Estonian eID for business: Smart-ID, Mobile-ID and ID card

Last reviewed: 5 October 2026 · Not legal advice

Estonia offers three forms of electronic identity (eID). The ID card with a chip is, in RIA's words, the "primary document that carries electronic identity, which is compulsory according to the law"; Smart-ID is a phone app, and Mobile-ID keeps the keys on a special SIM card.^[2]

Every Estonian eID at a glance

Estonia's eID scheme, notified to the EU on 7 November 2018, covers the ID card, the residence permit card, Digi-ID, the e-Resident's Digi-ID, Mobile-ID and the diplomatic card, all at level of assurance (LoA) High.^[1] Smart-ID sits outside it; the Information System Authority (RIA) rates it "high" for people with an Estonian personal code.^[2]

The last column is Didit's own status for each eID.

The Estonian eID timeline: from 2018 to 2027

1. 7 November 2018NotifiedID card, Digi-ID and Mobile-ID enter the EU list at High.
2. 2 July 2022New Mobile-IDMobile-ID replaces Mobiil-ID on the EU list.
3. 1 May 2025Digi-ID endsDigi-ID is no longer issued to residents, only to e-residents.
4. November 2025New certificatesSK ID Solutions stops issuing ID-card certificates.
5. 29 April 2026NFC sign-upSmart-ID registration with the ID card moves to NFC.

The Estonian eID from notification to NFC registration.^{[1][2][9][12]}

NFC registration replaced the card reader so scammers can no longer trick people into typing ID-card PINs on calls.^[12]

1. 2026Smart-ID+QR and app-to-app login rolls out to users.
2. 24 December 2026EUDI WalletEvery Member State must offer one.
3. 19 May 2027SIM swapOld Mobile-ID SIMs stop working.
4. 10 July 2027AMLR applieseID becomes a named route for verification.
5. 24 December 2027AcceptancePrivate firms required by law or contract to use strong user authentication for online identification must accept the wallet on the user's request, except micro and small enterprises.

What changes in 2026 and 2027.^{[4][9][19][20]}

Smart-ID+ drops the personal-code entry: a QR scan on a computer, an app-to-app jump on a phone.^[11] RIA adopted it for state e-services, and each service opts in.^[10] Mobile-ID SIMs must be replaced before 19 May 2027; RIA says the update "is related to amendments to the eIDAS Regulation" that entered into force in 2024, and warns that fraudsters may impersonate mobile operator staff during the swap.^[4]

Article 5a(1) of eIDAS 2, Regulation (EU) 2024/1183, says "each Member State shall provide at least one European Digital Identity Wallet within 24 months" of its implementing acts entering into force.^[19] The first entered into force on 24 December 2024, so the deadline is 24 December 2026. Our research found no published launch date for an Estonian wallet as of 5 October 2026. See the EUDI Wallet guide.

The rules for eID verification in Estonia

Under the Identity Documents Act the ID card is compulsory for citizens, and the Police and Border Guard Board issues it; a digital signature carries equal weight with a handwritten one.^[2]

Anti-money laundering: section 31 of RahaPTS

The Money Laundering and Terrorist Financing Prevention Act (RahaPTS) sets rules for remote identification by credit institutions, financial institutions and notaries. When due diligence is not done in person, section 31(3) allows two tools.^[7]

§ 31(3)Rahapesu ja terrorismi rahastamise tõkestamise seadus

"1) e-identimise süsteemi, millest on teatatud [...] (EL) nr 910/2014 [...] artikli 9 kohaselt ja mis vastab [...] artikli 8 lõike 2 punktis b või c sätestatud usaldusväärsuse tasemele" [...] "2) kvalifitseeritud usaldusteenust"

Source: Riigi Teataja, RahaPTS^[7]

In short: an eID scheme notified under eIDAS at Substantial or High, or a qualified trust service. The ID card and Mobile-ID meet the first test.^[1] Smart-ID is not notified. Full Smart-ID accounts carry qualified certificates,^[3] so a firm could argue the second route for it. That is our reading, unconfirmed by any official statement as of 5 October 2026; ask the Financial Supervision Authority.

The three legal routes for remote identification with an Estonian eID.^[7][20]

From 10 July 2027 the EU Anti-Money Laundering Regulation (AMLR), Regulation (EU) 2024/1624, applies; its Article 22(6)(b) accepts "electronic identification means which meet the requirements of Regulation (EU) No 910/2014 with regard to the assurance levels 'substantial' or 'high'".^[20] The Anti-Money Laundering Authority (AMLA) final draft standards of 30 September 2026, not yet law, say eID qualifies "regardless of whether they are notified" if it meets those levels.^[21] Adopted in that form, they would cover Smart-ID. Our guide to eID verification explains the AMLR route.

