“Please Send a Scan of Your Passport.” Why One of Armenia’s Most Familiar Requests May Soon Become Obsolete

Armenia is entering a new phase of digital identity. But behind biometric passports, identity applications and electronic signatures lies a much bigger question: why do we still ask people to reveal almost everything about themselves just to verify one simple fact?

There is a sentence almost everyone in Armenia has heard while signing a contract, opening an account or registering for a service.

“Please send a scan of your passport.”

Sometimes both sides are required. Sometimes a selfie holding the passport. Occasionally, the person must also print a form, sign it, take a photograph and send everything back.

Nobody finds this particularly unusual anymore.

That is simply how things are done.

The document arrives by email, is downloaded to a computer, forwarded to an accountant or account manager, and perhaps shared with another department. Months later, a copy may still be sitting in someone's inbox. Years later, it might remain in a messaging app.

The company obtains the confirmation it needed.

But it also receives far more personal information than the transaction may actually require.

And the individual has little idea where that information will end up.

In October 2026, Armenia took another step toward a different model of digital identification. At first glance, it looked like another technology announcement.

In reality, it raises a question that goes far beyond convenience.

What if the future of digital trust is not about sending documents faster, but about no longer needing to send them at all?

October 2026: Armenia Begins Rethinking Digital Identity

In early October, imID introduced a new generation of its digital identity application during TrustConf 2026.

On October 9, Armenia's Minister of High-Tech Industry and Artificial Intelligence, Davit Tadevosyan, visited the company's headquarters and activated his digital identity using the new application.

According to the Ministry's official announcement, the discussions focused on digital trust infrastructure, interoperability between public and private systems, and alignment with international standards.

At the same time, a separate development is taking place.

Armenia is preparing to introduce a new system for issuing biometric passports and identification cards starting November 1, 2026.

The Ministry of Internal Affairs has announced that services will initially be available at 14 locations, with the network expected to expand to 23 during the first quarter of 2027.

The initiative also involves improvements to document security and the modernization of the state population register and related systems.

These developments should not be confused.

The imID application and the government's biometric document issuance system are separate initiatives within a broader digital transformation.

Armenia also already has electronic identification and signature mechanisms, including Mobile ID and ID-card-based solutions.

Nor does the introduction of new technology mean that physical passports will immediately disappear or that every institution will automatically accept every digital identification method.

The transition will take time.

Nevertheless, the direction is becoming clearer.

Armenia is moving toward a model in which individuals can increasingly establish their identity and perform legally significant actions digitally, without repeatedly reproducing paper-based procedures.

And that change could have consequences far beyond government services.

It could reshape how businesses establish trust.

The Passport Was Designed for a Different Kind of Interaction

A physical passport makes sense in a face-to-face environment.

A person presents the document. Someone examines the photograph, checks its security features and compares the information with the individual standing in front of them.

But the internet works differently.

A photograph of a passport does not necessarily prove that the person sending it is its legitimate owner.

The image may have been copied, altered, stolen or obtained without permission.

More importantly, a complete passport image often contains information unrelated to the question an organization is trying to answer.

Suppose an online service needs to confirm that a customer is at least 18 years old.

Does it really need the customer's full date of birth, document number, photograph and other identifying information?

Or suppose a company needs to verify that a particular individual is signing an agreement.

Is collecting a passport image always the most appropriate method when secure digital authentication and electronic signatures may be available?

Of course, certain sectors are legally required to collect, verify and retain specific identification documents and personal data. Financial institutions, for example, operate under customer identification and anti-money-laundering obligations.

Digital verification does not eliminate those responsibilities.

But where extensive data collection is not legally or operationally necessary, the habit of requesting everything creates a risk of its own.

Every unnecessary piece of personal information a company collects becomes another piece of information it must protect.

This is where digital identity becomes more than a technology upgrade.

It becomes a question of how responsibly an organization manages information.

The Real Breakthrough Is Not Putting a Passport on a Smartphone

There is a difference between digitizing a document and changing how trust works.

Traditional digitization is straightforward.

Yesterday, a customer brought a paper document.

Today, the customer uploads a photograph of it.

The format changes. The underlying process does not.

A more fundamental transformation happens when a service receives verified confirmation of a particular fact instead of a complete copy of the document containing that fact.

This is one of the principles behind the European Digital Identity Wallet.

The European Union is developing systems that allow individuals to share only the information necessary for a specific interaction.

The concept is known as selective disclosure.

Consider age verification.

Instead of sharing an exact date of birth, an individual could provide a verifiable confirmation that they exceed a required age threshold.

The European Commission has developed an age-verification approach designed to prove that a person is over 18 without revealing their identity or other unnecessary personal details.

The distinction is subtle, but its implications are enormous.

The service receives an answer to the question it actually asked.

It does not receive a collection of unrelated personal information.

A similar approach could apply to professional qualifications, educational credentials or other verified attributes.

An employer may need confirmation that a candidate holds a particular qualification, rather than an assortment of scanned documents whose authenticity must be assessed manually.

These examples do not mean that all such features are already available in Armenia.

Nor does compliance with certain international standards automatically establish cross-border legal recognition of Armenian digital credentials.

