eIDAS 2.0 and the EUDI Wallet: The Beginning of the End for KYC as We Know It

Customer onboarding in regulated finance has always been a compromise between compliance and conversion. Video identification, document uploads, selfie checks — every step verifies identity, and every step loses customers. The revised eIDAS framework and the European Digital Identity Wallet are the first serious attempt to dissolve that trade-off at the infrastructure level.

The legal foundation is Regulation (EU) 2024/1183 — commonly called eIDAS 2.0 — which entered into force on 20 May 2024. Its central mandate: every member state must offer its residents at least one European Digital Identity Wallet (EUDI Wallet), free of charge, built to common technical standards. With the first implementing acts adopted at the end of 2024, the delivery deadline lands at the end of 2026 — which makes this the year wallet infrastructure becomes real for product roadmaps.

What the Wallet Actually Is

The EUDI Wallet is a state-issued or state-recognised mobile application in which citizens hold their identity data and attestations — the identity card function, driving licence, diplomas, powers of attorney — and present them selectively to relying parties. Two properties matter for finance. First, identification via the wallet reaches the assurance level “high” of the eIDAS framework, the same tier as physical ID checks. Second, natural persons can create qualified electronic signatures with the wallet free of charge — member states may limit this to non-professional use — which collapses the cost of signing processes in retail business that today require separate providers.

The Obligation Most Firms Have Not Priced In

eIDAS 2.0 is not merely an offer; it contains acceptance duties. Where private firms — banks and payment institutions among them — are required by Union or national law, or by contract, to use strong user authentication for online identification, they must accept the EUDI Wallet at the user's request — no later than 36 months after the implementing acts entered into force, that is, by late December 2027. Microenterprises and small enterprises are exempt. For onboarding architecture, this is a design constraint with a deadline: the wallet cannot be an afterthought bolted onto a flow built around video identification.

For Germany specifically, the implications are pointed. German AML practice historically leaned on comparatively strict identification methods — in-person checks and video identification dominate. Wallet-based identification at assurance level high offers a route that is simultaneously more convenient and, in supervisory terms, more standardised. Firms that re-architect onboarding around wallet-first flows stand to convert measurably more applicants while simplifying their GwG documentation.

“

The wallet does not abolish KYC. It abolishes the assumption that KYC must be slow, expensive, and hand-rolled by every institution separately.

DACH Status: Three Countries, Three Speeds

• Germany is building its wallet through a public development programme with open-source components and large-scale pilots, alongside the existing eID function of the identity card. The federal government names 2 January 2027 as the launch date — shortly after the EU deadline at the end of December 2026 — starting with the digital identity and first digital attestations such as the driving licence; the qualified electronic signature is to follow in a later stage.
• Austria starts from a stronger base: ID Austria is operational and widely used for public services, giving Austrian users a habit of state digital identity that the wallet can inherit.
• Switzerland is outside eIDAS but approved its own state e-ID in the September 2025 referendum — narrowly. The Swiss wallet follows similar architectural principles, and cross-recognition with the EU framework is the question to watch for firms serving both markets.

What Changes in Onboarding Economics

Today, a regulated onboarding in the DACH region combines identification costs per case, drop-off rates that grow with every additional step, and manual review queues for edge cases. Wallet-based identification attacks all three simultaneously: the marginal cost of a wallet presentation is near zero, the interaction collapses to seconds inside an app the user already trusts, and the data arrives structured and cryptographically verifiable rather than as a video recording to be reviewed.

The second-order effects reach further. Reusable attestations — proof of account ownership, proof of address, corporate powers of attorney — reduce repeated document collection in business banking and lending. Qualified signatures that are free for consumers change the calculus for contract-heavy products. And because the wallet standard is Union-wide, an onboarding flow built for wallet-first Germany extends to other EU markets with configuration, not redevelopment.

The Trust Architecture Behind the Wallet

What makes the EUDI Wallet more than a login app is its attestation layer. Beyond the core identity, the framework defines qualified electronic attestations of attributes — statements about a person or company issued by trusted parties under supervision, from professional qualifications to register extracts. Wallets themselves must be certified against common security standards, and relying parties register in their member state, declaring what data they intend to request and why. That registration is the anti-abuse mechanism: over-asking becomes visible, contestable, and sanctionable.

For financial firms, the attestation layer is where the product imagination should focus. A verified corporate power of attorney, a supervised-institution status attestation, or a source-of-funds confirmation presented from a wallet is not a scan of a PDF — it is structured, cryptographically verifiable data with a liability regime behind it. Entire categories of back-office verification work exist only because such attestations did not.

Naming the Risks Honestly

A candid assessment also names the failure modes. Adoption risk is real: wallets compete against ingrained habits, and their value grows with acceptance density — a cold-start problem the acceptance obligations only partially solve. Fragmentation risk persists if national implementations diverge in practice despite common standards. And fraud will follow the wallet as it follows every channel: device takeover, social-engineering of wallet onboarding, and coerced presentations are the new vectors compliance teams must model. None of these risks argues against preparation; all of them argue against naive timelines.

Preparing in 2026

1. 01Inventory every flow that identifies a person or collects a signed declaration — onboarding, re-KYC, payout changes, corporate mandates.
2. 02Design the wallet as a first-class identification method next to existing paths, not as a replacement big-bang.
3. 03Track the implementing acts and national wallet certification schedules; integration specifics depend on them.
4. 04Review AML process documentation so wallet-based identification is anchored in the risk assessment before the first customer uses it.
5. 05For Swiss operations, plan for parallel integration of the Swiss e-ID with its own trust infrastructure.

Where Wallet Meets Government

The wallet's first mass-usage moments will likely be administrative, not financial: driving licences, prescriptions, university enrolment, cross-border address changes. That sequencing is strategically convenient for financial firms — the state builds the habit, finance harvests it. Austria's experience with ID Austria demonstrates the pattern: once a digital identity works for taxes and registrations, extending it to account opening feels like a smaller step to the user than the industry's onboarding funnels assume.

Conclusion

eIDAS 2.0 turns digital identity from a national patchwork into Union infrastructure, and the acceptance duties make engagement non-optional for regulated firms. The winners will be those who treat the wallet as a product opportunity rather than a compliance chore. Aegiron Capital Group supports international fintechs in preparing their onboarding architecture and processes in the DACH region for wallet-based identification; legal assessment and legal advice come from the law firm you engage.