They receive a reward to collect the maximum KYC, and then exchange your data in the darknet, we are often deceived and there is not any defense mechanism!
do you have valid data about it, i think not at all like that, and i think still think if that bounties worth to submit your KYC/ID, if no, dont do it like airdrop need KYC better you leave it