Does a biometric payment approval identify the person?¶
Not by itself. It usually records that the device accepted its local authentication process, not that the payment provider identified a named person's fingerprint or face.
The biometric match often stays on the device¶
Consumer devices compare an input with locally enrolled templates and send the wallet a success result. Providers commonly receive the result, method and time rather than an image or biometric template.
Several fingerprints or appearances may be enrolled, and a passcode, PIN or password may be permitted as fallback. The recorded result must therefore be read according to what the system actually tested.
Separate authentication from attribution¶
Establish the endpoint, wallet token, transaction, result and whether biometric or fallback authentication was used. Enrolment, possession, account access, CCTV, location and communications may then help identify the operator.
Describe the evidence as successful device authentication unless reliable records support a more specific conclusion.
The point to remember
Biometric approval strengthens evidence that a device authenticated a payment, but it does not on its own identify the person who used that device.