Digital ID in Q3 2026: The Quarter Wallets Went Live, Mandates Collapsed, and AI Changed the Rules

Between July and September 2026, digital identity stopped being a pilot-project topic and became a deadline-driven reality. Europe moved from testing to national launches before its end-of-year wallet deadline. The United Kingdom abandoned its mandatory “BritCard” while quietly building a certified market for private identity checks. The United States kept expanding mobile driver’s licenses state by state and told federal agencies to adopt a common login. Asia and Africa pushed national ID systems further into everyday services. Behind all of it, AI-generated fraud forced even governments to slow down and rethink how identity is issued.

This post walks through the quarter region by region, then draws out the themes that matter most. In the final section we explain where we believe the market still has a gap, and how UIID from LINKSPREED aims to close it.

The Quarter at a Glance

Theme	What happened in Q3 2026
Europe	Countdown to the wallet deadline; Germany, Romania, Finland and others moved toward launch
United Kingdom	Mandatory digital ID scrapped; certified private-sector identity checks expanded
United States	Federal Login.gov directive; more mobile driver’s licenses; new deepfake testing programme
Asia	Japan, India, the Philippines and Bangladesh all advanced national ID plans
Africa	Ethiopia turned its national ID programme into a state-owned company
Standards	Key mobile ID standards opened up for wider access
AI and fraud	Deepfakes delayed Switzerland’s e-ID and pushed proof-of-human tools forward

Europe: The Wallet Countdown

The legal deadline is here

Under Regulation (EU) 2024/1183, every member state must make at least one European Digital Identity Wallet available. The clock started on 24 December 2024, when the first implementing acts took effect, so the deadline falls at the end of December 2026. Other coverage frames it as the start of 2027, reflecting how the dates are counted.

The rulebook is still moving. Implementing Regulation 2026/1731, effective 11 August 2026, revised the technical standards for the core framework. The Commission also updated the applicable standards and specifications in July.

Two obligations reach beyond governments. Where strong user authentication is legally required, such as banking and payments, relying parties must accept the wallet. And the architecture depends on open standards: OpenID4VP and OpenID4VCI for sharing and issuing credentials, SD-JWT and mdoc as credential formats, and selective disclosure, so you can prove you are over 18 without revealing your birth date. One analyst described this as the largest deployment of decentralized identity infrastructure ever attempted, driven by a legal deadline instead of a product roadmap.

Readiness is uneven

By early October, member states were clearly at different stages. Highlights from the quarter:

Romania unveiled ROWallet, with a phased rollout from October and a full launch in January 2027.
Albania enacted an eIDAS-aligned electronic identification law, Moldova connected its EVO wallet to two banks, and Italy approved an experimental framework for its IT Wallet.
Finland’s enabling law is now in effect. Its wallet and first digital identity document are expected in 2027.
Bulgaria’s Council of Ministers approved the steps needed to build and provide a wallet.

Germany: “d-you” gets a date

Germany announced that its wallet, d-you, becomes available on 2 January 2027. It will start with a digital version of the national identity card and other credentials such as driving licences, working with around 40 providers across banking, telecommunications, energy, local government and education. The government describes it as free and voluntary, with analogue services remaining in place.

On the legal side, the Bundestag held the first reading of the Digital Identity Act on 23 September 2026. Alternative wallet providers are expected to be able to certify their solutions roughly twelve months after d-you launches. That detail matters for any private wallet or identity provider hoping to take part in the German ecosystem.

New uses beyond identity cards

Q3 showed the EU wallet growing into a general-purpose credential holder:

Healthcare: Implementing Regulation 2026/2099 sets rules for health attributes in wallets under the MyHealth@EU cross-border exchange. It applies generally from 26 March 2027, and competent authorities must issue these credentials to wallets on citizen request by 26 March 2029.
Labour mobility: The Commission’s Fair Labour Mobility package of 15 September 2026 proposes that social security documents and professional qualifications sit in the wallet within three years of the new rules taking effect.
Age verification: The Commission’s age verification “mini-wallet” became feature-ready in April. It lets users prove they are over 18 without sharing other personal data, and it is built on the same technical specifications as the wallets. The Commission recommends that countries make robust, privacy-preserving age verification available by 31 December 2026. In September, the Commission also adopted the proposal for the EU KIDS ACT, which sets 15 as the minimum age to create an independent account.

