Know Your Customer Documents: The Practical 2026 Playbook

KYC documents in 2026 look different than they did in 2020. Selfie liveness checks are standard. eIDAS 2.0 changed the landscape in Europe. Digital ID wallets are real. Emerging market documents are formalizing faster than most playbooks update.

This guide is the practical 2026 playbook on which documents to accept, which to verify how, and what is actually moving in compliance circles. The goal is to keep your KYC current without overengineering.

What "Know Your Customer Documents" Means in 2026

KYC documents are the identity and proof-of-address documents you collect during customer onboarding to verify who they are. In 2020 the standard set was passport, driver's license, national ID, plus a utility bill or bank statement.

In 2026 the set expanded. Digital ID wallets count in many jurisdictions. Mobile-driver's-licenses (mDL) are accepted at federal level in the US. Selfie liveness checks are required, not optional. The 2020 playbook still works but leaves accuracy and customer experience on the table.

If you are setting up KYC for the first time, start with our KYC document verification piece for the audit perspective. This article covers which documents to accept and how to handle the new categories.

The Documents That Should Always Be Accepted

Tier 1: Photo ID

• Passport. Universally accepted. MRZ extraction is straightforward.
• National ID card. Format varies by country. Layout-aware OCR essential.
• Driver's license. US-specific by state but well-documented; many countries have national versions.
• Mobile driver's license (mDL). Standardized by ISO 18013-5. Accepted federally in the US. Verification via NFC or QR code.

Tier 2: Proof of Address

• Utility bills (gas, electric, water). Usually dated within 3 months.
• Bank statements. Same recency rule.
• Government correspondence (tax letter, voter registration).
• Mortgage or lease agreement (acceptable but high-friction).

Tier 3: Supporting Documentation

• Source of funds attestation.
• Beneficial ownership form (FinCEN CDD rule).
• Employment letter or pay stub (for high-value relationships).

What Is New in 2026

Digital ID Wallets

Apple Wallet, Google Wallet, and EUDI Wallet support storing government-issued IDs. The verification flow is different from a photo of a physical document — the wallet shares cryptographically signed claims that you can verify against the issuing authority.

For implementers: support OpenID for Verifiable Credentials (OID4VC) and ISO 18013-7 (remote presentment). The protocols are stable; the user experience is still settling.

eIDAS 2.0 in Europe

EU regulation that mandates member states issue digital identity wallets to citizens. As of 2025-2026, the EUDI Wallet is rolling out across member states. Financial institutions operating in Europe must accept EUDI Wallet credentials for KYC. Plan for it.

Selfie Liveness Becomes Standard

Static selfies are dead for KYC. Customers must show liveness — usually a short video, a 3D depth scan via phone TrueDepth camera, or a series of prompted actions (turn head, blink). Without liveness, photo-of-a-photo attacks are trivial.

Mobile Driver's Licenses

The US-specific evolution. About 15 states issued mDLs as of 2025. Federal acceptance (TSA, etc.) has been live since 2023. For KYC, treat mDL as equivalent to physical DL but use the ISO 18013-5 verification flow.

Emerging Market Documents

Aadhaar (India), Singpass (Singapore), MyKad (Malaysia), and similar national digital ID systems are increasingly accepted by international institutions. Each has its own verification API. For onboarding customers from these markets, integrate the local system directly rather than relying on document photos.

The Five Verification Steps for Every KYC Document

Regardless of document type, run these five steps:

1. Capture quality check. Is the image clear, well-lit, fully visible, not glare-blocked?
2. Type identification. What document is this? Route to the right extraction and verification rules.
3. Extraction. Pull the relevant fields (name, DOB, document number, expiry, MRZ if applicable).
4. Authentication. Verify the document is genuine. Security feature check, MRZ checksum, signature panel inspection.
5. Cross-check. Compare extracted data against application data and any other documents on file.

Skip any step and your audit trail is incomplete. Auditors check all five. (Our KYC document verification piece covers the audit perspective.)

