Home Affairs shows South Africa’s first working digital ID — enrolment is still not open

Home Affairs minister Leon Schreiber has demonstrated what he called South Africa's first working digital identity credential — issued through the population register, bound to a smartphone chip, and verified with his own biometrics on stage in Johannesburg.

It is a real credential. It is not a public product yet.

Schreiber opened the MyMzansi digital ID app, confirmed his identity with a thumbprint, and showed his own population-register photograph rather than a demo face. Director-general Tommy Makhode joined the verification flow. The minister described himself as the first South African citizen with a working digital ID using his real personal information.

That moves the project out of slide-deck territory. It does not mean ordinary citizens can enrol this week.

What MyMzansi is supposed to become

Digital ID sits inside the MyMzansi digital public infrastructure roadmap. Phase 1 (2025–2027) focuses on digital identity, data exchange and early government payment and service integrations. Phase 2 (2028–2030) is the scale window across more government services.

In the demonstration framing, the app surface includes wallet, share and additional functions — a smartphone wallet holding a verifiable credential, plus a sharing flow so a user can approve or deny requests for selected identity details.

Schreiber's political pitch is "Home Affairs @ home": stop forcing 63 million people through 329 physical offices for every identity task, and push services toward smartphones, bank branches and courier delivery. Digital ID is the smartphone half of that pitch. Bank-branch Smart ID issuance is the physical half.

The three anchor reforms Schreiber has repeated since taking office remain the same: expand Smart ID and passport access through about 1,000 bank branches, digitise visas through Electronic Travel Authorisation, and build a national digital identity system citizens can carry on a phone.

The public timetable is still infrastructure-first

Schreiber did not announce a public enrolment date at the demonstration.

Home Affairs' annual performance plan targets completion of digital-ID hosting infrastructure — public key infrastructure, certificate authority, platform and security controls — inside the South African Revenue Service IT environment by 31 March 2027. Operational issuance of verifiable credentials through a mobile wallet is targeted for the 2027/2028 financial year.

That is the hard schedule published to Parliament. Separate commentary has also pointed to fuller national rollout stretching past 2030. Those statements are not the same thing: hosting and first wallet issuance can start before every government verifier and every citizen cohort is ready.

The department is still processing public comments on draft digital ID regulations published in May. Identity specialists have criticised parts of the draft, including reliance on 2D selfies for liveness checks. Final regulations are supposed to set hard limits on what identity data may be used for.

Until those regulations are final, banks, insurers, mobile operators and government departments that want to rely on digital ID attributes do not have a finished legal playbook for verification requests.

Voluntary digital ID beside the Smart ID card

Schreiber said use of digital ID will be voluntary. The physical Smart ID card will remain available. Digital ID users should be able to see every time their data is accessed — his framing is that the citizen watches the state, not the other way around.

That privacy claim will only be as strong as the audit trail, the verifier permissions model, and the enforcement written into the final regulations. Until those rules are gazetted and tested at scale, the demonstration proves issuance and device binding more than it proves national privacy practice.

Schreiber also sketched a longer product vision: Home Affairs contacting a citizen months before a passport expires, with a renewal packet ready for biometric confirmation and courier delivery. That is agentic government service design, not the prototype shown on Thursday. Separating the live credential from the future workflow matters, because South African public-sector IT projects have a long history of demoing capability years before operational reliability.

The green book deadline is the parallel pressure

The same mid-term address locked in the green ID book phase-out. Production stops on 31 March 2027. On 31 March 2028, the green book ceases to be recognised as valid identification under the Identification Act.

About 14.7 million citizens and permanent residents still hold only a green book, down from 16 million after bank-branch Smart ID replacements accelerated. First-time applicants and people over 60 remain fee-exempt for Smart ID applications under the announced policy. Naturalised citizens, permanent residents and citizens abroad are also being brought into Smart ID eligibility before production of the green book ends.

Bank branches are the bridge. Schreiber said 515 branches already offer walk-in Smart ID replacements without an appointment, with more than 822,000 people already using the service. Passport applications and first-time Smart ID applications are due at those branches shortly, with courier delivery options expanding. The target is more than 1,000 service points by the end of 2026.

That physical Smart ID expansion matters for digital ID because the digital credential is being sold as a complement to a secure card, not a rescue plan for people still stuck on paper books. A smartphone ID cannot paper over a population still carrying fraud-prone green books into banks and employers.

SARS hosting and the trust question

Anchoring the digital ID stack inside SARS's hosting environment is a deliberate capacity bet. Home Affairs has leaned on the SARS partnership since the broader digital-transformation pact with SARS, the Border Management Authority and Government Printing Works. Schreiber has repeatedly described Home Affairs and SARS as institutional twins for this build.

For citizens, the trust question is simpler than the architecture diagram: who can request which attributes, how consent is recorded, what happens when a phone is stolen, and how a person recovers a credential without queuing at the same broken office the reform was meant to escape.

Account recovery, lost-device rebinding, offline verification and support for people without biometric-capable phones are still the hard product problems. A working minister demo does not answer them.

What remains unresolved

South Africa now has a live prototype credential on a minister's phone. It does not yet have a public enrolment path, a finished regulation pack, proven account-recovery rules, or a published list of which private and public verifiers will be allowed to request attributes in year one.

People without compatible smartphones still need a working physical path. People with green books still need Smart ID capacity before 2028. Banks still have to absorb more Home Affairs volume without recreating the old queue inside a branch foyer.

The Wire Room read is narrow: the demo is real, the hosting deadline is 31 March 2027, wallet issuance is aimed at 2027/28, and nothing in Thursday's stage show replaces the remaining work of regulation, recovery, verifier controls and national scale.