Selfie-based authentication raises eyebrows among infosec experts

Selfie-based authentication is gaining traction globally, with Vietnam mandating face scans for digital transactions over $400. Concerns arise as leaked selfies of Singaporeans surface on the dark web, potentially exploited by cybercriminals. Experts like Gartner's Akif Khan and consultancy New World Advisors' Katie Mitchell acknowledge the growing interest in selfie-based verification due to increased digital engagement. However, challenges persist regarding data protection, privacy laws, and the handling of biometric data. While some organizations implement liveness checks to enhance security, vulnerabilities remain, as highlighted by Resecurity's findings on leaked identity documents. The use of selfies for identity verification is evolving, with vendors incorporating liveness checks, biometric comparisons, and machine learning to combat fraud. Despite efforts to enhance security measures, concerns linger about inclusivity and potential workarounds that threat actors could exploit. As the trend continues to evolve, the balance between security and accessibility remains a key consideration for organizations implementing selfie-based authentication methods.