The Patterns That Trip Up Most Teams

1. Accepting Photos of Photos

Without liveness, a customer can photograph an existing photo of an ID and pass extraction. Liveness is the cheap fix and should be mandatory in 2026.

2. Treating All Driver's Licenses the Same

US driver's licenses vary by state. International driving permits are different again. Each has different fields, different security features, different layouts. Layout-aware OCR plus state-specific rules handles this; generic OCR doesn't.

3. Skipping Expiry Checks

Document was valid at onboarding. Expired three years ago. Customer is still active. Auditor flags. Always extract and monitor expiry dates.

4. Inconsistent Naming Across Documents

Passport says "Robert James Smith". Utility bill says "R. J. Smith". Application says "Bob Smith". All same person, but no documented reconciliation. Each variation must be cross-checked and documented.

5. Failing to Handle Digital ID Wallets

Customer presents an EUDI Wallet credential. Your system expects a passport photo. Customer falls back to physical document upload. Friction kills onboarding. Support the digital path.

The OCR Step Inside KYC Document Handling

KYC OCR has specific requirements:

• MRZ extraction with checksum validation for passports.
• Layout-aware extraction for state-variable driver's licenses.
• Liveness flow for selfie checks.
• Cryptographic verification for digital ID wallet credentials.
• High accuracy on small text (date of birth, document numbers).

Specialized vendors (Jumio, Onfido, DocsAPI) handle these correctly. Generic OCR will work for typed text but miss the specialized verification.

The Way I Explain Modern KYC to Non-Tech People

Imagine you run an airport. Passengers need to prove who they are. In 2010, they showed paper passports and you visually checked. In 2020, you scanned passports and your computer extracted the MRZ. In 2026, you accept paper passports, mobile driver's licenses, digital ID wallets, and you require a quick face-scan that matches the ID.

The airport works because you accept all the modern documents and verify them with modern checks. If you only accepted paper passports in 2026, you would miss most travelers. KYC is the same.

What I'd Do Today

If you are building KYC from scratch in 2026: support digital ID wallets and mobile driver's licenses from day one. Build them as first-class flows, not afterthoughts. The customer experience advantage matters.

If you have a working KYC built on 2020 patterns: add selfie liveness if you don't already have it. That single addition closes the biggest fraud vector. Digital ID wallet support can wait until your market demands it.

If you operate in Europe: budget engineering time for EUDI Wallet integration. The regulation is real, the implementations are stabilizing, and the deadline is now. (I write about regulatory document trends regularly.)

Frequently Asked Questions

What documents are accepted for KYC in 2026?

Photo ID (passport, national ID, driver's license, mDL, digital ID wallet credential) plus proof of address (utility bill, bank statement, government letter) plus a selfie with liveness check. Specific acceptable documents vary by country and regulator.

What is a mobile driver's license (mDL)?

A digital version of a state-issued driver's license, stored on a phone and verified cryptographically. Standardized by ISO 18013-5. Accepted federally in the US since 2023 and by financial institutions for KYC in 2026.

Do I need to support digital ID wallets?

In Europe, yes — EUDI Wallet is mandated under eIDAS 2.0. In the US, support is voluntary but customer experience matters. Most large institutions will support digital ID by 2027.

What is selfie liveness?

A check that confirms the selfie is from a real, present person — not a photo of a photo or a recorded video. Done via 3D depth scan, prompted actions, or short video. Standard for KYC in 2026.

How does KYC differ across countries?

Acceptable documents, retention periods, and re-verification triggers vary. Required source-of-funds documentation varies. Always research the specific KYC rules for each market you operate in. Don't assume one playbook works everywhere.

What is the most common KYC document fraud in 2026?

Synthetic identity — real-looking documents created from real data scraped from public sources. The documents pass extraction and authenticity checks. Detection requires cross-referencing against fraud databases and analyzing velocity patterns, not just document checks alone.