Travel: borders are digitising too

The Entry/Exit System became fully operational at all Schengen external borders on 10 April 2026. The ETIAS travel authorisation (€20, valid three years) is still scheduled for the last quarter of 2026, with a phased enforcement period after launch.

Switzerland: security before speed

Switzerland’s e-ID is the clearest example of AI changing government timelines. On 30 June 2026, the federal government announced a delay. Its stated reason was that new developments in artificial intelligence create additional challenges for issuing an e-ID safely. Planned measures include making it harder to inject malware on the user’s device and strengthening deepfake detection. The trust infrastructure is still expected to begin operating in the first half of 2027. In September, the public beta was converted into a sandbox, with a separate “swiyu Sandbox Wallet” for testing.

The regulatory friction

Europe’s privacy enforcement also affected identity providers directly. Yoti removed its Yoti ID app from Spanish app stores from 10 September, following a €950,000 GDPR fine from the Spanish data protection authority over biometric processing, consent design and data retention. Yoti is appealing. The case shows how closely regulators watch biometric identity checks.

United Kingdom: The Mandate Dies, the Market Grows

The UK story of Q3 is a dramatic reversal. In September 2025, the government announced a mandatory digital ID for right-to-work checks. A parliamentary petition against it reached about 2.9 million signatures. In January 2026 the scheme was softened to a voluntary one, and in July 2026 the new Prime Minister, Andy Burnham, confirmed it was dead after Keir Starmer’s resignation on 20 July. The estimated £1.8 billion cost was redirected to cutting household electricity bills.

What remains is substantial:

GOV.UK One Login is live, covering more than 200 government services.
GOV.UK Wallet is live inside the One Login app.
Digital right-to-work checks via certified providers continue.
46 providers were on the official register of digital verification services as of July 2026.
On 25 September, the Office for Digital Identities and Attributes authorised the first use of the UK CertifID trust mark.
Parliament approved changes on 8 September that will let venues accept certified digital proof of age for alcohol sales in England and Wales. Screenshots and unverified apps will not qualify.

Takeaway: Citizens rejected a compulsory state ID, but they did not reject digital proof. The UK is shifting toward a certified, choice-based market.

A new directive from the Office of Management and Budget requires federal agencies to offer Login.gov as a sign-in option across public-facing sites within two years, with Login.gov becoming the default for new accounts among users it can serve. Defence and intelligence systems are exempt.

Mobile driver’s licenses keep spreading, slowly

Apple Wallet supports mobile IDs in 15 states and territories. Kentucky said its mobile ID is coming to Apple Wallet. North Carolina committed to a December 2026 launch for its own wallet, with Apple, Google and Samsung support expected early next year. One tracker, last verified in mid-September, lists 24 programmes as live, 5 coming, 11 exploratory and 2 paused. TSA accepts eligible digital IDs at more than 250 checkpoints, but travellers should still carry a physical ID. Biometric Update’s assessment is that complete coverage looks like a goal for 2030.

Private identity networks

ID.me reported more than 172 million members as of 6 July 2026, with 22 federal agencies using it for identity verification.

Fighting AI attacks

The Department of Homeland Security is expanding its Remote Identity Validation Rally to test systems against AI-generated documents and biometric deepfakes. Document and selfie-matching trials begin in October, with presentation-attack and real-time deepfake tracks following in December.

Asia-Pacific: Scale and Smartphones

India

UIDAI’s Aadhaar app crossed 31 million downloads in June, 40 million in July and 5 crore (50 million) by 21 August. On 14 September it launched an Aadhaar Face Authentication SDK and sandbox. At the Global Fintech Fest, UIDAI’s chief outlined plans to widen Aadhaar access for non-resident Indians and overseas citizens, with proof-of-concept work already underway.

