On May 14, 2026, Ukraine quietly closed a chapter that most states have not even opened. First Deputy Prime Minister and Economy Minister Yuliia Svyrydenko announced that the taxpayer registration number — the RNOKPP, still widely called the IPN or simply the "tax number" — is now issued and carried inside the Diia app and the consular "e-Consul" system. The paper card is retired. The QR-coded electronic version, the government says, "will have the same legal force as the paper one."
That sentence is doing a lot of work. A tax identification number is the quiet hinge of modern economic life: you cannot open a bank account, sign an employment contract, register a business, or claim a benefit without one. By making the digital RNOKPP legally equivalent rather than merely a convenient copy, Ukraine has removed an entire category of in-person bureaucracy — and done so in the middle of a full-scale war.
What actually changed
The mechanics are deliberately undramatic. Any Ukrainian aged 14 and over can now order a tax card with a QR code directly in Diia, without visiting a tax office, filing a paper application, or queuing. Crucially, parents can obtain an RNOKPP and an electronic card for a child under 17 in a fully digital flow — and for children currently abroad, the same can be done through e-Consul at diplomatic missions, according to Interfax-Ukraine's account of Svyrydenko's announcement.
The diaspora angle is not incidental. Millions of Ukrainians are displaced across Europe; their children still need tax numbers to inherit property, receive payments, or eventually return to a functioning economy. A tax ID issuable from Warsaw or Berlin without a trip home is a concrete answer to a wartime problem, not a press-release flourish.
The QR code is the other substantive piece. Because banks and government agencies can scan it to verify a holder's data instantly, the card is not a static image but a credential that can be checked against the source registry at the point of use.
The platform behind the headline
Diia is not a tax app that happened to add a feature. It is Ukraine's digital-state backbone. Per Ukraine's official Diia portal, the ecosystem now serves over 22 million users with access to 150+ services and roughly 30 digital documents; the Ministry of Digital Transformation puts active users at 23 million — close to four in five adults. Ukraine was the first country in the world to give a digital passport the same legal status as a physical one, and the tax card now joins that lineage.
For a pro-innovation reader, this is close to the ideal model of government technology. Rather than each agency building its own portal, Ukraine built one identity-and-documents layer and lets services plug into it. The marginal cost of adding the tax card was low precisely because the rails already existed. That is the opposite of the gold-plated, multi-year IT procurement disasters that define digital government in much of the West.
The case for caution — taken seriously
The strongest objection to concentrating identity, documents, and now tax registration in one app is not Luddism; it is risk concentration. Security researchers warned as early as 2021 that consolidating sensitive data behind a single front end creates a tempting single point of failure, and a wartime adversary with sophisticated cyber capabilities is exactly the threat model that warning anticipated. The concern is real and deserves a real answer rather than a dismissal.
The answer matters because the underlying data is demonstrably exposable. The Kyiv Independent reported that roughly 993,000 documents — passports, tax numbers, driver's licenses — sat unsecured from 2021 until April 2025, leaked not from Diia but from privately run vehicle-inspection centers. That distinction is the whole point: the breach came from sloppy peripheral data handling, not from the centralized platform. Ukraine's architects argue Diia mitigates rather than creates this risk by operating on a data-in-transit principle — pulling records from state registries at the moment of a request rather than warehousing them in the app.
That design is the right instinct, and it is why proportionate regulation, not retreat, is the correct posture. The lesson of the 993,000-document leak is to harden the messy edges of the data ecosystem and mandate independent security audits of the core — not to keep citizens standing in tax-office lines because a paper card cannot be hacked remotely. A credential you must physically carry is also a credential you can lose, forge, or be unable to reach when your home is in an occupied oblast.
Monetization and the next test
The more interesting governance question is commercial. From June 1, 2026, document-sharing through Diia becomes a paid service — but for institutions, not citizens. Banks pay a one-time connection fee and a per-transaction charge (around UAH 9.8 per successful share) on a system that already processes over 1.3 million document shares a month, per dev.ua. Ukraine is, in effect, turning its identity layer into regulated infrastructure that funds itself, with reported ambitions toward an Estonia-style marketplace of verified services.
That is a defensible model if — and only if — the pricing stays transparent, citizen-facing services stay free, and the verification standard for any future commercial layer stays high. The risk is mission creep: an identity backbone that quietly becomes a revenue engine can develop incentives misaligned with the citizens it serves.
For now, retiring the paper tax ID is a small, well-executed step that demonstrates a larger thesis. A state can deliver fast, low-friction digital services without waiting for perfect conditions or peacetime — provided it builds on open rails, designs for data minimization, and submits the core to genuine, independent scrutiny. Ukraine is running that experiment in the hardest environment imaginable, and so far the build quality is holding.