ID scanning

The terminal verifies a patron’s identity by scanning their ID at the point of entry. It supports both physical IDs and digital IDs, so patrons can sign in with whichever they carry.

Physical IDs

The patron holds their physical ID card up to the terminal’s camera. The terminal reads the details directly from the card, checks the ID is not expired, the patron is over 18, and the patron is not banned, self-excluded or flagged, then records the entry.

Digital IDs

Patrons carrying a digital ID can use it at the terminal instead of a physical card. Digital IDs are verified digitally against government sources rather than read from a printed card, which gives you confidence in the authenticity of the document.

Manual entry

If a patron can’t scan an ID, the terminal also supports manual entry, where their details are typed in as a fallback.

How entries appear in the dashboard

Each sign-in is recorded with its entry type, so you can see how the patron signed in:

• Physical ID scanned: signed in via the terminal using a physical ID
• Digital ID scanned: signed in via the terminal using a digital ID
• Manual entry: signed in via the terminal with details entered manually

For exactly what is captured and stored with each entry method, and for how long, see Data collected.

Why you should only trust the terminal, not the patron’s app for digital ID scanning

For digital IDs, there are two sources of information, and only one can be trusted:

• The data returned from the QR code (trusted): Scanning the QR code lets the terminal use government databases to obtain the credential holder’s details, such as their portrait, name and age. Since this comes from the government, it is guaranteed to be real. We display these results on the VenueScan terminal and record them in your dashboard.
• The data shown in the patron’s app (do not trust): Anyone can manipulate their app to display different data, so what appears on their phone is not proof of anything, even if the QR code scans successfully.

What is the risk?

An underage patron can theoretically obtain the login details for a real digital driver licence from a person who is over 18, then manipulate the app to display their face instead. The manipulated app would contain a real QR code of a valid digital driver licence and would scan as valid. But when it is scanned, the government sources send us the real photo of the licence holder, not the manipulated one in the app.

How displaying the portrait prevents this

This is why it is recommended to enable Display portrait. When a digital ID is successfully scanned, the terminal shows the portrait returned by the government, so you can compare it to the person in front of you and ensure they match. Because this portrait comes from the government and not the patron’s app, you can prevent patrons from swapping the face on their app.