NFC reading: verifying an identity through the chip, not the image

In short: most passports and new identity cards contain a contactless chip (NFC). Reading it with a smartphone makes it possible to retrieve identity data straight from the source, signed by the State, instead of relying on a photo of the document. In an era of AI-generated fake IDs, this is one of the most reliable ways to verify an identity.

‍

There are several ways to verify an identity: asking for a photo of the document, scanning an ID, reading its chip, or tomorrow relying on the European digital identity wallet (eIDAS 2.0). This wallet is promising, but rolling it out will take time: the timeline stretches over several years, and many unknowns remain (who the providers will be, how the different players will fit together, what level of adoption citizens will show). In the meantime, it remains essential to have a reliable solution today, upfront, to verify an identity at the point of onboarding. NFC reading is one of the most solid.

‍

What is NFC reading?

‍

NFC (Near Field Communication) is the technology behind "contactless", the same one used when you tap a bank card against a terminal.

‍

Recent identity documents (passports, electronic national identity cards) embed a secure chip. NFC reading consists of holding the document up to a smartphone to read this chip and retrieve the information it contains: civil status, photo, dates, and security data.

The difference is easy to remember: instead of looking at the image of a document, you query the document's chip.

‍

How it works, in practice

‍

Three steps play out in a few seconds:

1. Accessing the chip. The application first reads the document's optical reading zone (the two lines of characters at the bottom of a passport, the MRZ) or an access code. This key opens an encrypted communication with the chip. Without the physical document, there is no access.
2. Retrieving the data. The chip returns the civil status and the original photo, in a standardized, international format (ICAO 9303 standard, used for travel documents).
3. Verifying authenticity. This is the key point. The chip is cryptographically signed by the authority that issued the document. The smartphone verifies this signature. If the data has been modified, or if the chip is fake, the signature does not match.

In short: you are not only reading information, you are verifying that it genuinely comes from an authentic document and that it has not been altered.

‍

Why it is more reliable than a photo or a scan

‍

Traditional identity verification often relies on a photo of the document, taken by the customer. But an image can be manipulated.

‍

Since the arrival of generative AI, it has become possible to create fully synthetic fake documents, visually very clean, in which the inconsistencies detectable by eye or by a basic check have disappeared. An ID can be fabricated from scratch, without ever starting from a real document.

NFC reading shifts the cursor:

• The data comes from the secure chip, not from an image that can be retouched.
• Authenticity is proven by the State's signature, not assumed from a visual.
• A falsified photo or scan has no valid chip to present.

Trust no longer rests on what is displayed, but on what is proven.

‍

NFC and digital identity: the same direction

‍

NFC reading is part of a broader movement: that of high-assurance digital identity.

The European regulation eIDAS 2.0 provides for a digital identity wallet and pushes toward identity proofs that are verifiable, reliable and interoperable. The logic is the same as NFC: relying on data certified at the source rather than on a declarative image.

‍

In other words, knowing how to read a high-assurance identity proof is becoming a reflex for the future, not a niche option.

‍

What NFC does not solve (worth keeping in mind)

‍

NFC reading is a powerful tool, but it is not a single answer:

‍

• It authenticates the document, not the person presenting it. To verify that this is indeed its holder, you need to pair it with a biometric verification: a selfie compared to the photo on the chip.
• Not all documents and not all phones are compatible. You need to plan a fallback journey for cases without a readable chip.
• An authentic identity can be stolen. A stolen document, not yet reported, will pass NFC reading. Hence the value of cross-checking with other fraud signals.

NFC strengthens identity verification; it does not replace a holistic approach to risk detection.

‍

What it changes for your journeys

‍

For online onboarding, the challenge is twofold: making it more reliable without making it heavier.

The right approach is to offer NFC reading when it is possible, to switch cleanly to document and biometric verification when it is not, and to combine all of it with fraud detection. The goal is not to add friction for good customers, but to shut the door on fake documents, upfront, right from onboarding.

‍

In conclusion

‍

Faced with increasingly credible fake IDs, looking at the image of a document is no longer enough. Reading the chip, on the other hand, brings a proof: that of an authentic document, signed by the State, unaltered.

‍

NFC reading is not an end in itself, but it is one of the most solid ways to verify an identity today, provided it is integrated into a broader control chain: liveness verification, fraud detection, and a fallback journey.

‍

Detecting risk upfront, on proofs rather than on appearances: that is the whole point of modern onboarding.

‍

Sources: International Civil Aviation Organization (ICAO), Doc 9303, machine-readable travel documents (eMRTD standard); Regulation (EU) 2024/1183 (eIDAS 2.0), European digital identity wallet; Meelo, "Document fraud in the age of AI: no one is spared".

‍