South Korea: No Face Scan, No Phone

Mandatory biometric verification for every new mobile number.

State of Surveillance Editorial Team

TL;DR: Starting December 24, 2025, every person in South Korea must scan their face in real-time to activate a new mobile phone number. The government says it's to fight voice phishing scams, and they have a point, since 92% of counterfeit phones came through low-cost carriers in 2024. But the infrastructure now exists: a nationwide biometric verification system tied to telecommunications, with no opt-out. Today it stops scammers. Tomorrow it stops anyone the government decides shouldn't have a phone.

What South Korea Just Implemented

As of December 24, 2025, South Korea became the first country to mandate real-time facial recognition verification for all mobile phone registrations [1].

The new process:

  1. Customer presents their identification (national ID card)
  2. Customer opens the PASS authentication app
  3. Customer scans their face in real-time
  4. System compares live face to ID photo
  5. If match confirmed, phone number is activated
  6. If no match, no phone service

This applies to all three major carriers (SK Telecom, KT, and LG Uplus) as well as existing mobile virtual network operators (MVNOs). By March 23, 2026, all remaining low-cost carriers must comply [2].

Previously, customers only needed to present identification to activate a phone. Now biometric verification sits between every Korean citizen and mobile communication.

How the System Works

The verification uses PASS, an identification app developed jointly by Korea's three major telecom carriers and widely used by public and private organizations for identity verification [3].

The technical process:

  • Real-time face capture via smartphone camera
  • Liveness detection (to prevent photo spoofing)
  • Comparison against the photo on the customer's ID card
  • Binary result: match or no match

What they claim happens to the data:

  • Only a "yes or no" result is stored
  • Biometric data is not separately stored
  • Facial information is not retained after verification
  • Data is not used for any purpose other than identity confirmation

That's the official position. Whether it holds in practice (and whether it will hold under future governments with different priorities) is a different question.

Why South Korea Says This Is Necessary

South Korea has a serious problem with telecommunications fraud. Voice phishing (vishing) and SMS phishing (smishing) scams cost Korean citizens billions of won annually. Scammers acquire phones under stolen or forged identities, use them for fraud, then disappear.

The statistics that drove this policy:

  • 92% of counterfeit phones detected in 2024 were registered through MVNOs (low-cost carriers) [4]
  • Scammers exploit weaker identity verification at smaller carriers
  • Phones registered under false identities are primary tools for financial crime
  • Existing ID verification methods proved inadequate

The Ministry of Science and ICT framed facial recognition as the solution: "Real-time facial recognition, which compares an applicant's live image with the photo on their identification card, will effectively block the activation of phones registered under false identities" [5].

They're not wrong about the problem. But the solution creates infrastructure with uses far beyond catching scammers.

What This Infrastructure Enables

Once you build a system that requires biometric verification for essential services, that system can be expanded. South Korea has just normalized:

  • Biometric gatekeeping of communication: No face match, no phone service
  • Centralized identity verification: All carriers use the same system
  • Real-time identity tracking: Every new phone activation is biometrically verified
  • No anonymous communication: Every phone number is tied to a verified identity

Future expansion possibilities:

  • Requiring facial verification for SIM swaps
  • Extending to internet service registration
  • Linking to financial services authentication
  • Integration with government services access

The government says biometric data isn't stored. But the verification infrastructure exists. The apps are installed. The process is normalized. Expanding what gets verified (and what gets logged) requires only policy changes, not new technology.

Security vs. Privacy: The Korean Calculation

South Korea made a calculation: the harm from telecommunications fraud outweighs the privacy cost of mandatory biometric verification.

Arguments for the policy:

  • Real harm reduction: Fewer scammers can operate
  • Limited data retention: Only yes/no results stored
  • Existing app infrastructure: PASS already widely used
  • Democratic oversight: Elected government implemented the policy

Arguments against:

  • No opt-out: Everyone must comply or lose mobile access
  • Mission creep risk: Infrastructure can be expanded
  • Trust assumptions: Relies on carriers and government following stated policies
  • Precedent setting: Other countries may follow

The policy may work exactly as intended. Fraud may drop. Data may stay private. But the precedent is set: governments can require biometric verification for basic communication services, and populations will accept it if the stated justification is compelling enough.

Global Implications

South Korea is a technological bellwether. What happens there often spreads.

Countries already requiring SIM registration:

  • China (requires real-name registration with ID verification)
  • India (Aadhaar linkage for SIM cards)
  • Many African nations (mandatory SIM registration)
  • Most of the EU (varying ID requirements)

Countries that could follow Korea's lead:

  • Japan (similar telecom fraud concerns)
  • Singapore (strong identity verification infrastructure)
  • UAE (existing biometric ID systems)
  • Any country with growing telecom fraud problems

Korea just demonstrated that mandatory biometric phone registration is technically feasible, publicly acceptable, and implementable within months. That's a template other governments will study.

What This Means for Users

If you're in South Korea:

  • You must complete facial verification to get a new phone number
  • Existing numbers are unaffected, for now
  • The PASS app is required for verification
  • No alternative verification method is available

If you're elsewhere:

  • Watch for similar proposals in your country
  • Understand that "fraud prevention" is the likely justification
  • Consider that anonymous communication is increasingly difficult globally
  • Support organizations fighting mandatory biometric ID requirements

The Bottom Line

South Korea has solved a real problem (telecommunications fraud) by creating infrastructure that makes anonymous mobile communication impossible. Every new phone number now requires a verified biometric identity.

The government promises limited data retention and narrow use. Maybe that's true today. But the infrastructure is built. The precedent is set. And once biometric verification becomes normal for phone service, it becomes easier to require for everything else.

This is how surveillance expands: not through dramatic announcements of population monitoring, but through reasonable-sounding solutions to genuine problems. One verified service at a time, until there's nowhere left to be anonymous.

References

  1. Korea Herald - Face recognition required to set up all new smartphones from Tuesday (December 2025)
  2. Korea Herald - S. Korea begins trial of mandatory face recognition for new mobile numbers (December 2025)
  3. Korea Times - Korea to mandate facial recognition for opening new mobile numbers (December 2025)
  4. Biometric Update - South Korea to mandate face biometrics for new mobile numbers by 2026 (December 2025)
  5. The Record - South Korea to require facial recognition for new mobile numbers (December 2025)