I mean, that would make total sense for Iberia to do and would be entirely fair. Not unreasonable for them to ask for a scan of a passport to confirm that people aren't creating IB+ accounts with made-up passport numbers in order to cash in 10x on the same promo. For the idiots who did that, of course they should be denied. But at the same time, those who created new accounts legitimately should be allowed through assuming they provide the necessary supporting docs.