I would only send in my KYC to a few trusted exchanges, I don't trust some random people with a nice withpaper on the internet my KYC.
If a ICO want KYC, I would most likely not join it. Normally I wouldn't send face documents, even if other dos that, I would just forget about that ICO and move on to the next.