Skip to content
Skip to main content
Payments & Banking Technical Explainer

Does a biometric payment approval identify the person?

Not by itself. It usually records that the device accepted its local authentication process, not that the payment provider identified a named person's fingerprint or face.

The biometric match often stays on the device

Consumer devices compare an input with locally enrolled templates and send the wallet a success result. Providers commonly receive the result, method and time rather than an image or biometric template.

Several fingerprints or appearances may be enrolled, and a passcode, PIN or password may be permitted as fallback. The recorded result must therefore be read according to what the system actually tested.

Separate authentication from attribution

Establish the endpoint, wallet token, transaction, result and whether biometric or fallback authentication was used. Enrolment, possession, account access, CCTV, location and communications may then help identify the operator.

Describe the evidence as successful device authentication unless reliable records support a more specific conclusion.

The point to remember

Biometric approval strengthens evidence that a device authenticated a payment, but it does not on its own identify the person who used that device.

Reference: PAY-114Payments & Banking