Experts Slam Digital Licence Holograms as a 'Scam' Security Feature

• digital-id
• cybersecurity
• government-policy

Cybersecurity experts are calling out the on-app hologram in Australian digital licences as misleading and insecure. Learn what this means for your safety.

Digital Licences Under Fire for Flawed Security Measures

Australia’s state-based digital driver licence apps are under scrutiny after cybersecurity experts warned that the 'on-app hologram' featured in New South Wales and Victoria is a cheap, ineffective measure that fails to prevent fraud. Experts are urging governments to adopt internationally recognised security standards instead of relying on visual features that can be easily faked.

Why the On-App Hologram is Not a Real Security Feature

The so-called holograms included in apps developed by NSW and Victoria are not true holograms. They are merely visual animations that simulate a security feature, but in reality, offer no genuine protection against forgery.

Dr Vanessa Teague, CEO of Thinking Cybersecurity and a cybersecurity expert at the Australian National University, called the feature “complete nonsense,” labelling it a scam and a misuse of public funds.

Easy to Fake and Misleading

Software developer Michael Uren said the feature could be easily mimicked using generative AI or basic coding. “It costs nothing to do this in five lines of code,” he explained. The reliance on such visual cues gives users a false sense of security and could allow fake IDs to be used in serious fraud cases—from underage drinking to collecting packages or signing contracts under a false identity.

States’ Response and Inconsistencies

While Queensland has stated its digital licence is ISO 18013-5 compliant, it still allows for visual verification in “low-risk” situations—an undefined and dangerous loophole. Meanwhile, Service NSW and VicRoads instruct users to verify holograms before seeking further verification, despite the feature’s lack of security value.

Victorian authorities do advise scanning QR codes as a verification step, and Service NSW is trialling a verifiable photo credential, but cybersecurity professionals say these moves don’t go far enough if they are not built on transparent, international standards.

The Call for International Standards

Experts say ISO 18013-5 offers a clear and secure framework for digital ID documents. Yet, Australia’s states have each taken their own approach, with only Queensland reportedly meeting the standard. Dr Teague argues this fragmented approach is problematic, noting that secure systems already exist and should have been adopted nationwide.

Security by Design, Not By Appearance

• Visual features are easily forged: Simple animations cannot replace cryptographic security measures.
• QR codes offer better verification: Only cryptographic validation through QR scanning can confirm a licence’s authenticity.
• Unified standards are key: Experts urge states to adopt international digital identity standards rather than develop their own unvetted solutions.
• Security should be transparent: Public scrutiny and expert consultation are crucial for building trustworthy digital ID systems.

As more Australians adopt digital IDs, it is crucial that their security is not left to hollow features like on-screen animations. Experts agree: it’s time to replace gimmicks with real protections.