Scan Your Face to Pay: Experts Warn of Privacy Risks

New biometric payment terminals are being introduced in Australia, allowing customers to pay for goods and services using facial or palm vein recognition. Verifone's Victa terminals capture a customer's facial image, converting it into a secure 'token' for identity matching. An infrared camera also facilitates palm vein scans. Enrolled customers select a biometric option at checkout and present themselves to the terminal for transaction approval, a process designed to simplify payments and loyalty program verification.

This technology, already launched in New Zealand, requires customers to opt in via an app, linking their biometric profile to payment details or loyalty accounts. While Verifone states it does not retain images and shifts data risk to merchant partners, cybersecurity experts caution about the "uniquely dangerous" implications. They emphasize that unlike passwords, biometric data, once compromised, cannot be revoked, presenting a persistent privacy threat. The merchant or digital wallet holds the user's biometric profile, a structure experts find convenient for the payment giant but concerning for consumer security.