Philippines pushes national ID as foundation for financial identity verification

The Philippines is rapidly turning its national digital identity system into core financial infrastructure. As the central bank prepares rules that would make PhilSys authentication part of customer due diligence, technology providers are rolling out new passkey authentication, identity verification and banking integrations built around the country’s digital identity ecosystem.

BSP pushes national ID, digital verification 

The Philippines central bank is considering making national ID authentication a central part of customer due diligence in what would be a big regulatory shake-up for the country’s real-time digital identity verification.

Bangko Sentral ng Pilipinas (BSP) has set out a draft memorandum to make the National ID Authentication Services (NIDAS) a standard part of customer due diligence across the financial sector.

“NIDAS integration is a necessary regulatory measure to support the broader use and adoption of the National ID as the country’s foundational identity system,” the BSP said.

The system, co‑developed by the Philippine Statistics Authority (PSA) and the Department of Information and Communications Technology (DICT), enables real‑time identity checks through biometric authentication and database matching against PhilSys records.

Banks and other BSP‑supervised institutions (BSIs) will have to implement NIDAS during onboarding, account opening and account updates. The platform’s verification will be required whether it’s conducted digitally or in person.

Institutions that have not yet completed NIDAS onboarding will have to use the PSA’s National ID Check platform as an interim verification method. The BSP stressed that the new rules do not eliminate the use of other valid IDs or verification methods. These may still be applied based on a risk‑based approach when a national ID is not presented or if NIDAS is unavailable.

The draft rules also outline how BSIs should adopt NIDAS authentication tiers, which is dependent on the risk profile of customers and transactions. Tier 1 provides basic online authentication using yes/no responses and token verification. Tier 2 adds e‑KYC with agreed demographic fields. Tier 3 would allow interoperability across relying parties and is currently in development.

Customer due diligence performed through NIDAS will remove the need for a physical or printed National ID. Institutions must maintain robust anti‑money laundering controls, cybersecurity safeguards and data protection measures throughout implementation.

The BSP plans a two‑phase rollout. Phase one begins three months following issuance of the memorandum. It covers banks with retail services, digital banks, electronic money issuers and virtual asset service providers. Six months after coming into force, requirements extend to the rest of the financial sector that will include thrift, rural and cooperative banks, operators of payment systems with KYC functions, and other supervised entities.

A BSI will be considered compliant once it submits a complete application and onboarding requirements to the PSA.

The central bank said the initiative is intended to advance secure, widespread use of the national ID in financial services, and support broader goals around financial inclusion, digitalization and financial integrity. As of end‑October last year, 90.29 million Filipinos — roughly 80 percent of the population — had registered for the national ID, according to PSA data.

Passkeys arrive as BSP phases out SMSOTPs

Hyperstacks has partnered with Ideem to bring passkey login technology to Philippine banks and other BSP‑regulated institutions.

Ideem’s Passkeys+ will be integrated into Hyperstacks’ Composable Digital Banking platform, which connects banks and electronic money issuers to Instapay and PESONet. Hyperstacks currently supports 10 regulated institutions.

Philippines banking is experiencing regulatory changes as BSP Circular 1213 pushes the sector toward phishing‑resistant authentication, and away from SMS one‑time passwords, which have seen surging interception, credential theft and account takeover fraud.

“Filipino banks need authentication that is bound to the device, resistant to phishing, and BSP‑compliant, without rebuilding the entire customer experience their users already trust,” says Ideem cofounder and president Greg Storm.

By plugging Passkeys+ into existing Hyperstacks rails, institutions deploy device‑bound FIDO passkeys without custom integration work. Hyperstacks CEO Graham Jimenez said banks are urgently looking to replace OTPs without disrupting customers.

“With Ideem’s Passkeys+ built into our platform, banks on our rails get a compliant, phishing-resistant authentication layer that is quick to switch on,” Jimenez says. “It is not just a compliance box to check. It cuts fraud losses and gives customers a faster, simpler sign-in, and that is good for their business.”

The integration gives institutions a faster path to compliance and reduces fraud tied to OTP interception, according to the companies; replacing passwords and OTPs with a smoother, cross‑device sign‑in experience.

Ecosystem expands around PhilSys

Hopae has expanded its Asian coverage, adding the Philippine national ID and Indonesia’s NIK verification to its Hopae Connect platform. This brings two of Southeast Asia’s largest identity systems under a single API.

The update gives clients access to more than 280 million identities across the region. Hopae Connect now supports verification for over 90 million national ID holders in the Philippines — organizations can scan the QR code on the card to retrieve verified personal data and confirm authenticity.

In Indonesia the platform now validates name, date of birth and NIK against authoritative government records. Hopae Connect performs biometric facial matching against the Indonesian government’s reference photo, raising assurance from simple attribute checks to full identity binding.

The expanded coverage allows companies to plug directly into official government rails for workforce onboarding, financial KYC and other high‑assurance use cases without building custom integrations, Hopae said.

As regulators push toward mandatory PhilSys authentication, banks and technology providers are preparing for implementation. Last week, Ateneo’s Business Insights Laboratory for Development (BUILD) and its Technical Resource Lab (TRL), together with the Philippine Statistics Authority (PSA), convened more than 60 representatives from banks and regulators for the National ID Forum in Quezon City.

The event gathered officials from the PSA and BSP alongside business and technology leaders from 24 financial institutions, focusing on how the PhilSys National ID can be used in financial services. BPI said nearly 89 percent of its digital onboarding customers now choose the national ID route, contributing to roughly a 30 percent increase in new-to-bank customers. As of July 2026, 48 private financial institutions had been approved as relying parties.

The forum came in relation to the BSP’s draft memorandum around integrating NIDAS into customer due diligence. The draft will have two compliance waves: three months for universal and commercial banks with retail operations, digital banks, EMIs and VASPs; six months for thrift, rural and cooperative banks and other supervised entities. The BSP warned it may take enforcement action against lagging institutions.

PSA officials presented NIDAS, which offers three authentication tiers — from basic yes/no token checks to e‑KYC demographic verification. Tier 3, enabling interoperability across relying parties, is not yet live. BSP officials reiterated that all formats of the national ID, including the digital version, must be accepted as primary identification. About 90 million Filipinos were registered with PhilSys as of late 2025.

Speakers from the PSA, BSP and academia walked participants through the division of responsibilities between PSA and the DICT which operates eVerify, National ID Check and the eGovPH app. TRL demonstrated live builds of National ID verification tools and led discussions on how authentication services are improving customer experiences.

The Department of Social Welfare and Development (DSWD) highlighted how PhilSys is powering government‑to‑person payments, including the UPLIFT client portal that identifies beneficiaries by PhilSys number and enables them to register bank accounts or e‑wallets.

The forum underscored how quickly the Philippine national ID ecosystem is expanding beyond government services. With regulators moving to embed PhilSys into financial customer due diligence, banks, identity providers and technology vendors are increasingly building products around the country’s foundational digital identity infrastructure.

Article Topics

biometric authentication  |  biometrics  |  financial services  |  Hopae  |  Ideem  |  identity verification  |  national ID  |  passkeys  |  PhilID  |  Philippines