AusPost folded Digital iD. So what is left to build?

Australia Post shut down its consumer Digital iD service today, nine years after launching it as one of the early accredited services under Australia’s digital identity framework. Easy read: a private identity product failed. The better read is structural. Once governments start issuing mobile driver’s licences and federal credentials, private-label proofing becomes a much harder place to make a market.

That’s not a knock on AusPost. It’s a clean answer to a question the market spent years treating as more mysterious than it was. Proving who someone is, at national scale, off government documents and government-issued credentials, has the shape of a public rail. A private provider can build useful tools around it. Owning the consumer identity layer itself is a different fight.

So the stack is narrowing.

The base proof is settling onto public rails. State mobile driver’s licences, federal identity services and existing document checks are the credential centre of gravity now. That pushes private vendors towards orchestration, integration, fraud signals, onboarding workflows and all the hard edges government credentials don’t solve neatly.

You can read it in the noise around the shutdown. FrankieOne is moving towards mobile driver’s licence support. IDVerse replacing Onfido inside Docusign for Australia and New Zealand says local proofing and local regulatory fit are worth more than they were. The private layer isn’t disappearing. It’s being forced to get specific.

And specific is where the interesting work is.

Government credentials are good at proving who holds an identity. They’re much weaker at proving what’s happening inside a live channel. They won’t tell you who’s on the other end of an inbound call to a contact centre, or whether a caller who rattles off the customer’s details is actually the customer, or that the person who pressed send in a support flow is the one the account expects.

Call it the signal-at-the-channel problem.

It’s smaller than national digital identity and easy to miss, because it doesn’t look like a grand credential scheme. It turns up in ordinary operational moments — a customer calls, a supplier changes their bank details, a contractor asks for access, a recovery flow kicks off. The organisation doesn’t need a new national identity for any of that. It needs a trustworthy signal at the point where the claim is being made.

That’s where private infrastructure still has room. Not rebuilding the government credential layer, but reaching for the right rails at the right moment and making the answer usable inside messy business workflows.

The distinction matters. Compete with government identity proofing head-on and the economics get ugly. Help a business decide whether to trust a live interaction and you’re solving something else entirely — not base proof, but whether to trust the channel.

Fraud is drifting towards that second problem. A scammer doesn’t always need to build a new identity. More often they just need to borrow enough of a real one to get through a conversation, to get the staff member or the parent or the finance team to accept that the person in the channel belongs there.

AusPost closing Digital iD tells you where the centre of gravity is heading. Public rails for base identity, private layers for orchestration and live trust. The interesting question isn’t only who proves your identity anymore. It’s who proves it’s really you on the other end of the line.

That’s the gap. It barely makes the headlines, and there’s a company’s worth of work sitting inside it.