Just scan your passport and send it to them, what is the problem?

They do this to see if the account is hacked or not when it was inactive probably. Still, asking for a passport scan is stupid if you haven't sent them one before. Keep us updated till its solved please.