Extra Control (MRTD)

Some actions need more assurance than a standard login, for example large payments or sensitive data. Extra control adds a second identity check on top of the normal BankID flow, protecting both you and the customer against fraud.

The user confirms their identity by photographing and tapping their Swedish passport or national ID card, reading the document's chip with their phone's NFC reader and camera. Both document types are issued by the police, and the read verifies the document is genuine and valid. Most recent phones support it.

In eID Hub you enable it by setting the extra-control flag on an otherwise normal SE BankID request. It works with both auth and sign, and is compatible with phone authentication. The response confirms the check was performed but returns no additional personal data.