eID verification in Poland: mObywatel, Profil Zaufany, e-dowód
Weryfikacja tożsamości in Poland: mObywatel, Profil Zaufany, e-dowód and bank login compared, the AML act Article 37 and 83 rules, EUDI Wallet dates, routes by use case and a launch checklist.
By Alberto RosasCo-founder & CEO, DiditUpdated 
In short
Online weryfikacja tożsamości (identity verification) in Poland runs on four state eID (electronic identification) credentials: the mObywatel app with its mobile ID (mDowód), Profil Zaufany, the e-dowód chip ID card and bank logins through login.gov.pl. More than 11 million mDowód had been issued by the end of 2025.[2]
- The EU-notified Polish scheme covers Profil Zaufany and the e-dowód, at levels Substantial and High. mObywatel is not on the EU list.[1]
- mDowód is legally an in-person document; no remote API for private companies appears in the official sources as of 5 October 2026.[5]
- Accept first: the mDowód QR check at the counter, and a document check with chip reading online, until the mObywatel-based EUDI (European Digital Identity) Wallet arrives.
People log in to the mObywatel app 1.5 million times a day,[2] yet the state login node serves public services and the mobile ID is a document for face-to-face checks. Weryfikacja tożsamości for Polish customers splits in two: at a counter, and online.
New to the topic: start with what eID verification is.
Weryfikacja tożsamości in Poland: the schemes and who has them
Poland runs one state login hub, login.gov.pl (the national electronic identification node), over several credentials.[7] Other countries: see eID schemes by country.
| Scheme | Operator | Users (date) | Credential | Level and EU notification | Data returned | Private-sector access | Didit status |
|---|---|---|---|---|---|---|---|
| mObywatel (mDowód and profil mObywatel) | Ministry of Digital Affairs[11] | 11 million+ mDowód issued (end of 2025)[2] | Smartphone app, Android 8 or iOS 16 and later[3] | Not EU-notified An eIDAS eID means under national law[1][5] | Profil mObywatel: first names, surname, date of birth, PESEL[5] | Free QR check in person; no online API published[4] | On request |
| Profil Zaufany (trusted profile) | Ministry of Digital Affairs (pz.gov.pl) | No official figure found (searched 5 October 2026) | Online account, confirmed by e-dowód, bank or in person[6] | Substantial and High, notified 19 April 2023[1] | Not listed in the sources read | Through login.gov.pl, built for public services[7] | On request |
| e-dowód (chip ID card, profil osobisty) | Polish state, national ID card[6] | 14 million+ cards, almost 11 million adults (2025)[8] | Contactless chip, CAN number, 4-digit PIN1[6] | Substantial and High, notified 19 April 2023[1] | Not listed in the sources read | SDK release to other entities under discussion[8] | On request |
| Bank login via login.gov.pl | State node, banks as login means[7] | Not published | Online bank account[7] | Not named on the EU list[1] | Not listed in the sources read | Built for public services; free for citizens[7] | On request |
mObywatel and e-dowód figures from the Ministry of Digital Affairs.[2][8]
mObywatel has the reach: the mDowód count grew by 2.4 million in 2025.[2] Profil Zaufany and the e-dowód have the eIDAS (EU electronic identification regulation) status. No Polish credential has both reach and an open online route for private companies today.
From the chip ID card to the EUDI Wallet
- 4 March 2019e-dowódEvery new ID card carries an electronic layer.
- 7 November 2021FingerprintsFingerprints in the chip; 10-year validity from age 12 (5 years under 12).
- 19 April 2023NotifiedProfil Zaufany and e-dowód on the EU list, Substantial and High.
- 1 September 2023AML useAML obliged entities apply the mObywatel act to customer checks.
- October 2025SignatureQualified electronic signature inside mObywatel.
Polish eID milestones.[6][1][5][2]
mObywatel is the base of the Polish EUDI Wallet, and a wallet sandbox for companies and institutions is open.[11] According to chip.pl (March 2026), a pilot is planned for December 2026 as a separate app linked to mObywatel. No official launch date was published as of 5 October 2026.
- Open nowSandboxEUDI Wallet sandbox for companies, open as of October 2026.
- 24 December 2026Wallet dueEvery Member State offers at least one EUDI Wallet.
- 10 July 2027AMLRThe EU AML Regulation applies, eID route included.
- 24 December 2027AcceptanceRegulated private relying parties must accept the wallet.
- 11 August 2028PortraitThe portrait becomes a mandatory wallet attribute.
