Every Friday and Saturday night, bar staff across the country play the same quiet guessing game, squinting at an ID you frankly don't have the time or detective-skills to examine. Fake IDs have gotten harder to spot since printing technology has improved, and a refusal can just as easily end in a shrug as a scene nobody on a busy shift has time for.
From 15 September 2026, that judgement call has a new option alongside it. Under the Licensing Act 2003 (Mandatory Licensing Conditions) (Amendment) Order 2026, licensed premises in England and Wales can now legally accept certified digital ID as a standalone proof of age for alcohol sales - this doesn't replace the existing passport, driving licence or PASS card, which can all still be used. It's a useful change, but the detail matters more than the headline, and there's a real gap between what the law now permits and what's practical behind the bar this month.
What has actually changed?
The change is permissive, not compulsory. No pub, bar or restaurant is required to accept digital ID, and physical documents remain entirely valid. Challenge 25 policies don't need rewriting, only extending. What the new Order does is give legal standing to age verification carried out through a Digital Verification Service (DVS) certified under the UK's DVS Trust Framework, with providers including Yoti, Luciditi, Post Office EasyID and TOTUM now on the government's statutory register.
There's clear appetite for it. A 2024 government consultation found 72% of respondents in favour of digital ID for alcohol age checks, and YouGov research puts the proportion of UK adults keen to prove their age via phone at 57%. Yoti alone reports around 8 million UK users already holding its free ID app, with more than 15,000 businesses having downloaded its companion checker tool ahead of launch - so on the customer side, the appetite is already largely there.
Digital Government Minister Stephanie Peacock called it "a ground-breaking change in the law" that means customers "do not need to carry a physical ID, nor hand over sensitive personal information" on a night out. UKHospitality chief executive Allen Simpson welcomed it in similar terms:
a positive step for hospitality, providing greater flexibility and convenience for customers and businesses.
How the checks actually work behind the bar
This is the part worth getting right, because it's not simply a case of glancing at a photo on someone's lock screen. A screenshot, a saved photo of a driving licence, or a customer scrolling to an ID-style app on their phone doesn't count as a valid digital ID check under the new rules - only a verification carried out through a registered DVS provider does.
In practice, the process looks like this: the customer opens their certified app, confirms it's genuinely theirs with a quick selfie, and presents an age credential. It simply confirms they are over 18, without necessarily disclosing their date of birth, address or full name. Staff verify that credential is valid and properly registered, typically via a QR code scan or a companion checker app, in roughly the time it takes to glance at a driving licence.
Getting that distinction into staff training matters, because the due diligence defence operators can rely on if underage sales still happen (despite fines, temporary closure and licence review remaining very much on the table for getting it wrong) depends on being able to show genuine, reasonable verification procedures were followed. No waving through anyone who holds up a phone - a proper DVS check is required.
Should you adopt it now?
Given it's optional, the honest answer for a lot of operators is "not necessarily this month", and that's fine. Even providers building the infrastructure acknowledge it will take time for widespread adoption. Point-of-sale integration, staff retraining and choosing a provider all take planning - and a rushed rollout that confuses bar staff at 11pm on a Saturday helps nobody.
What's worth doing now is deciding where digital ID fits your venue. A high-volume, younger-skewing bar in a city centre with long queues at peak times has an obvious efficiency and fraud-reduction case for adopting early. A quieter community local with an established regular base and a settled Challenge 25 routine may reasonably decide physical ID checks continue to do the job perfectly well for now, and revisit the question in six or twelve months once the technology and provider landscape has settled.
Practical takeaways for operators
- Update written age-verification policies to name digital ID as an accepted method, if you choose to adopt it, but don't remove physical ID as an option.
- Brief every member of staff, however experienced, that a photo or screenshot on a phone is not a valid digital ID check; only a registered DVS verification counts.
- If adopting, pick one DVS provider (Yoti, Luciditi, Post Office EasyID and TOTUM are all currently certified) and get your point-of-sale or checker app set up and tested before going live, not during a Friday rush.
- Keep records of your training and verification procedures - they're what a due diligence defence rests on if a mistake happens.
- The rules apply in England and Wales only for now; Scotland and Northern Ireland operators should watch for separate developments rather than assume parity.