I have heard such horror stories already. First, exchanges just asked for basic information about the owner of the address you deposited from or the one you want to withdraw to. I guess they figured out that people are giving them fake names and this is a step up from that. What a load of bull crap and excuses to get as much data as they can from crypto owners that they can later sell and share with any institution that asks.