Debate over the European Digital Identity Wallet has long centred on who participates and what roles they play. The harder question emerges once the underlying trust systems are operational: where does revenue actually flow, and who captures value from the ecosystem?
A webinar hosted by Dock Labs, Building a Business Model Around EUDI Credentials, brought together Richard Esplin and Agne Caunt to examine this terrain. Their discussion reveals which commercial approaches have genuine traction and which face structural headwinds. The analysis suggests that the strongest near-term opportunities lie in cutting verification costs, embedding credentials into services already in use, and supplying the technology to accept them. Models requiring new payment flows or extensive usage tracking need stronger evidence of demand.
The regulatory foundation shapes what business models are possible
Three regulatory decisions lock in before any commercial framework takes shape. First, basic identity is free. The wallet arrives pre-loaded with state-issued identity data, and member states must provide issuance, use and revocation at no cost to individuals. Private actors cannot monetise core identity itself. Their commercial opening lies instead in attributes the state does not supply: professional qualifications, income verification, membership status and occupational authorization.
Second, certain acceptance is mandatory but on its own schedule. Specific private relying parties must accept EUDI wallets—those offering services requiring strong authentication and very large online platforms meeting specified thresholds. This obligation follows a separate timeline from the end-of-2026 wallet availability target. Article 5f gives covered private relying parties 36 months from the relevant implementing acts to comply, exempts micro and small enterprises, and requires acceptance only when users request it. Mandatory acceptance creates an implementation requirement; it does not guarantee that users will actually adopt the wallet or that verifiers will achieve cost savings.
Third, usage tracking faces strict limits. Selective disclosure allows users to prove a single attribute—such as being above a certain age—without exposing the full document. The regulation also constrains how wallet providers can gather and combine usage data. Business models that depend on tracking identifiable individuals across multiple services or linking their credential presentations over time therefore encounter significant regulatory friction. Models that require no new payment mechanism and no usage data are structurally easier to build.
Verifiers have the clearest near-term opportunity
Verifiers stand to gain first because their return does not depend on anyone else paying them. Many businesses today incur repeated costs for document verification, biometric matching or database lookups each time they onboard a customer.
A financial institution, for instance, might accept an income credential instead of requesting and manually reviewing supporting documents. The return is indirect but real: lower verification costs, reduced manual effort, faster customer onboarding, higher completion rates and reduced fraud risk. The critical condition is that the credential must actually replace an existing process. A verifier that retains every current check and simply adds credential acceptance on top has only increased costs without realising savings.
Direct revenue models are less certain. A stadium might charge a modest fee for expedited entry using a credential, or a retailer might offer a monthly subscription for express checkout verified by a credential proving eligibility. In these cases the customer pays for time saved, and the credential is merely one mechanism to deliver it. Referral arrangements occupy middle ground: a hotel could verify a guest's loyalty credential and direct that guest to partner restaurants or spas in exchange for a commission. This works only if those partners genuinely value the customers they receive.
Issuers: monetisation depends on existing money flows
Issuers generate value by converting information they have already collected into evidence that others can trust. Whether they can charge for it turns on who benefits from that conversion.
The most viable models attach credentials to money already moving through the organisation. A university can bundle a digital diploma into an existing administrative fee. An employer can fund employee credentials from savings in administrative overhead. A hotel chain can treat loyalty credentials as a customer acquisition expense. Governments can fund credentials they are already mandated to issue, such as digital driving licences. Charging the individual directly works only in narrow cases—a professional paying for a qualification credential that employers require, for example.
The verifier-pays-issuer model raises harder questions. Why would a verifier compensate an issuer for a credential the user already holds and presents? A lender might pay an income-credential issuer each time an applicant submits that credential. But this arrangement faces two obstacles. The user already possesses the credential, so the verifier must have a reason to pay for it. And billing per use must happen without revealing which user presented which credential.
