Unregistered verifier and excessive request warnings
If the requester is not in the Tamga trusted list, or asks for more than its registered permission, the wallet shows a red warning; you do not have to share.
Topics in this guide
Steps
Step 1: Read the red “UNREGISTERED VERIFIER” warning
“This verifier is not in the Tamga trusted list. Do not share if you do not know who it is.”
Step 2: Look at the “Excessive request” block
“This verifier asks for fields outside its registered permission” and the list of those fields. You do not have to share them.
Step 3: If you are not sure, tap Don't share
The share button unlocks after 3 seconds, so that you read the warning first.
Step 4: If it looks suspicious, tap Report to the data protection authority
The button is on the same screen. The wallet prepares the report; you send it: Ask for deletion or report.
Good to know
- The wallet stops some requests by itself and shares nothing: a request that uses a registered verifier's name but is not signed with its certificate (possibly an impersonation), a registration certificate that cannot be verified, and a request made for a site that is not in the trusted list.
- If the certificate that signed the request does not match the registered one, you see a separate warning.
- If you did share with an unregistered party, it appears in Who I've shared with marked “Not in the trusted list”.
Related guides
- Ask an organisation to delete your data, or report itYou can ask an organisation you showed information to to delete your data, or report a suspicious request to the data protection authority. The wallet prepares the text; you send it.
- Who I've shared withYou see every organisation you have shown information to, and what you shared when, in one list; from here you can ask for deletion or report.
- Show a credential on a websiteThe website shows a QR code; you scan it with Scan, see who is asking for what and why, and approve only those fields.