Gambling and age rules

Under the Gambling Act (HasMS) wording in force since 1 January 2026, under-21s may not play games of chance or remote games of chance; lotteries and toto are 18+ (§ 34(2) and (3)).^[8] Section 53(1) requires remote operators to ensure "iga mängija isikusamasuse tuvastamise", the identification of every player, record the name and personal code or date of birth, and keep minors out.^[8] No Estonian eID returns an "over 18" or "over 21" flag through TARA: the business derives age from the date of birth.^[6]

What the user sees with Smart-ID

The service shows a four-digit code, the Smart-ID app shows the same code with the service's name, and the user confirms with PIN1. Some services make the app offer three codes to pick from.^[13] The strip shows the comparison-code flow, not Smart-ID+, and skips any identifier entry; screen 3 is the Smart-ID app, the rest the verification page. The PIN is never typed on the website.

In 2019, fake bank pages collected Mobile-ID PINs to open Smart-ID accounts behind victims' backs; since 1 July 2019 "a separate notification and a code are now sent to the device connected to the person's Mobile-ID", and the code must also be entered to create a Smart-ID account.^[18] See the Smart-ID and Mobile-ID guides.

Choosing an Estonian eID by use case

A routing rule for most Estonian sign-ups.

People without an Estonian eID

In Estonia and Latvia, Smart-ID is limited to people with an Estonian or Latvian national ID number. Residence permit holders and e-residents can register too.^[14] Mobile-ID needs an ID card to apply.^[2]

• e-residents. For Smart-ID, TARA cannot tell e-residents from residents.^[6] With the e-Resident's Digi-ID, RahaPTS asks for a second document.^[7]
• Minors. Smart-ID has no age limit of its own, but registration paths do (Mobile-ID from 15, a biometric document from 6), and under-18 accounts need a parent's authorisation.^[15]
• Customers from other EU countries. They bring their own eIDs; Smart-ID also has users in Latvia and Lithuania and is used in Belgium.^[3][9] See eID in Latvia, eID in Lithuania and the eID schemes by country table.

Launch checklist for Estonia

• Decide whether RahaPTS § 31 applies to you, and which § 31(3) route you rely on.^[7]
• Plan for Smart-ID+: QR on desktop, app-to-app on mobile.^[11]
• Require a second document for e-resident Digi-ID onboarding.^[7]
• Derive age from the date of birth for gambling and age-gated goods.^[8]
• Keep a document route with chip reading for everyone else.
• Track the EUDI Wallet deadlines of 24 December 2026 and 24 December 2027.^[19]

How Didit helps with Estonian eID verification

Smart-ID and Mobile-ID are live on Didit for Estonia. The user approves a comparison code in the app; Didit never asks for the PIN. Turn them on in the console under Workflows, ID Verification, Countries, Wallets accepted, or with the workflows API.

A sign-in returns the full name, date of birth, Estonian personal code, the level of assurance (labelled High) and a signature check; no address, no portrait. Only completed sign-ins are billed; Smart-ID and Mobile-ID cost $0.20 each (pricing page). The Estonian ID card is on Didit's roadmap, and EUDI Wallet acceptance is coming soon. See all digital ID wallets.

Everyone else falls back in the same workflow to document capture with NFC chip reading, liveness and face match. A document fallback is billed separately, and eID sign-ins sit outside the free monthly checks. A full KYC check costs $0.33, NFC verification $0.15 and AML screening $0.20. Age estimation at $0.10 can run first, with an eID or a document for borderline cases.

Frequently asked questions

Sources

1. Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
2. Electronic identity (eID), Information System Authority (RIA), figures as at July 2026.
3. Smart-ID, SK ID Solutions, user counter read 5 October 2026.
4. Mobile-ID users need to replace their SIM card, id.ee (RIA), 6 August 2026.
5. Applying for and activating Mobile-ID, id.ee (RIA).
6. TARA technical specification, Information System Authority (RIA).
7. Money Laundering and Terrorist Financing Prevention Act (RahaPTS), § 31, Riigi Teataja, wording in force from 20 July 2026.
8. Gambling Act (HasMS), Riigi Teataja, wording of 31 December 2025.
9. 2025: advancing digital trust beyond borders, SK ID Solutions, 19 January 2026.
10. Estonia's government adopts Smart-ID+ to strengthen security, SK ID Solutions, 28 January 2026.
11. How does the new Smart-ID protect me from fraud, Smart-ID help.
12. Smart-ID registration with the Estonian ID card via NFC, Smart-ID, 29 April 2026.
13. One confirmation code or three, Smart-ID help.
14. Can foreigners and non-residents use Smart-ID, Smart-ID help.
15. Age limitations for using Smart-ID, Smart-ID help.
16. Price list, SK ID Solutions, valid from 1 June 2026.
17. e-residents generated record state revenue in 2025, e-Residency.
18. It is more difficult for criminals to create Smart-ID accounts behind people's backs, id.ee (RIA), 20 March 2020.
19. Regulation (EU) 2024/1183 (eIDAS 2), EUR-Lex, Official Journal of 30 April 2024.
20. Regulation (EU) 2024/1624 (AMLR), EUR-Lex, Official Journal of 19 June 2024.
21. Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.

Compare every national eID on the eID verification page.