Provided the email did come from AliExpress, and any links/emails actually go to the AliExpress site (best way to check, is to try and find the same page by logging in on the AliExpress site without clicking any email links), it probably is legit.

I've dealt through Alibaba (Alibaba is essentially the buisness orientated side of the company, with AliExpress more aimed at consumers), and some of their requirements can be a bit 'archaic'. I've also dealt with a couple american companies who wouldn't ship without being sent photographic ID, so the request isn't totally unfeasible.

And having re-read the requirements, they're not exactly bad. They're essentially wanting proof of ID (most places would accept any form of official ID, as not everybody will have a passport), a picture that proves the card is real (note they mention to cover most of the numbers, so they don't really gain anything from the copy - I'd also make a point of covering the security number on the back), and a copy of the card statement (again, nothing much to be gained, other than your spending habits, as they'll already have your key details!).
If it was a scam, they'd be wanting full un-censored details!