Cyber Defense

Biometric payments work, and the liability question does not

Palm and face payment pilots are fast and accurate. What happens after a false accept is still unwritten in most markets.

Yara Khalidi

Published 28 July 2026
6 min read
20.9k reads

Biometric payments work, and the liability question does not — XENVORA Photograph: Credit card payment, shopping, Rawpixel (CC0) · Licence

The technology is no longer the interesting part. Throughput at a supermarket lane is better than card, and false rejection rates have dropped to the point where queues do not notice.

A stolen credential you cannot rotate

A compromised card is replaced in a week. A compromised biometric template is permanent, which is why template protection and revocation design matter more than accuracy numbers.

Regulators in three markets have started asking who bears the loss on a false accept. Until there is an answer, deployments stay pilots with generous merchant indemnities.