Stop asking customers to photograph their ID. Remote mDL verification is here

ISO 18013-7 gives you a standardized path from document-photo-selfie workflows to cryptographically verifiable identity — online and in app.

ISO 18013-7: Remote mDL Verification for Online Identity | Indicio

Build an mDL strategy that works across remote and in-person flows, without locking into one credential format.

Talk to one of our experts about the benefits of using Indicio’s mDL 18013-7

  • Verify mDLs remotely using ISO 18013-7 + OpenID4VP for web and app flows
  • Support proximity-based mDL presentation with ISO 18013-5 (NFC/BLE/QR)
  • Keep your architecture flexible across mdoc/mDL, SD-JWT-VC, W3C VC, and AnonCreds

How mDL verification works

Key definitions

mDL

A mobile driver’s license (mDL) is a digital version of your driver’s license stored in a digital wallet on a mobile phone. It is issued by a government authority and cryptographically signed so the data cannot be altered without discovery. It can be verified instantly.

mdoc

The international standard (ISO 18013-5) for creating a digital, machine-readable, and tamper-proof version of a physical document, such as driver’s licenses, national IDs, health cards, professional licenses, and age attestations. An mDL is one type of mdoc.

ISO 18013-5

The international standard for in-person (proximity) mDL presentation using NFC, BLE, or QR codes. Covers face-to-face verification scenarios.

ISO 18013-7

The standard that allows an mDL to be verified online and remotely. Uses OpenID4VP to enable web and app-based identity checks without physical proximity.

OpenID4VP

OpenID for Verifiable Presentations is the protocol layer that lets a relying party (website, app) request and receive a verifiable credential presentation from a user’s wallet over the internet.

From issuance to verification

Issuance

Issuing an mDL

A government authority issues an mDL credential to a person’s digital wallet on their mobile phone. The credential and its data attributes are cryptographically signed at issuance.

Verification

Verification Request

When a person needs to prove their identity online (e.g., opening a bank account), the relying party’s app or website sends a verification request to that person’s digital wallet via OpenID4VP.

Selective disclosure

Selective Disclosure

The digital wallet allows the person to present selectively present attributes, such as their age, without revealing name, address, or other personal data. The person consents to share this data. 

Cryptographically verify mdl

Verification

The verification service (e.g., Indicio Proven) validates the credential’s cryptographic signatures to determine the authenticity of the issuer and the integrity of the data, returning a pass/fail result.

ISO 18013-5 got mDL started. ISO 18013-7 makes it useful online

ISO 18013-5 (proximity)

In-person presentation via NFC, BLE, or QR

Common for DMV rollouts and wallet-based credential presentation

Requires physical proximity between holder and verifier

ISO 18013-7 (remote)

Online presentation for remote verification via OpenID4VP

Unlocks web and app identity checks: age verification, onboarding, e-commerce

Works anywhere the user has internet and a wallet

Where remote mDL verification shows ROI first

Age verification

Confirm age without collecting personal data. Selective disclosure enables data minimization that satisfies regulations like GDPR  and consumer expectations. Simple, instant, no fuss solution for proof of age access and purchases.

Financial services onboarding

Replace paper documents and manual verification with document validation, and biometric authentication for identity assurance. Turn identity assurance into a portable cryptographic proof for frictionless customer experiences.

Government portals

Frictionless access to digital services with cryptographic assurance of proven identity. Mitigate deepfakes and synthetic identities; meet people’s data privacy and security needs, streamline operations and reduce costs.

Identity verification shouldn’t feel like 2015

And with deepfake and synthetic identity fraud surging, how can you continue to trust paper documents and selfies?

With Indicio Proven®, you get state-of-the art document validation and biometric authentication, and your customers get an instant, cryptographic way to prove who they are, anywhere they are.

No fuss, no struggling with uploads, no AI fakery. Just portable, frictionless digital trust.

The identity stack is changing; we’ve got you covered.

 

A platform approach, not a one-format bet

Indicio Proven logo
Indicio Proven Global Interoperability

Global Interoperability

Indicio Proven supports mdoc/mDL, SD-JWT VCs, JSON-LD, AnonCreds, OID4VC, DIDComm, EUDI, ICAO DTC, Open Badges 3.0 and more — all working together in a single solution.

Cross-jurisdictional by design: credentials issued in any region can be verified anywhere, making it the only platform ready for the EU’s 2026 digital wallet mandate and global adoption.

Built on open standards so your investment is sustainable and future-proof. Deployable  at any scale — from using a VC for SSO to a DTC for full border control.

Gray background

Strongest Identity Assurance

Virtually any government-issued identity document worldwide can be authenticated and converted into a tamper-proof Verifiable Credential.

Biometric authentication (liveness checks, face mapping) is incorporated directly into credential issuance with the biometric provider of your choice, closing down deepfake, synthetic ID, and document forgery risks.

Authenticated biometrics, documents, and personal data can be verified anywhere without having to store the data. Simplifies infrastructure, delivers on privacy, aids compliance.

Deploy without disruption

Deploy Without Disruption

Proven is a trust layer that you can add to your existing systems without the trauma of rip and replace. Integrate with existing IAM, mobile apps, and cloud environments through simple APIs and a mobile SDK.

Start small: a simple implementation like converting auth access to a Verifiable Credential can take just days. Even complex implementations like national borders take only months.

Organizations start small, learn the tech, see value rapidly, and scale at their own pace. Our team has your back every step of the way: support, certified training, updates

FAQ

Q: What is an mDL?
A mobile driver’s license (mDL) is a government-issued driver’s license stored digitally in a phone wallet. It’s cryptographically signed, so it can be verified instantly without manual document review.
Q: What’s the difference between mDL and mdoc?

An mDL is a specific type of mdoc (a driver’s license). The mdoc specification, established by ISO, is a generic container that can support many different credential types for mobile devices: national IDs, health cards, professional licenses, age attestations, and more.

Q: Do I need ISO 18013-7 if I already support 18013-5?
If you have any remote onboarding, online access, or web/app identity checks, yes. 18013-5 handles in-person presentation only. 18013-7 is the pathway for remote presentation via OpenID4VP—which is where most digital customer journeys happen.
Q: How does this reduce privacy risk?
The mdoc specification supports selective disclosure. For example, an age check can confirm “over 21” without exposing name, address, or ID number. This aligns with privacy regulation (GDPR, state privacy laws) and consumer expectations for data minimization.
Q: Why choose Indicio Proven for your mDL solution?
You don’t just get -5 (proximity) and -7 (remote) verification, you get a market-leading, globally interoperable solution that allows you deploy credentials across sectors and jurisdictions for seamless identity and data authentication. You have access to everything you need to get started today and everything you might need tomorrow to stay ahead of your competition: white-label wallet, SDK. You get continuous support from our expert team because we don’t just sell software, we architect customer success.