Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
UAE Central Bank Orders Phase-Out of SMS and Email OTPs
The Central Bank of the United Arab Emirates has ordered all licensed financial institutions—including banks, insurers, and payment service providers—to eliminate SMS- and email-based one-time passwords for customer authentication by 31 March 2026. The new rules mandate the use of stronger methods such as biometrics, passkeys, or tokens, alongside fraud monitoring and customer self-service tools. Non-compliance could result in fines up to AED 250,000. The move mirrors similar regional trends, including Singapore’s phase-out of SMS OTPs, and aims to address vulnerabilities like phishing and SIM-swap attacks.
Google and Sparkassen-Finanzgruppe Partner on EU Digital Age Verification
Germany’s largest retail banking group, Sparkassen-Finanzgruppe, has partnered with Google to launch the EU’s first national-scale digital age verification system integrated into Google Wallet. Announced at the Global Digital Collaboration Conference in Geneva, the service will allow over 50 million Sparkasse customers to prove age eligibility using zero-knowledge cryptography without revealing personal details. A pilot is set for late 2025, with broader rollout in 2026. The move aligns with EU regulations like the Digital Services Act but has raised privacy debates over data control, though Sparkasse remains the data controller under GDPR.
Apple’s Radar Patent Signals New Frontier in Contactless Biometrics
Apple has secured U.S. Patent No. 12,282,084 for a radar-based system capable of extracting biometric signals like heartbeat and respiration by analyzing reflected millimeter-wave signals. This technology could complement Apple’s existing biometric solutions such as Touch ID and Face ID, potentially enabling contactless health monitoring or even user presence detection for device security. While the technology is innovative, Apple has made no announcements about commercial use, and any medical applications would require regulatory approval.
Mexico Approves Biometric CURP ID for National Use
Mexico’s Chamber of Deputies has passed reforms transforming the CURP into a biometric national ID, valid in both physical and digital formats. The new CURP will include fingerprints and facial images and become the sole official ID accepted across government and private services, including banking and healthcare. Authorities have 90 days from publication to begin issuing the new IDs, with full system integration required within 180 days. Civil society groups have raised concerns about potential surveillance risks, while penalties for data misuse can reach up to 20,000 times the UMA value.
Sri Lanka Taps Indian Firms for MOSIP-Based Digital ID, Eyes Pilot Launch by Mid-2026
Sri Lanka has launched a four-month tender process restricted to Indian firms to build the Sri Lanka Unique Digital ID (SL-UDI) system on the MOSIP open-source platform. Supported by a Rs 10.4 billion Indian grant and local co-funding, the project aims to issue pilot digital IDs by mid-2026, with nationwide rollout planned for 2027-28. The new ID will include fingerprint and facial biometrics, with iris scans planned later. The initiative reflects growing regional integration in digital identity, though civil society groups warn of privacy and sovereignty concerns.
New Jersey Advances Digital Driver’s License Bill, Eyes Late-2028 Rollout
New Jersey lawmakers have passed legislation directing the Motor Vehicle Commission to develop a mobile driver’s license system, which would allow residents to carry valid IDs in digital wallets. The bill specifies a 44-month timeline from enactment, making a launch unlikely before late 2028. Digital licenses would remain voluntary and carry legal equivalence with physical cards. Privacy protections include encryption, selective disclosure, and limits on law enforcement’s access to mobile devices. New Jersey would still need federal approval for TSA acceptance of the digital IDs.
Uzbekistan Expands Digital ID Use to Domestic Flights as Digital Identity Push Continues
From 1 July 2025, passengers on domestic flights in Uzbekistan can use digital IDs displayed in the MyGov app instead of physical documents, as part of broader digital identity integration across banking, notary, and rail services. Only live, in-app documents are accepted, with screenshots or photos prohibited. The Social Card app is still in beta and not yet fully operational. While authorities present digital ID adoption as modernization, observers note potential surveillance implications in an authoritarian context. The move also comes amid talks with Azerbaijan on cross-border biometric ID recognition.
–
By the ID Tech Editorial Team
Follow Us