Topic starter
06/06/2026 11:25 am
TL;DR: European banks are being pushed by eIDAS 2.0, AMLR, and draft PSR/PSD3 toward EUDI Wallet support for customer onboarding and strong authentication, with 24 December 2027 emerging as the key operational deadline, according to OneSpan. The real issue is not wallet availability but how banks govern assurance, liability, and third-party dependence when authentication becomes wallet-mediated.
Editorial analysis by NHI Mgmt Group, based on content published by OneSpan: “Why European banks must act now on EUDI Wallets: Regulatory drivers, deadlines, and current ambiguities”.
Key questions
Q: What breaks when banks add EUDI Wallets without revising authentication governance?
A: Banks can end up with a control model that assumes they own the entire authentication chain when they do not.
Q: Why do EUDI Wallets create liability questions for banks?
A: Because the bank may be responsible for accepting the authentication result while another party contributes the wallet assurance.
Q: How should security teams govern wallet-based strong customer authentication?
A: Treat wallet-based authentication as a governed trust relationship, not a user convenience layer.
Practitioner guidance
- Map the wallet trust boundary Document where the bank makes the authentication decision, where the wallet issuer contributes assurance, and where a third party is merely relied upon.
- Align onboarding and authentication governance Unify KYC, strong customer authentication, and fraud-risk governance so the same programme owns evidence, assurance levels, and customer journey design across wallet and non-wallet paths.
- Review outsourcing assumptions Test whether wallet support truly creates an outsourcing relationship under your interpretation of the PSR draft, or whether the bank retains the authentication decision and only consumes externally issued assurance.
Bottom line: EUDI Wallets are changing European banking authentication by shifting part of the trust model outside the bank’s direct control.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
06/06/2026 12:13 pm
Wallet-mediated authentication creates an assurance dependency problem, not just an integration problem. Once authentication evidence moves into an externally governed wallet, the bank no longer controls the full lifecycle of the credential it must trust. That shifts the real governance question from how to connect to wallets to how to evidence assurance when the proving event is outside the bank. Practitioners should treat this as a trust-boundary redesign, not a user-experience upgrade.
A question worth separating out:
Q: What should banks prioritise first for EUDI Wallet readiness?
A: Banks should first map regulatory obligations to actual authentication flows, then identify where onboarding, strong customer authentication, and outsourcing assumptions overlap. That sequence exposes the legal and operational gaps that matter before implementation work begins.
👉 Read our full editorial: EUDI Wallet regulation is reshaping European bank authentication