Credential type also affects cost structure. Electronic Attestations of Attributes (EAAs) cover data such as membership or qualifications. Qualified attestations (QEAAs) come from qualified trust service providers and carry specific legal weight. Qualification justifies its cost only where a relying party needs that assurance—in regulated transactions, for instance. For a loyalty program, qualified issuance requires additional business justification. Issuers should confirm which credentials verifiers will actually accept before investing in their creation. A credential nobody accepts has no commercial value.
Ecosystem providers: high value, but only with critical mass on both sides
Ecosystem providers build shared credential formats, maintain lists of trusted issuers, set participation rules and establish commercial terms. Their value comes from reducing the need for separate negotiations and integrations between each pair of participants. Certification bodies, technology integrators and referral networks also contribute to these ecosystems.
The real value proposition is not the wallet itself but the cost savings from connecting issuers, verifiers and credential types without individual bilateral arrangements. Revenue models include governance fees, certification charges, membership dues, revenue-sharing arrangements and marketplace commissions. Card schemes like Visa and Mastercard, SWIFT's KYC Registry and app stores offer analogies.
The card-scheme analogy reveals both the prize and the trap. Card networks earn fees because merchants and cardholders already exist in massive numbers. A new credential network cannot assume either side is already present: issuers need incentive to join, and verifiers need useful credentials to accept. Sector-specific networks with committed participants have a stronger early case. Open marketplaces face steeper coordination and adoption costs.
Wallet providers operate under the tightest constraints
Wallet providers have the least flexibility to generate revenue. Notified EUDI wallets must be free for individuals to obtain, use and revoke, and providers cannot observe transactions. Charging natural persons simply for obtaining, using or revoking the notified wallet is not a viable business model.
Consider a pathology laboratory wallet that patients use to share test results with hospitals and healthcare providers, eliminating repeated forms and manual data entry when receiving systems import the results. Or a bank wallet combining customer credentials and payment cards. Value depends on acceptance and workflow integration. Neither scenario establishes demand for a separate consumer subscription. The speakers examined user subscriptions, premium features, issuer fees, verifier fees and business-wallet functionality. Business offerings have the clearest case because organisations already pay for integration, management and support. The free-service requirement for natural persons does not apply identically to business customers, though relevant regulatory obligations remain.
Wallet providers also have no automatic claim on revenue they enable. If a stadium charges for fast-lane entry, that fee belongs to the stadium unless a separate agreement shares it with the wallet provider.
What existing digital identity systems reveal
U.S. mobile driver's licences offer a cautious lesson. California provides a free wallet and supports major phone wallets, while AAMVA offers free access to its issuer certificate list. These arrangements demonstrate value for verifiers and downstream services without establishing per-presentation payments to issuers. Issuance alone does not create utility: acceptance varies by wallet and service. EUDI's acceptance obligations provide an edge, but working integrations determine actual benefit. Online credentials have a clear process to replace—document-and-selfie collection—while in-person savings depend on transaction volume, staff time and assurance requirements. Free wallets and basic readers also raise the bar for paid offerings. The stronger opportunity lies in helping businesses use credentials through integration, management and specialised workflows rather than charging consumers simply to hold them.
Nordic BankID systems offer a different model. Banks issue the identity and relying parties pay per transaction. These are the clearest proof that verifier-pays-issuer can work, and they succeeded only after issuers covered nearly the entire population. Australia's ConnectID follows the same design.
What to watch as wallets launch
Three signals will indicate whether commercial models are taking hold: verifiers retiring existing verification processes, businesses paying for acceptance infrastructure or valuable attributes, and sector networks securing fees that participants accept.
Organisations must also decide between open and closed ecosystems. University qualifications accepted across industries gain broader reuse. Staff credentials restricted to an employer's internal systems offer tighter control and a clearer path to internal cost reduction. Open networks expand reach but demand broader interoperability and commercial coordination. The practical starting point is a single existing customer journey: what information it requires, which issuers and credential types meet those needs, and what work disappears when that evidence arrives through a wallet. That foundation is firmer than introducing a fee simply because credentials can be exchanged.
