Spain kills the plastic id: your phone becomes your legal self on april 2
On April 2 the wallet stays home. Spain’s National Police will treat a QR code in the MiDNI app exactly the same as the laminated card Spaniards have carried since 1951—hotels, banks, nightclubs, airlines, campus desks, car-rental counters, every bouncer with a flashlight. The move buries one of the last everyday reasons to touch physical ID in Europe.
The decree that turns a screen into you
Royal Decree 255/2025, quietly published in March, equates the digital and plastic versions word for word. A merchant who refuses the phone screen can be fined; a citizen who shows it cannot be asked for the card “just in case.” The QR is cryptographically signed every 30 seconds, so a screenshot or printout dies almost instantly. Police scanners read it offline, no data vault in the cloud, no centralised breach waiting to happen.
Yet the state still keeps exceptions where the chip must be read: boarding a flight, crossing a Schengen border, voting. The phone version is identity, not travel document. The distinction matters for the 12 million Spaniards who every year discover their DNI expired the night before a vacation.
Hotels lose the photocopy habit
The Spanish Data Protection Agency fined three major chains last year for hoarding paper copies of guest IDs. With MiDNI the receptionist sees only the fields the guest chooses to reveal—age gate for the minibar, nationality for the police registry, nothing else. The app keeps a log of who scanned what and when, turning a one-way data grab into a mutual receipt.
Banks pushed hardest for the change. CaixaBank and Santander piloted phone onboarding last autumn and cut branch-time per account from 24 minutes to 7. The bottleneck was never the biometric selfie; it was the magnetic swipe of a plastic card that half the clients forgot.
What still can go wrong
Guardia Civil issued a parallel warning: if a website demands a file upload, send a black-and-white scan, mask the serial number, and watermark it “expired.” The advice sounds retro, but online fraud using leaked DNI photos still dwarfs phone-spoofing. MiDNI does not fix the internet; it only fixes the face-to-face moment.
Battery-dead scenarios are covered by an emergency mode: the QR lives cached for 24 hours, readable even in airplane mode. Lose the phone and you can revoke the digital ID in seconds through the same portal used to freeze a bank card. The plastic card remains valid forever—unless you forget it, in which case the fine used to be 30 euros. After April 2 that fine is history.
Spain joins Denmark and the Netherlands in full legal recognition of mobile ID, but with a difference: the QR standard is open source, no vendor lock-in, no ad-tech giant brokering the handshake. The state foots the bill; citizens pay with the metadata they already leak. In a continent racing to fold every credential into a single digital wallet, Spain just chose the radical path of making the phone the credential itself. The plastic card becomes backup, not gatekeeper. Keep it in a drawer; your legal self now fits a 540-pixel square.