What Docomo announced
NTT Docomo said in August 2026 that it would phase in IC-chip identity verification at Docomo Shops and authorized retailers nationwide, starting on 20 August. The ScanNetSecurity report on the announcement lists the methods. Customers using a My Number Card are verified through JPKI, the public personal authentication service built on the card's electronic certificate. Driver's licenses, residence cards and special permanent resident certificates are verified through eKYC-IC, which matches the portrait stored on the chip against the customer standing at the counter. The first procedures covered are new subscriptions, name changes, contract succession and UIM/eSIM issuance and reissuance. Docomo's stated purpose is to stop contracts opened with forged documents or stolen identities. The report also says name and address data read from the chip flow into the contract system automatically, which should reduce keying errors.
A note on timing: Docomo announced the plan on 12 August, and post-launch reporting (ScanNetSecurity, 25 August) says the chip check was introduced at Docomo Shops and authorized retailers from 20 August. The rollout is phased, so this article treats it as a rollout under way, not a completed one.
The case for stricter checks
The strongest argument for regulators is the scale of the fraud. Japan's Ministry of Internal Affairs and Communications (MIC) wrote on 29 July 2026 that 2025 losses from special fraud, a category that includes social-media investment fraud and romance scams, reached a record ¥325.7 billion according to National Police Agency figures. On the same day MIC asked carriers, through their industry associations, to implement more effective countermeasures. Phone lines opened under false names are a standard tool in these schemes, because a throwaway number gives a scammer a channel that cannot be traced back to them.
The weakness the law is targeting is real. Cabinet approved a bill on 24 March 2026 to extend mandatory identity checks to mobile contracts used only for data. Such contracts had been exempt, even though they were used in many social-media fraud cases, according to the Adnkronos report on the bill. The same report says carriers could refuse applicants seeking too many numbers, that police could access subscriber information when messaging apps are used in fraud cases, and that short-term visitors buying data SIMs would not be exempt.
MIC's own page records the outcome. The amending act (Act No. 25 of 2026) was enacted on 22 May and promulgated on 29 May 2026. MIC's 3 August release says detailed rules are being left to ministerial ordinances, and that the working group is still preparing those arrangements. The page does not give a clear enforcement date, and I could not confirm the final text of each provision against the statute. The bill-stage description above is therefore the best available guide to the content.
Chip-based verification is also a better control than the status quo. A photo of an ID uploaded to a web form can be forged or reused. A chip read can be validated cryptographically, and a face match against the stored portrait ties the document to the person present. If the goal is to cut fraud without adding paperwork, this is a reasonably proportionate tool.
Where the risk lies
The policy question is not whether to verify identity but what is collected, who can see it and how long it lasts. SIM registration regimes have a long record of turning into surveillance infrastructure, because they tie a person's legal identity to every call, message and location trail that the number generates. Three design points deserve scrutiny as MIC writes its ordinances.
- Data minimisation. A chip read can return far more than a contract needs. Carriers should store the verification result and the fields required for billing and for legitimate legal requests, not a copy of the full chip contents or the portrait. Reporting on the Docomo system mentions name and address being passed to the contract system. Whether anything beyond that is retained is something the company and regulators should state plainly.
- Police access. The bill's provision allowing police to obtain subscriber information in messaging-app fraud cases is the most consequential element for civil liberties. Japan's Constitution protects the secrecy of communications, and the proper safeguard is a specific, documented process tied to a fraud investigation, with a record of each request. Broad or standing access would be disproportionate.
- Exclusion. Foreign residents and short-term visitors are covered by the same rules. If a foreign visitor's passport cannot be read as easily as a My Number Card, the result could be a two-tier market in which legitimate connectivity is harder for some people. Alternatives for people without chip-readable Japanese documents should be a stated part of the rules, not left to each retailer.
A proportionate path
The evidence supports verification at the point of sale. Chip reads on documents the state has already issued are about as light a method as exists, and they avoid the fresh biometric databases that other countries have built. The risk is in what happens next: retention, secondary use and open-ended police access. A pro-innovation approach would keep the chip-read pattern, publish the retention limits for carriers, and require the police-access process to be written down and auditable. It should also give an independent body, such as the Personal Information Protection Commission, a clear role in reviewing carrier practice. Japan has a chance to show that fraud control and privacy can be designed together, and the ordinances MIC is drafting now are where that will be settled.
What to watch
Three things will show where this lands: the enforcement date and ordinance text, any published retention limits from carriers, and fraud-loss figures for 2026. Without outcome data, there is no way to judge whether the added friction is worth it.