Agreed. I messaged MoBike on Twitter and Facebook, asking why they needed both a deposit AND multiple photos of our passports. They never replied.
Why should I possibly trust a random startup with such important information, especially if I have already given them a deposit? Extremely shady.
In the end, I just pixelated the majority of information and submitted that. It was still accepted, so I suggest most users do the same.