The Biometrics Debate in Banking Has Changed

The Biometrics Debate in Banking Has Changed

Posted by Aneta Ciurkot on Posted in Biometrics, Finance Tagged

Banks are operating under a different identity standard than they were even a few years ago. Customers are more familiar with biometrics, more aware of account takeover and impersonation risks, and less likely to believe that passwords and one-time passcodes are enough on their own. They expect stronger protection, especially when the interaction carries financial risk. They also expect identity checks to feel measured, appropriate, and well handled.

That shift matters because many banks are still relying on identity models built for an earlier digital environment. Passwords, passcodes, and fragmented verification steps still have a role, but they are no longer a strong enough foundation for trust on their own. Not when customers are opening accounts remotely, restoring access after suspicious activity, approving significant transactions, or moving across channels where certainty has to hold together.

The Old Identity Model Is Starting To Show Its Limits

The debate around biometrics in banking has changed because the problem has changed. Identity is no longer confined to login. It now stretches across onboarding, ongoing access, account recovery, transaction approval, and exception handling. In those moments, the bank is not simply granting access. It is deciding how confidently it knows who it is dealing with.

That is why biometric identity is becoming more important. Not as a standalone feature, and not as a replacement for every other control, but as part of a stronger model for confirming the person behind the interaction.

Customers Are Bringing A Different Set Of Expectations

Customers are asking for identity processes that match the seriousness of the interaction. A routine access event may call for one level of assurance. A high-value transaction, an account recovery request, or unusual account activity may call for something stronger. The expectation is not complexity for its own sake, but a confidence that the bank is applying the right level of identity assurance at the right moment.

That is one reason older methods no longer feel sufficient on their own. The issue is not that passwords or one-time passcodes have disappeared from banking. It is that they no longer represent a convincing standard by themselves for the moments where trust is genuinely being tested.

What A Stronger Identity Model Looks Like In Practice

A better identity model gives banks a way to carry trust forward. It connects the assurance established at onboarding to later interactions, rather than forcing the institution to rebuild confidence from scratch each time risk rises or something goes wrong. That continuity matters in practice. It can strengthen onboarding, support more reliable account recovery, improve transaction approval, and create a more consistent identity posture across channels.

This is where NEC’s banking identity approach becomes relevant. NEC Digital ID and NEC Identity Cloud are built around the idea that trust in financial services is not a one-time event. It has to be established at the start of the relationship, maintained over time, and applied consistently across the moments that matter most. For banks, that means support for remote identity verification, ongoing biometric authentication, and stronger continuity between onboarding, access, recovery, and higher-risk customer actions.

Stronger Identity Also Has To Stand Up To Scrutiny

Customers want stronger protection, but they also want to know that information is being handled with care. Regulators and internal stakeholders want to know that systems are proportionate, explainable, and aligned with responsible data practices.

To see how this applies in practice, explore NEC’s biometrics use cases for banking and financial services, or speak with our team about how we work with leading financial institutions on digital trust, responsible biometrics, and stronger identity across the customer lifecycle.

Why Biometrics Are Becoming Part of the Bank’s Trust Architecture

Why Biometrics Are Becoming Part of the Bank’s Trust Architecture

Posted by Aneta Ciurkot on Posted in Biometrics, Digital ID, Finance Tagged

For years, identity sat quietly behind the scenes in banking. It appeared at account opening, at login, and occasionally during a recovery process, but it was rarely treated as a strategic layer in its own right. That is changing. In 2026, identity is becoming part of the bank’s trust architecture: not a single control, but a framework for how institutions establish confidence, manage risk, and sustain digital relationships over time. Accenture’s Top Banking Trends 2026 points to an industry being reshaped by agentic AI, digital assets, and new competitive conditions, while Deloitte’s 2026 outlook describes a more demanding environment for governance, resilience, and regulatory oversight.

Identity Has Moved Out Of The Background

The old model treated identity as a sequence of isolated checkpoints. One process handled onboarding, another handled authentication, another dealt with call-center verification, and still another sat inside workforce access or approval flows. That approach is increasingly out of step with how banks operate now. Digital relationships are continuous, channels are interconnected, and assurance has to hold together across far more moments than it once did.

That is why identity now belongs in a larger institutional conversation. It sits close to fraud strategy, operational resilience, AI governance, and customer confidence. J.P. Morgan’s latest annual report letters make that plain. Jamie Dimon writes that misuse of customer data is likely to grow worse with AI and agentic commerce, while Jennifer Piepszak emphasizes that AI must be connected to well-governed data and safeguards that protect clients, firms, and the financial system. 