EU dates that apply in Poland.[11][13][12][18]
The acceptance duty in Article 5f(2) of Regulation (EU) 2024/1183 covers private relying parties that must use strong user authentication, "including in the areas of [...] banking, financial services [...] or telecommunications"; micro and small enterprises are exempt.[13] See the EUDI Wallet guide.
The rules for eID in Poland
The national eID laws
The Act of 5 September 2016 on trust services and electronic identification (Dz.U. 2024 poz. 1725) governs eID means.[8] The Act of 26 May 2023 on the mObywatel application (Dz.U. 2023 poz. 1234) governs the app:[5]
- Art. 2 point 8: the mObywatel document proves identity and Polish citizenship "w relacjach wzajemnej fizycznej obecności stron" (when both parties are physically present).[5]
- Art. 2 point 11 and Art. 14: profil mObywatel is an eIDAS eID means carrying first names, surname, date of birth and PESEL, with two-factor login.[5]
- Art. 15 to 17: the minister may open app services to private entities on request, "bezpłatnie" (free of charge).[5]
Anti-money laundering: Article 37 and Article 83
The AML (anti-money laundering) act of 1 March 2018 already names eID. Article 36 lists the identification data, including the PESEL number (the national population register number).[9] Article 37(1) sets how they are verified.
Article 37(1)Act of 1 March 2018 on counteracting money laundering and terrorist financing
"Weryfikacja tożsamości klienta [...] polega na potwierdzeniu ustalonych danych identyfikacyjnych na podstawie dokumentu stwierdzającego tożsamość osoby fizycznej [...] lub innych dokumentów, danych lub informacji pochodzących z wiarygodnego i niezależnego źródła, w tym, o ile są dostępne, ze środków identyfikacji elektronicznej [...]"
Source: ISAP, consolidated text[9]
In English: verification relies on an identity document or other reliable and independent sources, including eID means where available.[9]
Article 83Act of 26 May 2023 on the mObywatel application
"Instytucje obowiązane [...] są obowiązane stosować przepisy ustawy w zakresie wykorzystywania dokumentu mObywatel jako środka bezpieczeństwa finansowego do identyfikacji klienta oraz weryfikacji jego tożsamości, od dnia 1 września 2023 r."
Source: Dz.U. 2023 poz. 1234[5]
Read with Article 2 point 8, this makes the mObywatel document an AML tool for face-to-face checks.[5]
From 10 July 2027, Article 22(6)(b) of the AMLR (Regulation (EU) 2024/1624) accepts "electronic identification means which meet the requirements of Regulation (EU) No 910/2014 with regard to the assurance levels 'substantial' or 'high'".[12] The final draft standards of AMLA (the EU Anti-Money Laundering Authority) of 30 September 2026, not yet law, say these means "should be used wherever possible", and a firm that verifies by another route "shall be able to justify" why (Art. 7(3)).[14]
Regulators and age rules
The Polish Financial Supervision Authority (KNF) published a position on video verification in banks on 5 June 2019.[10] According to a Taylor Wessing legal alert, positions of 3 March 2022 and 29 September 2023 followed, the earlier ones staying in force. The European Banking Authority (EBA) remote onboarding guidelines apply from 2 October 2023 and accept notified eID at Substantial or High.[15]
We found no published position from Poland's gambling or telecom regulators on eID as of 5 October 2026. The Digital Services Act Article 28 guidelines expect age verification for "access to gambling content" and "the sale of alcohol, tobacco or nicotine-related products".[16] Poland is not among the five countries the Commission names for the EU age-verification app.[17]
At a counter, the ministry says the QR check confirms identity and age, after minors bought alcohol with fake mDowód screens; only the QR check is reliable, since the flag, hologram and clock can be faked.[4]
What the user sees with mObywatel
The documented mObywatel check is the QR check, in person.[4]
Kod QR
Show your mDowód data with a code.
Pokaż kod QR
1The holder taps Kod QR, then Pokaż kod QR.[4]
Show this code
Or read out the 6-digit code.
2The holder shows the code.[4]
Scan the code
mObywatel app or the web verifier.
3The verifier scans with mObywatel or weryfikator.mobywatel.gov.pl.[4]
Approve the request
Check which data the verifier asks for.
Approve
4The holder approves the data scope.[4]
Data confirmed
Shown for a few minutes, then cleared.
