Experts have warned that the UK government's planned digital IDs, stored on smartphones, could become a prime target for thieves seeking to steal personal data. The digital IDs, announced by Prime Minister Sir Keir Starmer in September and set for rollout in 2029, will contain sensitive information including name, date of birth, nationality, residency status, and a photograph.
James O'Sullivan, founder of smartphone security firm Nuke From Orbit, told The Independent that criminals increasingly steal phones for the data they hold rather than the device itself. He warned that digital IDs could be used to commit identity fraud, such as opening bank accounts in a victim's name. 'As the value and breadth of that data increases, so will the volume and severity of theft,' he said.
The government has stated that digital credentials can be quickly revoked and reissued if a phone is stolen. However, O'Sullivan noted that 'time is of the essence,' as thieves often have a window of a few hours to access accounts before victims can disable their devices. Between December 2024 and February 2025, £641,208 in phone theft fraud was reported to Action Fraud.
Aditya Hindocha from device protection provider SquareTrade highlighted that data on a single phone has become far more valuable than the hardware. 'Digital IDs will only concentrate this value further, making devices even more attractive for sophisticated criminals,' he said. SquareTrade data shows the UK had the highest rate of phone theft in Europe this summer, accounting for 37% of all theft and loss claims.
Cybersecurity expert Nick Ellison said the digital IDs are expected to be stored securely, but those who do not secure their devices with PINs or passwords may be most at risk. O'Sullivan added that while the government will adhere to best security practices, it must continue to evolve protections as technology advances to avoid replacing current risks with new ones.