Japan

Japan’s My Number Card has been available in Apple Wallet since June 2025, and the Digital Agency plans an Android version around autumn 2026. The agency says more than 580 private companies have adopted identity verification using the card’s function.

Philippines and Bangladesh

The Philippines cleared a ₱2.48 billion national ID partnership for a competitive challenge running through the fourth quarter. It is a 20-year build-transfer-operate concession. Bangladesh revealed details of its One-ID platform, including a smartphone wallet and about 200 million polycarbonate chip cards.

Australia

Australia is adding IDLock to myGov, letting people block, unblock and monitor use of their identity documents. The earlier Credential Protection Register has blocked more than 830,000 fraudulent verification attempts since 2022.

Africa: Identity as Economic Infrastructure

On 4 August 2026, Ethiopia converted its National ID Program into Faydaverse, a state-owned enterprise under Ethiopian Investment Holdings. Officials report nearly 50 million enrolments, 190 million authentications and 15 million credentials issued. Plans include digital wallets, single sign-on and cooperation with other African countries. Commentators describe this as treating digital identity like electricity or payment networks, and as a possible future export.

Elsewhere, Kenya is exploring a national authentication platform with French provider IN Groupe.

Cross-Cutting Themes

Theme 1: Standards are opening up

On 1 September, ISO, IEC, DIN and the OpenWallet Foundation announced an agreement to provide worldwide access to key mobile driving licence and digital credential standards, including the ISO/IEC 18013 and 23220 series. It is a sponsorship-based model. Free access lowers the barrier for developers and helps interoperability.

Theme 2: AI is the new threat model

The year’s identity fraud reports tell a consistent story. One large report counts deepfakes as 1 in 5 biometric fraud attempts, with injection attacks up 40% year over year. Another projects deepfake fraud rising 495% in 2026. Q3 showed the consequences for policy, from Switzerland’s delay to DHS’s new test tracks.

Our view: A selfie plus a scanned document is no longer a strong control. Identity systems must rely on hardware-backed keys, local biometrics and cryptographic proofs, not on images that AI can fake.

Theme 3: Proof of human becomes its own category

World (formerly Worldcoin) launched World ID 4.0 in April, signed partners such as Tinder, Zoom and Docusign, and in September turned the wallet part of its app into World Money. The network reports nearly 18 million Orb-verified humans, while bans or investigations continue in several countries. Its use of in-person iris scans shows both the demand for proof of personhood and the privacy debate around it.

Theme 4: Voluntary beats mandatory

Germany stresses that its wallet is free and voluntary. Switzerland’s e-ID is voluntary. The UK dropped its mandate. The direction is clear: citizens will accept digital identity when they keep control and choice.

Theme 5: AI agents need identities too

As AI agents act on behalf of people, the question of who stands behind an agent is becoming practical. World’s protocol work explicitly targets human-backed AI agents. Most government wallets, however, are built for people and businesses, not for software entities.

What to Watch in Q4 2026

The EU wallet deadline at the end of December, and how many member states deliver more than a minimum version
ETIAS going live
Germany’s Digital Identity Act progressing through parliament ahead of the 2 January launch
Japan’s Android My Number Card
North Carolina’s mobile ID launch in December
The Philippines national ID competitive challenge
DHS deepfake testing tracks opening

The Gap Government Wallets Do Not Fill

Q3 showed enormous progress, but also what national wallets are not designed to do:

They are tied to a jurisdiction. A state-issued wallet is built around one government’s documents and legal framework.
They depend on government documents. People without passports or national ID cards are left out.
They focus on people. AI agents, devices and services are mostly out of scope.
They do not protect you across the ordinary web. Most websites still ask for an email and password, or a social login that tracks you.
Rollouts are slow. Even in Europe, readiness is uneven. In the US, full mobile ID coverage is a 2030 goal.

This is the gap UIID was built for.

