← Blog
17

2026-02-26 · Bertrand Gonthier

GC Wallet: Canada’s Secret Digital ID Beta You Probably Missed

While everyone was arguing about housing, carbon taxes, and interest rates, Ottawa quietly pushed a national digital credentials wallet into the app stores: it’s called GC Wallet. No press conference. No real public debate. Just a shiny icon, sitting in Google Play, built by Employment and Social Development Canada, waiting for “approved participants” to try it out.

On paper, GC Wallet is “only” a secure way to store temporary visas, pilot licences, and other federal documents on your phone, sharable via encrypted offline QR codes. In reality, Ottawa calls it a “foundational component” of a broader digital credential ecosystem that doesn’t exist yet in law, but very much exists in strategy decks.

Let’s call this what it is: GC Wallet is critical identity infrastructure for the 2020s — launched like a minor UX update.


The Quiet Rollout Is the Red Flag

If you were genuinely proud of this product, you’d lead with a national conversation, not a soft launch that looks like you’re hoping no one reads the release notes.

A few facts:

  • The app is live in app stores but restricted to a limited pilot of “approved participants” — everyone else is effectively a spectator.

  • Ottawa has not published any clear timeline for when (or how) this might move from pilot toy to mandatory infrastructure.

  • The positioning is “convenient” and “secure,” but the political context is a government that already burned trust with ArriveCAN — a “temporary” travel app that became a mandatory digital gate with a $54M price tag, bugs, and privacy failures.

In other words, we’ve seen this movie before. The first act is always “pilot.” The third act is: “You can’t board your flight/access your benefits/cross a border unless you use it.”


From Convenience to Control Is a Spectrum, Not a Leap

Technically, GC Wallet is not evil. Digital credentials can reduce fraud, cut paper, and create interoperability with partners like the EU, which is exactly what Ottawa is exploring under its new digital partnership. As a fintech founder, I actually want verifiable, standardized credentials — they’re a missing rail for everything from KYC to capital markets.

The problem isn’t the tech. The problem is governance, consent, and scope creep:

  • Once your identity lives in a government-controlled digital wallet, the temptation is to attach more and more of civic life to that wallet: healthcare, taxes, benefits, travel, employment checks.

  • Each new “use case” will be justified as convenience, fraud reduction, or “modernization.” That’s how it starts in every jurisdiction that goes down the digital ID path.

  • We already know from ArriveCAN that promised safeguards on data use and data sharing can be weak, opaque, or retrofitted after the fact.

Centralized or federated digital IDs compress an enormous amount of power into a small number of hands. That’s not a conspiracy theory; that’s a systems design fact.


The Market Angle: Identity Is the New Monetary Policy

If you think this is just a privacy story, you’re missing the bigger market shift.

In a world where:

  • Central banks explore CBDCs

  • Governments roll out national digital wallets

  • Platforms demand verified identities to transact at any serious size

…identity stops being a static credential and becomes a programmable policy lever.

You don’t have to “ban” anything outright. You just tweak access:

  • “High-risk” individuals get slowed, flagged, or forced into manual reviews.

  • Certain transactions require “enhanced” credentials that only some people can practically obtain.

  • Whole sectors can be throttled by changing the rules of which credentials are required to play.

If you control the rails of who is recognized, by whom, under which rules, you indirectly control the flow of capital and opportunity. That’s why the way GC Wallet is being introduced matters — not in 2036, but now.


Why the Quiet Part Matters

There are only two ways to introduce infrastructure this sensitive:

  1. Loud and accountable: white papers, public consultations, parliamentary debate, third‑party threat models, privacy impact assessments, transparent vendor and cost breakdowns.

  2. Quiet and deniable: “It’s just a pilot,” “It’s only for visas and licences,” “It’s voluntary,” “Why are you so paranoid?”

GC Wallet, so far, is firmly in camp #2. And when you quietly ship something that could one day sit between citizens and essential services, you’re not building trust — you’re burning it in advance.


What We Should Be Demanding

If we’re going to build digital identity rails in Canada, let’s do it like adults:

  • Legislation first, apps second – Clear legal limits on scope, data use, data sharing, and sunset clauses before a single QR code hits a boarding gate.

  • Open standards, open scrutiny – Publish protocols, security models, and governance structures so civil society, technologists, and investors can actually stress-test them.

  • Hard limits on coercion – Explicit bans on making a single government app the mandatory gateway for essential rights and services, with strong remedies if that line is crossed.

  • True interoperability – If GC Wallet is “foundational,” it should interoperate with private wallets and credential ecosystems, not attempt to replace them.

Digital identity is too important to be left to quiet beta tests and spin.


My take: GC Wallet is a live case study in how modern states extend control over identity rails under the banner of convenience. If you care about markets, capital formation, and free movement of people and ideas, you should care about who owns the wallet in your pocket — and what else they plan to put inside it.

I’m not against digital credentials. I’m against infrastructure that changes the balance of power between citizens, markets, and the state, being introduced by stealth.

If Ottawa wants our trust,, they can start by doing the one thing they’ve been avoiding with GC Wallet so far:

Talk to us. In daylight. Before the pilot becomes the gatekeeper.

Letters from the studio.

One quiet dispatch a month — new work, applied AI notes, no noise.

Have a workflow to fix?

An AI engineer replies within 24 h.

Talk to a human