Why The Operating Model Matters More Than The Feature Set

Once identity is understood as trust infrastructure, the questions become more serious. Banks are asking whether the institution has a coherent way to establish trust at the start of a relationship, maintain it across later interactions, and support trusted reuse of identity when appropriate.

NEC Identity Cloud points to a useful way of understanding the identity challenge in banking. Trust is not created once and left behind. It begins at onboarding, has to be sustained through later interactions, and increasingly needs to support how verified identity is used across a wider set of services and decisions. That is closer to how banks actually experience the issue: not as a single checkpoint, but as an ongoing responsibility.

That matters because the quality of trust is often tested long after the first verification event. A bank may know who a customer is at account opening, but the more important question is whether that assurance can still be relied on during account recovery, transaction approval, or an unusual event. When the answer is yes, identity becomes a steadier part of the operating model. When the answer is no, the institution ends up trying to recreate certainty under pressure.

[Learn more about NEC Identity Cloud >]

Trust Is Now A Governance Question As Well As A Security One

This is what makes the biometric conversation more consequential than it was even a few years ago. The issue is no longer limited to performance measures such as speed, accuracy, or fraud reduction. Those remain important, but the larger question is whether identity systems are being used in ways that are proportionate, understandable, and properly governed.

NEC approaches digital trust through a public commitment to privacy and responsible AI. For financial institutions, that is significant because trust is not defined only by technical strength. It is also shaped by whether systems can be clearly explained, responsibly overseen, and applied in ways that reflect the sensitivity of identity in banking.

In banking, this makes biometrics part of a broader conversation about institutional trust: how it is created, how it holds up over time, and how it is governed as risk and customer expectations continue to evolve.

Explore NEC’s biometrics use cases in banking and financial services, or connect with our team to discuss how leading institutions are approaching digital trust, stronger identity, and secure customer experiences.

Why a Foundational Trust Layer Matters for Financial Services in 2026

Why a Foundational Trust Layer Matters for Financial Services in 2026

Posted by Aneta Ciurkot on Posted in Biometrics, Digital ID, Finance

Customers engaging with financial institutions today are not simply looking for convenience. They expect their digital interactions to be secure, private, and resilient by default. High-profile fraud, data breaches, and payment scams have made consumers more informed about risk, and their expectations have shifted accordingly. Security and privacy are moving from implicit assumptions to explicit criteria by which institutions are judged.

At the same time, U.S. financial institutions are operating in an environment where account takeover, identity fraud, payment fraud, and credential compromise are persistent and measurable realities. Regulators continue to raise expectations around controls and auditability, while internal teams are tasked with modernizing legacy systems without introducing new points of failure.

Against this backdrop, digital identity has taken on a different role within financial institutions. It is no longer treated as a peripheral security function. It has become a foundational layer that supports how risk is managed, transactions are authorized, and trust is maintained across digital channels.

Identity as a Financial Risk Control

Data from U.S. regulators and industry reporting consistently shows that identity-driven fraud represents a material portion of financial losses across banking and payments. Identity theft, account takeover, and social engineering attacks remain among the most common methods used to compromise accounts and initiate unauthorized transactions.

Many of the mechanisms still widely used to establish identity—static passwords, knowledge-based questions, and one-time passcodes, were not designed for this operating environment. They are costly to manage, vulnerable to compromise, and increasingly misaligned with both threat realities and customer expectations.

As a result, identity is no longer confined to the login process. It plays a direct role in:

  • Customer onboarding and verification
  • Transaction and payment authorization
  • Fraud detection and investigation
  • Regulatory compliance, auditability, and control validation

Why Institutions Are Re-Architecting Identity

Leading financial institutions are responding by treating identity as shared infrastructure rather than a collection of isolated tools. This shift reflects a broader recognition that identity assurance must be consistent across channels, products, and transaction types.

An upgraded identity foundation must:

  • Establish high confidence in who is transacting, not just who is accessing a system
  • Support privacy-aware verification methods appropriate for regulated environments
  • Scale across digital banking, payments, and internal platforms
  • Integrate with core banking, payments, and risk systems
  • Align with U.S. regulatory, data residency, and resiliency requirements

NEC Digital ID: Built for Financial-Grade Trust

NEC Digital ID is designed to support this infrastructure-level role. Rather than focusing on a single authentication method, NEC Digital ID provides a comprehensive identity capability that supports authentication, identity verification, and transaction protection across digital financial services. This breadth allows institutions to apply appropriate levels of assurance based on transaction risk, channel, and regulatory context.

NEC Digital ID supports cloud, on-premises, and hybrid deployment models, enabling institutions to align identity architecture with regulatory obligations, internal risk frameworks, and existing technology investments.

