Cardholder Identification: When You Can Ask a Customer for ID

Cardholder identification sits in an awkward spot. You cannot make showing ID a condition of the sale, but if you genuinely suspect fraud at a face-to-face counter in the US, you can ask, and you can decide what to do with the answer.

Those are two different permissions, and knowing which one you are using matters.

The default: do not make it a condition#

Section 1.5.5.3 of the Visa Core Rules (ID# 0027481) sets the baseline:

Unless specified in the Visa Rules, a Merchant, Agentic Payment Enabler, or Agentic Payment Provider must not request Cardholder identification as a condition of purchase.

Read the last four words carefully. The rule is not a blanket ban on asking. It bars you from making the sale contingent on it. A sign at the till reading "ID required for all card purchases" is the thing this prohibits, because it conditions every purchase on something the cardholder is not obliged to produce.

Note who else the rule now names. It was updated in October 2025 to cover Agentic Payment Enablers and Providers, the same expansion that reached the credential display rule covered in card data rules.

The US exception: suspected fraud, face to face#

The same section continues, and this part applies in the US Region:

A Merchant that suspects fraud in a Face-to-Face Environment may request Cardholder identification. If the identification is expired or does not match the name on the Card, or if the Cardholder does not provide identification, the Merchant may decide whether to accept the Card.

Three conditions travel together. You must actually suspect fraud, it must be face to face, and the discretion that follows is yours rather than mandated. The rule does not tell you to refuse. It says you may decide.

What it does not give you is a routine. Suspicion means something specific happened, not that the ticket was large or the customer was unfamiliar.

Where undue risk comes in#

The Honor All Cards rule carries a related note. A merchant may consider whether present circumstances create undue risk, and the example the rules themselves give is a sale involving high-value electronics where the card signature panel is unsigned and the cardholder has no other identification.

That is a useful illustration of the standard. Several things lining up, not one thing being unusual. The acceptance obligation itself is covered in prepaid cards and partial authorization, which walks through what Honor All Cards actually binds.

Where ID is genuinely required#

The "unless specified in the Visa Rules" clause points somewhere real. Section 5.4.2.1 requires it for manual cash disbursements and quasi-cash transactions in a face-to-face environment:

an Acquirer or Merchant must validate the identity of the Cardholder by reviewing the Cardholder's identification document (for example: valid passport, valid driver's license with photo, other government-issued identification, Card containing the Cardholder's photograph)

There are carve-outs for PIN or device-authenticated chip transactions at USD 500 or less, and in the US Region for domestic transactions. The wider quasi-cash picture is in quasi-cash, gambling and the crypto carve-out.

So the shape is: forbidden as a blanket condition, permitted on genuine suspicion face to face, required for cash-like transactions.

What to tell your counter staff#

Take the sign down, if you have one. Do not ask as a matter of routine, and never frame it as a requirement to complete the sale.

If something specific gives you grounds to suspect fraud in person, you may ask, and you may decline the card if the ID is expired, mismatched or absent. Write down what the specific thing was, because that record is what makes the decision defensible later. The patterns worth watching are in merchant fraud monitoring rules.