Exactly, that is the main reason why we should never trust any airdrops or bounties, etc. if the first thing they ask for is KYC to "prevent multi-accounts". Especially when they ask for full scans of documents like passport or driver license. For such an airdrop or any other project which will distribute their coins in such a way should be enough if we send any document with a picture, name and maybe address on it, with all other info fully covered, so-called "SIMPLIFIED  KYC". This should be clearly stated that all other data on screens should be carefully covered, special stamp or something else added to make them not useful for scammers and later selling of course.

Let's take ENERGY airdrop as an example because this is the most lucrative airdrop in recent months in terms of payout. There is also KYC needed to qualify but this is so-called "SIMPLIFIED KYC" and any document with a picture, and the name is enough to pass it. Additionally, there was a piece of paper needed with Energy handwriting on it, which already make these scans useless for further selling. Energy team informed on the KYC page that all additional info should be fully covered and I was able to pass this KYC with an old expired document, exactly 20 years old driving license  .

I think the most important thing is to have a common sense. We simply cannot be blinded by the promised reward, just calmly analyze and check everything. If the project that is going to carry out an airdrop is acting, just like Energy team, then everything is fine. Just don't be fooled and don't send documents, especially when they ask for full scans, it should be a big red flag because they are certainly not needed to verify your identity. Remember that SIMPLIFIED KYC or even social media account should be enough to do this. There is no need for full KYC and in particular when it comes to a completely unknown team from some new project that can't be checked anywhere.