Google asked for my passport to pay for some ridiculous <$1 payment (I refused). So I wouldn't be at all surprised if this is was legit.

Online companies have bent over and stuck their own heads up their own asses ... and they'll call it progress, good UX and security.

Fuck em (generally speaking).