Apple Wallet ID Verification Changes in iOS 15

With the release of iOS 15, Apple introduced support for digital driver’s licenses and state IDs in Apple Wallet, establishing a multi-step identity verification process designed to prevent fraud. This article examines the specific verification steps introduced in the update, highlighting the requirement for physical card scanning, interactive facial movement prompts, and direct authentication with issuing state authorities.

Physical Card Scanning

To initiate the setup, iOS 15 requires users to use their iPhone camera to capture clear images of both the front and the back of their physical driver's license or state ID card. The system analyzes the card for security features, legibility, and barcode data to ensure the physical document is present.

Selfie and Dynamic Liveness Detection

To prevent identity spoofing using static photographs, Apple introduced an active selfie verification step. Rather than taking a simple still photo, users are guided through a series of dynamic facial and head movements. The system prompts the user to perform specific, randomly ordered gestures, such as:

  • Turning their head to the left or right
  • Looking up or down
  • Closing their eyes
  • Raising their eyebrows

This liveness detection ensures that a real, living person is completing the setup in real time.

State-Level Identity Matching

Once the photos and movement data are captured, the iPhone packages the information and securely transmits it to the issuing state agency (such as the local DMV). The state government independently validates the submitted images and biometric data against its official records. Apple does not approve or deny the ID; the issuing authority retains sole responsibility for verifying and authorizing the digital credentials.

Secure Enclave and Face ID Binding

Once approved by the state, the digital ID is cryptographically bound to the user’s specific device using the Secure Enclave. To ensure that only the authorized owner can present the ID, presenting it at identity readers requires biometric authentication via Face ID or Touch ID, preventing unauthorized access even if the device is unlocked.