EUDI Wallet Explained: What It Means for KYC and Onboarding by 2027

By December 2027, if your organisation is a bank, payment institution or e-money issuer operating in the EU, you'll be legally required to accept a government-issued digital identity wallet as a way for customers to prove who they are. The EU Digital Identity Wallet is one of the more significant, and less discussed, pieces of infrastructure reshaping how financial services handle identification and onboarding.

What is the EUDI Wallet?

The European Digital Identity Wallet is a secure mobile application, provided or accredited by each EU member state under the revised eIDAS 2.0 Regulation, that lets citizens and businesses store, manage and selectively share official digital credentials — a national ID, a driving licence, professional qualifications, and increasingly, verified attributes used for financial onboarding. Rather than handing over a physical document or a full scanned copy of an ID, a wallet holder can share just the specific attribute a service needs — proof of being over 18, or a verified name and date of birth — without exposing the rest of the document.

The rollout timeline

The implementation runs in two stages:

• By the end of 2026 — every EU member state must provide at least one EUDI-compliant wallet, and public-sector services must accept it.
• By December 2027 — private-sector organisations in regulated industries, explicitly including banks, payment institutions and e-money issuers, must accept the EUDI Wallet for customer identification and authentication.

That second deadline is the one finance and compliance teams need on their radar now, since eighteen months sounds like a long runway until you consider how deeply identity verification is embedded into existing onboarding, KYC and strong customer authentication workflows.

What changes for KYC and AML onboarding

For financial institutions, EUDI Wallet acceptance isn't a bolt-on feature — it changes how core customer due diligence can be performed:

• Institutions will be able to accept verified Person Identification Data and other attested attributes directly from the wallet, rather than relying solely on manual document checks or video identification
• Selective disclosure — the wallet holder choosing exactly which attributes to share — supports better data minimisation in onboarding, an area regulators have increasingly scrutinised under GDPR alongside AML obligations
• Onboarding journeys should get faster and carry stronger assurance once wallets are integrated, since the underlying identity has already been verified by a member state's national scheme rather than re-verified by each institution independently

This sits alongside, rather than replaces, existing AML and customer due diligence obligations — the wallet changes how identity is verified, not whether firms still need to run full risk-based due diligence on new customers.

What compliance and finance teams should do now

• Map every identity-dependent customer journey — onboarding, re-KYC, strong customer authentication for payments — to understand where EUDI Wallet acceptance will need to plug in
• Assess technology gaps in back-office and onboarding systems for handling verifiable credentials, which use a different technical standard to the document upload and video identification flows most firms currently run
• Update onboarding and cross-border KYC policies to account for EUDI Wallet as an accepted identification route once implementing rules are finalised
• Engage identity verification and onboarding vendors early — most compliance teams won't be building EUDI Wallet acceptance from scratch, but will depend on existing KYC vendors building it into their platforms in time
• Track further implementing acts, since detailed technical and operational requirements are still being finalised at EU level

FAQ

Is EUDI Wallet acceptance mandatory for all financial firms?
It applies to regulated private-sector entities including banks, payment institutions and e-money issuers, who must accept it for identification and authentication from December 2027.

Does the EUDI Wallet replace AML due diligence?
No — it changes how identity is verified during onboarding, but firms still need to carry out full risk-based customer due diligence under existing AML rules.

Does this only affect EU-based firms?
It applies to firms providing regulated financial services within the EU, so non-EU firms serving EU customers, or UK firms with EU operations, need to assess their exposure too.

Digital identity infrastructure is quietly becoming as important to compliance teams as the regulations it supports. Learnsignal's CPD courses cover the AML, KYC and financial crime topics finance professionals need as onboarding technology continues to evolve.

Why this is a bigger shift than it first sounds

It's tempting to file the EUDI Wallet alongside other minor identity-verification tweaks, but the underlying shift is more structural. Today, every financial institution effectively runs its own identity verification process from scratch for every new customer — checking a passport, running a liveness check, cross-referencing a database. The EUDI Wallet moves toward a model where identity is verified once, centrally, by a member state's national scheme, and then reused by any relying party the individual chooses to share it with. That's a genuinely different architecture for identity assurance, closer to how bank-issued single sign-on or open banking consent already works, and it raises real questions firms will need to work through: how much residual due diligence is still required once a wallet-verified identity is accepted, how liability is allocated if a wallet-issued credential later turns out to be compromised, and how firms handle customers who haven't yet adopted a wallet even once acceptance becomes mandatory.