BSP's Draft National ID Rule Settles Identity. Not Credit.

Key takeaways: On 6 August 2026 the Bangko Sentral ng Pilipinas published for public comment a draft circular that would require BSP-supervised institutions to verify customers through the Philippine Statistics Authority's National ID Authentication Services (NIDAS) at onboarding, account opening and account updating. It is still a draft; no compliance clock has started. It would settle who a customer is. It does not answer whether a borrower can repay.

Two questions sit at the front of every credit file. Who is this, and can they pay. Philippine banks have spent years and considerable expense on the first one. The BSP's draft circular, published for industry comment on 6 August 2026, would largely finish the job.

The second question is untouched by it, and that is worth saying plainly before the compliance work starts absorbing everyone's Q4.

What would the draft circular actually require?

The draft applies to BSP-supervised institutions across the board: universal and commercial banks, digital banks, electronic money issuers, and virtual asset service providers.

Covered institutions would be required to use NIDAS through National ID eVerify in customer onboarding and account opening — digital and in-person — and in account updating. An applicant already enrolled in PhilSys would no longer need to upload or present photographs of a physical ID card. The institution's platform would instead query the PSA's authentication service for real-time biometric verification.

The draft sets out two tiers. Tier 1 covers basic identity verification. Tier 2 provides electronic know-your-customer services using pre-agreed demographic data shared between the requesting institution and the statistics agency.

Implementation would run in two phases, prioritising high-volume retail institutions first. As published, the draft remains open for industry comment and the compliance clocks have not started.

Why is this a significant change and not just another KYC rule?

Because it moves identity verification from documentary evidence to a live query against an authoritative register.

The current process is documentary. A customer presents an ID, staff assess whether it looks genuine, the image is filed, and the institution carries the residual risk that the document was forged or that the person presenting it is not its holder. Every bank in the country has spent money on that residual risk — in training, in review queues, in fraud losses that were only detectable after the fact.

A biometric query against PhilSys replaces the judgment call with an answer. Onboarding gets faster, cheaper and more certain at the same time, which is unusual in compliance work and is the reason the draft has been broadly welcomed.

That is a genuine improvement. It also has a specific and limited scope, and the limit is where credit teams should be paying attention.

Where does identity certainty stop and credit risk begin?

Identity verification answers whether the person in front of you is who they claim to be. Credit assessment answers whether the business behind them can service an obligation over its term. Perfect performance on the first says nothing about the second.

This distinction is easy to lose in an implementation programme, because both live under "onboarding" on most process maps and both get described as due diligence. They are different disciplines with different evidence.

A borrower with a flawlessly verified National ID can still be running negative operating cash flow, carrying related-party receivables that will never convert, or servicing three other facilities the bank cannot see. None of that is visible to a biometric check, and none of it is meant to be.

The risk in the months ahead is not that anyone believes otherwise in principle. It is that a large, well-funded, board-visible programme lands on the identity half of onboarding, absorbs the available systems budget and change capacity, and the credit assessment half stays exactly as slow as it was — while the onboarding funnel in front of it gets materially faster.

What happens when onboarding accelerates and underwriting does not?

A queue forms at the slowest step, and the slowest step becomes more visible than it used to be.

BSP Circular No. 855 and the Internal Credit Risk Rating System requirements under Circular No. 439 already oblige banks to spread audited financial statements and run ratio and credit-risk analysis on borrowers. Philippine banks do this, and do it properly. The constraint has never been whether the analysis happens.

The constraint is how long it takes and how consistently it is applied. Manual spreading of a borrower's audited statements takes hours of analyst time. A ₱3 million exposure and a ₱300 million exposure take broadly similar hours to spread by hand, which is why small-ticket files get reviewed once at origination, refreshed annually if at all, and go unwatched in between.

If identity verification drops from minutes to seconds while credit assessment stays at hours per file, the ratio between the two steps changes sharply. The bottleneck was always underwriting capacity. It is about to be the only bottleneck left in the sequence, and it will be measured against a step that just became instant.

Does faster identity verification make credit assessment easier at all?

Partly, and it is worth being precise about how.

A verified PhilSys identity is a cleaner key. It makes it more reliable to match a borrower to credit history at the Credit Information Corporation, to prior facilities, and to related entities — because the matching no longer depends on name spellings and hand-keyed ID numbers agreeing across systems. Cleaner identity resolution improves the inputs to a credit decision.

What it does not do is perform the assessment. The financial statements still have to be spread. The ratios still have to be computed and compared against a consistent scale. The rating still has to be defensible to a credit committee and to an examiner.

What should a credit team do while the draft is still open?

Three things, none of which require waiting for the final circular.

Separate the two workstreams on paper now. Identity verification and credit assessment should appear as distinct steps with distinct owners and distinct service levels in whatever process map the implementation programme produces. If they are drawn as one box called "onboarding", the credit half will be funded as an afterthought.

Measure the current gap before the comparison becomes public. Time your current median from complete application to credit decision. That number is about to be compared against a verification step measured in seconds, and it is better to know it in advance than to hear it in a steering committee.

Submit a comment if the tiering affects you. The draft is open for industry comment and the phasing prioritises high-volume retail institutions. Thrift and rural banks with different volume profiles have a legitimate interest in how the phases are drawn, and comment periods are the cheapest point at which to influence that.

This is the specific problem CRDX was built for: spreading and rating a borrower's audited financials in minutes rather than hours, applying the same quantitative method to every file, so a credit decision keeps pace with an onboarding funnel that has just been rebuilt. A mid-sized Philippine commercial bank we work with put its SME credit assessment on that footing ahead of a digital onboarding launch, specifically so the new front end would not queue against an unchanged back end.

The reading that matters this quarter

The draft circular is good policy. Real-time verification against an authoritative biometric register is better than a photocopied ID and a judgment call, and the institutions that implement it well will onboard faster and lose less to identity fraud.

It settles who the customer is. Whether that customer can service the facility is a separate question, answered with different evidence, on a timetable that no part of this draft will improve.

The useful question for the next implementation steering committee is not whether identity verification is getting faster. It is what your credit decision will take, in hours, on the day the identity step takes seconds.

Sources: Bangko Sentral ng Pilipinas draft circular on National ID Authentication Services (NIDAS) integration, published for public comment 6 August 2026 — scope, Tier 1/Tier 2 authentication, two-phase implementation, and draft status as reported by BusinessWorld, Philstar and Manila Bulletin, 6–7 August 2026; BSP Circular No. 855 and Circular No. 439 (Internal Credit Risk Rating System); Philippine Identification System (PhilSys) and the Philippine Statistics Authority's National ID eVerify service; Credit Information Corporation. Last updated: August 2026.