But they illustrate the broader direction of digital trust infrastructure.

The next generation of digital services will not necessarily be the one that knows the most about its users. It may be the one that can verify what matters while collecting the least.

Why Armenian Businesses Should Pay Attention Now

For an ordinary consumer, digital identity often means convenience.

Fewer appointments.

Less paperwork.

Less time spent visiting offices.

For businesses, however, the implications are more substantial.

Consider a typical Armenian company beginning a relationship with a new corporate customer.

Someone must identify the representative, establish their authority to act on behalf of the organization, prepare an agreement, verify the signatory and complete the transaction.

Where the necessary systems are disconnected, the process becomes an exchange of emails, PDF files, passport scans, certificates and repeated requests for information.

Employees spend time checking names, matching records, confirming signatures and resolving inconsistencies.

Some of this work is essential.

Some exists because different systems and organizations cannot communicate reliably.

In a more mature digital infrastructure, many of these processes could become more streamlined.

An individual could complete a reliable identity verification process, authenticate an action and produce verifiable evidence that the relevant requirement has been satisfied.

But one critical distinction must not be overlooked.

Knowing who someone is, knowing what authority they hold and knowing whether they can sign a particular agreement are three different things.

A managing director may successfully verify their identity.

That alone does not prove that they are authorized to execute every possible transaction.

An employee may log into a corporate platform.

That does not necessarily give them the authority to create financial obligations on behalf of the organization.

Even a valid electronic signature does not remove the need to establish whether the signatory has the relevant legal authority.

This is why serious digital transformation requires more than an attractive identity application.

It requires interoperability between identity providers, relevant registries, authorization systems, electronic signatures and enterprise document-management platforms.

For businesses, this creates a practical new priority:

Digital identity and trust must be managed throughout the entire customer, employee and partner lifecycle.

Not just at the moment someone first registers.

Convenience Becomes Dangerous When Trust Is Poorly Designed

There is a less comfortable side to this transformation.

The more services depend on digital identity, the more serious the consequences of identity compromise become.

What happens if a phone is stolen?

What if a criminal tricks someone into approving a transaction?

What if the identification system makes a mistake?

What happens when a person loses access to their device?

And who is responsible when a digitally authorized action turns out to be fraudulent?

Biometrics, cryptography and sophisticated interfaces do not eliminate these questions.

The US National Institute of Standards and Technology addresses digital identity through several distinct areas in its updated SP 800-63-4 Digital Identity Guidelines, published in 2025.

These include identity proofing, authentication and federation.

In practical terms, verifying an individual's identity is not the same as authenticating that person during a later transaction, and neither automatically establishes what actions they are authorized to perform.

Security therefore needs to extend well beyond the initial registration process.

It requires protection against fraud, secure credential management, reliable account recovery, appropriate access controls and procedures for handling errors.

There is also an inclusion problem.

A digital system cannot be considered universally successful if it only works well for people with modern smartphones and strong digital skills.

Older citizens, people with disabilities, residents of remote communities and individuals without access to suitable devices must still be able to obtain essential services.

Otherwise, a technology designed to remove barriers may simply create new ones.

Biometric data introduces another challenge.

A password can be changed.

A lost phone can be replaced.

A compromised certificate can be revoked.

But a person's face and fingerprints cannot be replaced in the same way.

This makes the collection, storage, access and use of biometric information particularly sensitive.

Armenia's Ministry of Internal Affairs has emphasized that biometric data management will remain under state control, while the private partner's role will be limited to service provision within the established framework.

The important test will be how those commitments translate into operational controls, oversight and public accountability.

Trust cannot be created by technology alone.

It must also be earned through transparent governance.

Five Questions Every Armenian Company Should Ask

Businesses do not need to wait for every digital identification initiative to be completed before improving their own processes.

A useful starting point is to examine how personal information is currently collected and handled.

1. What personal information do we actually need?

Identify the data requested from customers, employees and business partners. For each item, determine the legal or operational reason for collecting it.

2. Which documents are legally required, and which are requested out of habit?

There may be perfectly valid reasons to retain certain records. But long-established internal practices should not be mistaken for legal obligations.

3. Where do copies of identity documents go?

Determine who can access them, where they are stored, how long they are retained, how they are protected and when they are deleted.

An attachment sitting in an old email account is still personal information that may need protection.

4. Which digital identification and signature mechanisms can our systems already support?

Examine the capabilities of existing platforms, service providers and counterparties before assuming that major infrastructure investments are necessary.

5. What happens when digital verification is unavailable?

Every critical process needs a secure and accessible alternative for technical failures, lost devices and customers who cannot use the preferred method.

These questions do not require an expensive transformation program.

But answering them may reveal that the main obstacle is not outdated technology.

It is an outdated procedure nobody has questioned for years.

That is why digital identity is not exclusively a government project or a technology vendor's responsibility.

It is increasingly relevant to banks, insurers, employers, online retailers, service providers and small businesses.

Armenia Faces a Bigger Decision Than Which Application to Launch

Technology initiatives tend to be measured through adoption.

How many people installed the application?

How many received a new identification document?

How many transactions were signed electronically?

These are useful metrics.

But they do not tell the whole story.