Security and compliance are embedded into the design. Advanced biometric verification, multi-factor authentication, and adaptive risk controls help financial institutions address account takeover, unauthorized transactions, and fraud while supporting AML, KYC, and privacy requirements.

NEC’s experience delivering large-scale, mission-critical identity systems across government, defense, and highly regulated commercial environments in the United States informs this approach.

For additional perspective on how digital identity supports secure financial services in the U.S. market see:

Digital ID for Venues: The Identity Layer You Can Trust (and Explain) 

Digital ID for Venues: The Identity Layer You Can Trust (and Explain) 

Posted by Aneta Ciurkot on Posted in Biometrics, Digital ID, Hospitality Tagged , ,

If you build or run technology for a stadium or arena, you already know the truth: identity is everywhere, even when no one wants to think about it. 

It shows up at the gate. In premium areas. At staff entrances. In vendor access. In loyalty. In age-restricted purchases. In incident response. And the more digital your venue becomes, the more those touchpoints depend on something a person has (a QR code, a phone, a credential) instead of who a person is. 

That’s why we’re seeing a clear shift: venues are thinking beyond single checkpoints and toward the full in-stadium experience where fans aren’t repeatedly asked to pull out a phone or re-confirm who they are at every moment that matters.

At NEC, we built Digital ID and Identity Cloud Service (ICS) to support this at venue scale – securely, responsibly, and in a way you can clearly explain to stakeholders and fans.  

Why this matters now: the old tools don’t answer the right question 

Traditional venue security and access tools: turnstiles, bag checks, metal detectors can help manage risk, but they don’t reliably answer the question venues increasingly need to answer: 

“Is this person the right person for this access?” 

Even modern digital tools can fall short. Tickets can be shared. Accounts can be taken over. Credentials can be passed around. And every extra check you add to compensate becomes another point of delay and another operational strain. 

Facial biometrics change the model: instead of repeatedly asking guests to present something, we can confirm identity through presence—securely, quickly, and with controls that respect choice and privacy.  

What venues and fans actually get from Digital ID 

This only works when the value proposition is real for both sides. 

For fans, the “job” is simple: get into the venue and move through key moments without repeated device dependence. Once a fan chooses to enroll, identity confirmation can happen without repeatedly presenting a phone, code, or physical credential—making interactions feel faster and more natural. 

For clubs and venue operators, the job is operational: increase identity assurance across multiple touchpoints—entry, staff zones, VIP, vendor access—without forcing a full rebuild of infrastructure. We designed our approach to integrate into existing environments via APIs and SDKs and scale across use cases rather than staying locked to a single lane or single checkpoint.  

The security question: “What exactly are you storing—and what aren’t you?” 

This is where most Digital ID conversations succeed or fail. So we address it directly. 

Our venue-focused approach is designed around privacy-by-design principles and strong controls, including: 

  • Encrypted biometric templates (not stored photos). 
    At NEC, our Digital ID technology converts a face scan into an encrypted biometric template (a mathematical representation of facial features). In this model, we do not store photos, and these templates cannot be reverse-engineered.  
  • Liveness detection. 
    We use liveness detection to help confirm the person is physically present—so it’s not a photo, video, or mask. 
  • Proven accuracy (independently benchmarked). 
    NEC’s face recognition technology has consistently ranked at the top in NIST’s face recognition benchmark testing.  
  • Cloud-native orchestration with Identity Cloud Service (ICS). 
    ICS is our identity verification service designed to deploy quickly and scale—supporting 1:1 verification, 1:N search, and optional liveness and presentation attack detection capability, with secure tenant onboarding and administration.  

What a responsible rollout looks like

If we want fans to adopt Digital ID in a stadium environment, the bar is higher than “it works.” It has to be explainable, governed, and predictable at scale.

That’s why we see three non-negotiables in successful deployments:

  1. Choice is visible and real
    Digital ID must be opt-in, with a clear alternative. Adoption grows when fans understand what they’re signing up for and how to unenroll. 
  2. Purpose is limited and systems stay separated
    A responsible design minimizes data and prevents “one giant database” thinking. Ticketing, payments, and security/watchlist workflows should remain distinct systems with clear governance and documented purpose.
  3. Performance holds up in the real world
    Venue conditions are not lab conditions. Hats, sunglasses, rain, low light, face paint—these are normal. That’s why real-world testing across conditions (and demographics), plus tuned thresholds and fallback processes, are part of doing this responsibly. 

Under that model, Digital ID becomes what venues actually need right now: an identity layer that can support multiple moments across the venue journey, not by adding more steps, but by reducing how often we ask fans to prove who they are. 

And when we design it with privacy and security as the foundation, using encrypted biometric templates and controls that are built for trust, Digital ID can scale in a way that’s good for fans and operationally sound for venues.