5Nothing is stored on the verifier's device.[4]
Online, the notified route is the e-dowód with the eDO App: scan the service's code, type the CAN number, tap the card, enter PIN1.[6]
An e-dowód login with the eDO App, simplified.[6]
Weryfikacja tożsamości by use case: choosing a route
Online today
Document with chip reading
- Works for every customer, Polish or not
- Reads the passport or ID card chip
- Liveness and face match close the loop
AML act Art. 37(1)
At a counter
mDowód QR check
- Free web verifier, no accreditation
- Confirms identity and age
- Never accept a screen alone
mObywatel act Art. 2(8), Art. 83
Not launched
EUDI Wallet on mObywatel
- To build on the mObywatel app
- Sandbox open, no launch date
- Acceptance duty from 24 December 2027
Regulation (EU) 2024/1183
Under Art. 5a(11) of Regulation (EU) 2024/1183, EUDI Wallets are provided under an eID scheme at level High.[13] Poland had not published its wallet scheme as of 5 October 2026.
| Use case | What the rules ask | Route to offer first | Fallback |
|---|---|---|---|
| Fintech and banking | AML act Art. 37(1); KNF positions; AMLR[9][10][12] | Document with chip reading, liveness, face match | Video verification under KNF positions |
| Crypto | AML act Art. 37(1) for obliged entities[9] | Document with chip reading | Another EU eID for non-Polish users |
| Gambling | Age verification expected under DSA Art. 28 guidelines[16] | Document check with date of birth | Another EU eID or a passport check |
| Telecom | Named in eIDAS Art. 5f(2)[13] | QR check in store, document online | EUDI Wallet once offered |
| Marketplaces | Age checks for alcohol and tobacco sales[16] | Document or age estimation by risk | mDowód QR check at delivery |
| Mobility | Mobile driving licence: 6.2 million users[2] | Driving licence document check online | mDowód QR check at pick-up |
People without a Polish eID
The mDowód proves Polish citizenship, so foreign residents cannot hold one.[5] It is open to citizens aged 13 and over who have had an ID card and hold an eID means such as Profil Zaufany or online banking.[3] Pupils have mObywatel Junior, a school ID.[2]
1Ask where the customer's ID comes from
Country of the document.
Holds a notified eID of another EU country
Use that country's eID
Substantial or High, AMLR Art. 22(6).
Verify with a document
Chip reading, liveness, face match.
2Record the route and why
AMLA's draft asks for a justification.
Routing customers who have no Polish eID.[12][14]
Cross-border customers often hold an eID from home: see eID verification in Germany and eID verification in Austria. Children under 12 get e-dowód cards valid for five years.[6]
Launch checklist for Poland
- Train counter staff to scan the mDowód QR code and never accept a screen alone.[4]
- Map your onboarding to Article 37(1) of the AML act and record the source used.[9]
- Read the KNF remote onboarding positions if you are a bank.[10]
- Collect the Article 36 identification data, PESEL included.[9]
- Check whether the ministry's EUDI Wallet sandbox for companies and institutions, now open, fits your plans.[11]
- Plan wallet acceptance before 24 December 2027 if Article 5f(2) covers you.[13]
- Do not plan wallet face matching before 11 August 2028.[18]
How Didit helps with eID verification in Poland
Didit adds mObywatel on request. Profil Zaufany and the e-dowód login are also added on request. What works in Poland today is the document route: ID verification with NFC chip reading ($0.15) of passports and ID cards, liveness and face match, as a full KYC (Know Your Customer) check at $0.33, plus AML screening at $0.20 against 1,300+ sanctions, PEP (politically exposed person) and watchlists. Age estimation costs $0.10 per check.
For customers from Denmark, Sweden, Finland and the Baltics, Didit runs MitID, BankID Sweden, Finnish Trust Network, Smart-ID and Mobile-ID live today in the same workflow. EUDI Wallet acceptance is coming soon. Setup and results are in the national eID docs.[19]
Didit provides
- Document checks with NFC chip reading, liveness and face match
- AML screening and ongoing monitoring
- The evidence of every check
Stays with you
- The AML risk assessment and policies
- The onboarding decision
- In-person mDowód QR checks at your counters
Bring mObywatel to your Polish sign-up
Tell us where your users sign in, and start with the document route today.
Key takeaways
- mObywatel has the reach: over 11 million mDowód at the end of 2025.
- Only Profil Zaufany and the e-dowód are EU-notified, at Substantial and High.
- AML act Article 37(1) accepts eID means; the AMLR applies from 10 July 2027.