UIID by LINKSPREED: A Decentralized Digital ID Built for the Web You Actually Use

UIID (Universal Integrated Identity) is LINKSPREED’s decentralized digital identity. You can get your free Core ID at uiid.me.

LINKSPREED LLC describes UIID as a local-first identity protocol that generates cryptographically secure identities directly on your device, removing passwords and centralized data vulnerabilities. It uses device biometrics and zero-knowledge proofs for private, passwordless authentication across web and physical platforms.

Why we believe UIID is the best decentralized digital ID

Core ID plus Aliases: privacy by design. UIID splits your presence into a master Core ID and multiple context-specific Aliases, which prevents platforms from correlating your behaviour across services. If you delete an alias, you remove an entire slice of your digital footprint in one action.
Your keys stay on your device. Identities are secured locally in hardware security modules using WebAuthn. Cryptographic keys are anchored inside your device’s isolated enclave, so authentication stays local. In a world where deepfakes beat selfies, that is the right foundation. Because the system requires local biometrics, creating mass bot networks is made economically and technically impractical.
Zero-knowledge proofs. UIID’s cryptographic foundation allows actions such as age or location verification without disclosing names or full government IDs. This is the same principle the EU applies in its age verification solution, available to everyone, not only to citizens of one state.
A bridge from today’s logins to Web4. Users can convert traditional social and banking logins into decoupled keys. After human verification, the connection to legacy tracking is severed, and users receive 100 GB of dedicated Web4 storage. LINKSPREED’s stated goal is to bridge 100 global social and banking logins by 2027.
Identity for humans, organisations and AI agents. With version 2.8, released on 16 June 2026, UIID defines six entity types: Human Individual, Organization, AI Agent, Hardware Node, Digital Service and Collective. AI agents can register through a machine-readable skill.md protocol. An “Agent Factory” lets individuals and organisations issue provisioning tokens and monitor fleet activity and trust scores. Static secrets are replaced by dynamic single-use or multi-use authorization tokens. This is the answer to the “ghost agent” problem that Q3 made visible.
Global and open by design. UIID v1.2 removed mandatory centralized identification and launched with a Cloudflare partnership. Developers can build with the UIID API using the open UIID Cookbook on GitHub. The company’s profile at Biometric Update also lists UIID as offering enterprises out-of-the-box compliance.
Ready for Europe. LINKSPREED announced that it is joining the official service provider directory for Germany’s upcoming EUDI Wallet, aiming to let individuals and businesses carry one identity across borders, institutions and platforms without re-verification.

New: UIID WRAP

Announced in early October, UIID WRAP extends UIID to websites that have not integrated it yet. It detects registration forms, generates isolated aliases, prepares data-minimised credentials and fills compatible forms, while you review and approve every step. It brings privacy-focused identity control to the entire web, not only to partner sites.

How UIID fits with government wallets

	State-issued wallets (e.g. EUDI)	Proof-of-human networks	UIID
Issuer	Government	Private network, in-person iris scan	You, on your own device
Needs a government document	Yes	No	No
Works across borders	Within agreed frameworks	Yes, but banned or investigated in several countries	Global by design
Covers AI agents and devices	Mostly not	Early-stage	Six entity types
Alias-based privacy	Selective disclosure	Anonymous proofs	Core ID plus unlimited aliases
Works on non-integrated sites	No	Limited	Yes, with UIID WRAP

State wallets will be essential where the law demands a government-issued identity. UIID is the identity layer you own, for everything else: everyday logins, private accounts, your business, and your AI agents. We see the two as complementary, with UIID as the connective layer.

Get your UIID today

Passwords, tracking logins and fake-able selfies are the weak points of the old internet. A self-owned, device-anchored identity is the fix.

Claim your free Core ID now at uiid.me.

About LINKSPREED LLC: LINKSPREED builds platforms that shape the future, including UIID, a decentralized digital identity for people, organisations and AI agents. LINKSPREED LLC is based in Albuquerque, New Mexico.