To read about 152-FZ "On personal data" tilda.education/articles-personal-data-law
Can collect data with user consent.
The question is:
Why do you need passport details then? I can't even remember where I found them in the Internet needed, except for state services and banks.
Verification enough for phones or soap. Well, or by credit card if you are all on the online payment. Doing a test payment to an unknown number of rubles if the payment went through, then the person is the cardholder