- Poland's wallet is to build on mObywatel, with no launch date yet; regulated firms must accept EUDI Wallets by 24 December 2027.
Frequently asked questions
Is mDowód legally the same as a plastic ID card?
Inside Poland and in face-to-face situations, yes. The mObywatel act defines the mObywatel document as proof of identity and Polish citizenship when both parties are physically present.[5] You still need the physical card to travel abroad.[3]
Can a bank or crypto exchange accept mObywatel for AML checks?
Yes, as an in-person document. Since 1 September 2023, AML obliged entities must apply the mObywatel act's rules on using the mObywatel document to identify customers and verify their identity.[5] Use the QR check, not a look at the screen.[4]
Can a private company accept mObywatel in an online sign-up?
Not through a published route as of 5 October 2026. The minister may open app services to private entities on request, but no remote API for companies was found.[5] The EUDI Wallet built on mObywatel is the expected online route.[11]
Is Poland's eID notified under eIDAS?
Yes. The Public Electronic Identification System, with Profil Zaufany and the e-dowód, was notified on 19 April 2023 at levels Substantial and High.[1] mObywatel itself is not named on the EU list.
What is the difference between mDowód and e-dowód?
mDowód is the mobile ID document inside the mObywatel app, shown with a QR code. The e-dowód is the plastic ID card with a chip, used online with the CAN number and a 4-digit PIN1, and for signatures with a 6-digit PIN2.[6]
Can private companies use login.gov.pl?
The node is built for public services, with one integration interface for integrators.[7] We found no published rule that lets a private company connect directly, as of 5 October 2026.
When will Poland have an EUDI Wallet?
Every Member State must offer one by 24 December 2026, and Poland's builds on mObywatel, with a sandbox for companies already open.[13][11] The ministry had not published a launch date as of 5 October 2026.
What does the Polish AML act say about weryfikacja tożsamości?
Article 37(1) says verification confirms the identification data with an ID document, a register extract or other reliable and independent sources, including eID means and eIDAS trust services where available.[9] From 10 July 2027, AMLR Article 22(6) adds the EU rule for eID at Substantial or High.[12]
How do I verify customers who have no Polish eID?
Use a document check with chip reading, liveness and face match, or the customer's notified eID from another EU country. AMLA's draft standards ask firms to justify the alternative route.[14]
Sources
- Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
- 11 milionów mObywateli i rekordowy rok w aplikacji mObywatel, Ministry of Digital Affairs, 28 January 2026.
- mDowód, mObywatel information service.
- Kod QR, skuteczna metoda weryfikacji mDowodu, Ministry of Digital Affairs, 13 February 2025.
- Act of 26 May 2023 on the mObywatel application, Dz.U. 2023 poz. 1234, Sejm.
- e-dowód, gov.pl.
- login.gov.pl, national electronic identification node, gov.pl.
- Answer to interpellation no. 7605, Minister of Digital Affairs, 2025.
- Act of 1 March 2018 on counteracting money laundering and terrorist financing, consolidated text, ISAP.
- Position on customer identification by video verification in banks, Polish Financial Supervision Authority, 5 June 2019.
- mObywatel information service, Ministry of Digital Affairs, project owner and EUDI Wallet sandbox news.
- Regulation (EU) 2024/1624 (AMLR), EUR-Lex, Articles 22(6) and 90.
- Regulation (EU) 2024/1183 (eIDAS 2), EUR-Lex, Articles 5a and 5f.
- Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.
- Guidelines on the use of remote customer onboarding solutions (EBA/GL/2022/15), European Banking Authority.
- Guidelines on the protection of minors under Article 28 DSA (C/2025/5519), EUR-Lex.
- Blueprint for an age verification solution, European Commission.
- Commission Implementing Regulation (EU) 2026/1731, EUR-Lex, portrait in the PID from 11 August 2028.
- eID integrations, Didit documentation.
Compare Poland with every other country on the eID verification page.
One workflow for Polish customers and everyone else
Start with the document route, add the eIDs your customers already use, and keep both in the same flow.
Related articles
- Didit vs Unit21: KYC, KYB, AML and monitoring on one record
- Didit vs Trinsic: eID sign-in plus document checks, AML and KYB
- Didit vs Thomson Reuters: government databases plus the whole flow
- Didit vs Regula: hosted checks with full evidence, KYB and monitoring
- Top 10 AI compliance agents for KYC and AML review automation in 2026
- Top 5 Travel Rule compliance solutions for crypto businesses in 2026