Scaling Facial Identity Authentication Across the Venue Experience

Scaling Facial Identity Authentication Across the Venue Experience

Posted by Aneta Ciurkot on Posted in Biometrics, Cloud, Digital ID Tagged , , , ,

Venues and arenas are under growing pressure to deliver experiences that feel easy, intuitive, and secure, even as attendance grows and operations become more complex. Fans expect to move through spaces without unnecessary delays, repeated checks, or constant reliance on devices. For venue operators, the challenge is how to support that experience while maintaining confidence in who is accessing services and spaces.

Facial identity authentication is increasingly being explored as a way to address this challenge. When implemented responsibly, it allows identity verification to happen naturally in the background, reducing the need for fans to repeatedly present tickets, phones, or physical credentials. A single identity authentication capability can then be applied across multiple moments in the venue journey, wherever identity verification or authentication is required.

Identity Cloud Service (ICS) has been developed to support this approach, providing a secure and privacy-focused way to verify and authenticate individuals using facial biometrics in environments such as large venues and arenas.

Making Identity Authentication Easier for Fans

In large venues, identity is rarely the focus of the experience, but it is often a source of effort. Fans are accustomed to pulling out phones, opening apps, scanning codes, or presenting credentials at multiple points, even within a single visit.

Facial identity authentication changes that dynamic. Once a fan has chosen to enroll, identity confirmation can take place without requiring them to actively present anything at each interaction. The experience becomes simpler because identity is recognized rather than repeatedly requested.

ICS is designed to support this model by establishing identity authentication outcomes that can be applied across different use cases, where appropriate. Instead of asking fans to repeatedly demonstrate who they are, the system allows identity to be confirmed in a consistent and unobtrusive way, making interactions feel faster and more natural.

Entry Designed Around Flow, Not Devices

Entry is one of the most visible and time-sensitive moments in any venue. Large volumes of fans arrive within short time windows, and even small delays can quickly affect the overall experience.

ICS supports facial authentication for entry scenarios where venues choose to offer it. For enrolled fans, this means identity can be confirmed as they approach access points, without needing to pull out a phone, scan a code, or present a physical credential. Authentication is performed using biometric templates rather than stored facial images, and the original image is not required for subsequent verification. Used alongside existing ticketing and access control systems, this approach helps venues support smoother entry processes while maintaining appropriate levels of identity assurance and privacy control.

Payments Without Breaking the Experience

Once inside the venue, convenience becomes critical. Concessions and merchandise purchases are often made under time pressure, and the need to reach for a wallet or phone can slow things down.

Identity service does not process payments or store financial information. Instead, it can be used to authenticate the individual authorizing a transaction. In facial authentication scenarios, this allows a purchase to be confirmed without the fan needing to present a card or device at the point of sale, while payment credentials remain securely managed by existing payment providers. This approach allows identity to support faster transactions without increasing the venue’s exposure to sensitive financial data.

Insight That Respects Boundaries

Operational insight is essential for improving venue performance, from understanding arrival patterns to identifying peak demand across services. At the same time, venues must meet expectations around transparency and responsible data use.

Identity Cloud Service is designed to support insight derived from authentication events rather than continuous monitoring. Configurable retention periods and access controls allow venues to determine how identity-related data is used, how long it is retained, and for what purpose.

This enables venues to learn from patterns and trends without extending identity or compromising privacy.

Privacy and Ethics as a Foundation

The use of facial biometrics in public environments requires a strong focus on ethics and trust. Identity Cloud Service is designed with privacy-by-design principles, using template-based biometric technology, purpose limitation, and strict access controls.

Enrollment is voluntary, usage is governed, and deletion can be requested through the relying party. These principles reflect lessons learned from real-world deployments in sports and venue environments, where public acceptance depends on transparency, choice, and clear communication.

Read more about ethics and privacy in facial biometrics in this NEC Today article focused on the sports industry.
https://nectoday.com/ethics-privacy-in-facial-biometrics-lessons-from-the-sports-industry/

Applying Facial Identity Authentication Where It Adds Value

ICS has been applied in live arena environments, supporting facial identity authentication at scale while operating within defined privacy and regulatory frameworks. These deployments show how a single facial authentication capability can be extended across multiple use cases, rather than limited to a single point in the fan journey.

As venues continue to evolve, facial identity authentication is increasingly viewed as an operational capability that helps make experiences easier for fans while supporting efficiency and trust for operators. When implemented thoughtfully, it fades into the background, enabling smoother interactions without becoming the focus of attention.

Learn more about Identity Cloud Service for enterprises here: https://info.necam.com/identity-cloud-service-for-enterprises