and expiration date.1eCFR. 19 CFR 122.49a – Electronic Manifest Requirement for Passengers Onboard Commercial Aircraft Arriving in the United States Most other countries impose similar rules for inbound flights. That’s why airlines ask at booking or check-in.
Visa applications. Every visa or electronic travel authorization application asks for your passport number so the issuing country can link the visa to a specific document.2Travel.State.Gov. International Travel Checklist
Starting a job in the U.S. A U.S. passport or passport card is a List A document on Form I-9, meaning it proves identity and work authorization together. If you choose to present it, your employer records the document number in Section 2.3U.S. Citizenship and Immigration Services (USCIS). Form I-9, Employment Eligibility Verification Your employer cannot require a passport specifically — you choose which acceptable documents to show.4U.S. Citizenship and Immigration Services (USCIS). Employee Rights
Foreign hotels and banks. Many countries require accommodations to keep a guest register that includes passport details. In the Netherlands, for example, hotel owners must record your name, residence, document type, and travel dates, though Dutch law prohibits photocopying the passport itself.5Autoriteit Persoonsgegevens. Identity Document When Travelling Within the European Economic Area, GDPR limits copying to situations where a specific legal obligation demands it; outside Europe, staff often have broader authority to photocopy. Foreign banks generally require your passport number to satisfy anti-money-laundering identity rules.
One boundary worth flagging: domestic U.S. air travel doesn’t create the same disclosure. TSA officers verify your identity at the checkpoint but don’t record or transmit the number the way airlines do for international flights.
When to Push Back or Verify First
Outside those legally grounded requests, treat any ask for your passport number as suspicious until you can independently confirm who’s asking and why.
Phishing messages tend to arrive as emails or texts claiming to be from an airline, hotel, or government agency, asking you to “confirm” or “update” your passport details. The giveaway is urgency: a legitimate organization won’t threaten to cancel your booking or your travel status if you don’t respond within hours. Don’t click the links. Go to the airline’s or agency’s official site directly and sign in there.
Third-party visa and passport expediting services deserve extra caution. Some are legitimate businesses that charge a fee to handle paperwork. Others collect your passport information, take your money, and vanish. Before handing over the number, look for a verifiable physical address, a working customer service line, and reviews on independent platforms. The State Department doesn’t endorse or partner with private expediters, so any company claiming official affiliation is lying.
Rental car counters, tour operators, and similar businesses abroad sometimes ask for the number as a deposit guarantee or “for their records.” Unless local law requires it, offer a driver’s license or another ID instead. If you’re not sure whether the request is legally required, ask the front desk to cite the specific regulation. A legitimate business can usually point to one.
What Someone Can Actually Do With Your Passport Number
A passport number by itself is worth less than most people assume. It doesn’t unlock bank accounts or credit lines the way a Social Security Number does. The problem is that it’s almost never stolen alone. Data breaches typically expose passport numbers alongside names, dates of birth, addresses, and emails, and that combined package is what causes real damage.
With your date of birth and address attached, a passport number can help a scammer pass identity verification at a bank, impersonate you to a customer service representative, or build a synthetic identity that blends your real details with fabricated ones. The 2018 Marriott/Starwood breach, which exposed roughly 5.25 million unencrypted passport numbers along with names, addresses, and travel itineraries, showed how quickly that data can be harvested at scale. A stolen number can also feed forged travel documents, which still circulate in countries with less rigorous screening technology even as biometric chips have made full forgery harder.
What a passport number alone cannot do: file a fraudulent U.S. tax return (that takes an SSN) or, in most cases, open a domestic credit card in your name (also SSN-driven). It can, however, help a criminal work toward your SSN through other breaches and social engineering, which is why casual handling is still a mistake.
There’s also an administrative cost. If you’re enrolled in Global Entry, TSA PreCheck, or another Trusted Traveler Program and have to replace a compromised passport, your new number must be added to your account through the Trusted Traveler Programs portal. A mismatch between your new passport and your enrolled information can trigger a referral to a CBP officer at the border.6U.S. Customs and Border Protection. Global Entry Frequently Asked Questions
If Your Number Has Already Been Exposed
Whether the leak came from a data breach or a scam, act quickly.
Report it to the State Department. File Form DS-64 through the State Department’s online portal to report your passport lost or stolen. An online report cancels the passport within one business day, preventing anyone from using the compromised number for travel.7U.S. Department of State. Report Your Passport Lost or Stolen If the physical passport is still in your possession and only the number leaked digitally, you can still report it, though the State Department may not issue a free replacement unless the number was actually used for fraud.
File an identity theft report. Go to IdentityTheft.gov or call 1-877-438-4338 to file with the FTC. The site produces a personalized recovery plan and an Identity Theft Report you can use as proof with businesses and financial institutions.8IdentityTheft.gov. What To Do Right Away
Replace the passport. A new passport comes with a new number, which is the cleanest way to neutralize the old one. If you reported the old one lost or stolen, you’ll need to apply in person using Form DS-11 rather than renewing by mail. The adult passport book replacement runs $165 total: a $130 application fee plus a $35 execution fee at the acceptance facility.9U.S. Department of State. Passport Fees If a company’s negligence caused the breach, check whether it’s covering replacement costs. Marriott did this after its 2018 breach for customers who could show their passport had been used fraudulently.
Update everything linked to the old number. Once you have a new passport, update your Trusted Traveler Program account, any airline frequent-flyer profiles that store passport data, and foreign bank accounts that used the old passport for verification. Missing one of these can cause problems months later at a boarding gate or border.
Everyday Habits for Sharing Safely
The goal isn’t to guard your passport number as if it were a Social Security Number. The goal is to share it only through channels where interception is unlikely and storage is secure.
- Submit passport data through the organization’s official website or app. Confirm the real domain, not a lookalike.
- Don’t send the number by unencrypted email or text. If you can’t use a secure portal, a phone call to a verified number is safer than a written message sitting in someone’s inbox.
- Shred physical photocopies once you’re done with them. A discarded copy in a hotel trash can is an easy target.
- Use digital wallet storage carefully. Apple’s Digital ID feature encrypts passport data on your device and requires Face ID or Touch ID before sharing anything with a third party, which beats a photocopy in your bag — but not every border crossing or foreign hotel accepts digital IDs.10Apple. Apple Introduces Digital ID, a New Way to Create and Present an ID in Apple Wallet
- Sign up for breach notification services so you find out when a company that holds your passport data gets hacked.
Share your passport number when a law requires it, verify the requester when you’re not sure, and act fast if it ends up somewhere it shouldn’t be. A compromised passport number won’t drain your finances overnight the way a stolen SSN can, but ignoring it gives criminals time to pair it with other data and escalate.