{"id":551,"date":"2026-05-26T16:20:39","date_gmt":"2026-05-26T16:20:39","guid":{"rendered":"https:\/\/redzine.co.uk\/index.php\/2026\/05\/26\/from-gait-analysis-to-fingerprint-theft-how-worried-should-we-be-about-the-latest-advances-in-biometric-technology\/"},"modified":"2026-05-26T16:20:39","modified_gmt":"2026-05-26T16:20:39","slug":"from-gait-analysis-to-fingerprint-theft-how-worried-should-we-be-about-the-latest-advances-in-biometric-technology","status":"publish","type":"post","link":"https:\/\/redzine.co.uk\/index.php\/2026\/05\/26\/from-gait-analysis-to-fingerprint-theft-how-worried-should-we-be-about-the-latest-advances-in-biometric-technology\/","title":{"rendered":"From gait analysis to fingerprint theft, how worried should we be about the latest advances in biometric technology?"},"content":{"rendered":"<figure><img decoding=\"async\" src=\"https:\/\/images.theconversation.com\/files\/737474\/original\/file-20260521-57-ix78m4.jpg?ixlib=rb-4.1.0&amp;rect=222%2C0%2C4497%2C2998&amp;q=45&amp;auto=format&amp;w=1050&amp;h=700&amp;fit=crop\" \/><figcaption><span class=\"caption\"><\/span> <span class=\"attribution\"><a class=\"source\" href=\"https:\/\/www.shutterstock.com\/image-photo\/businessman-portrait-digital-interface-face-id-1019222008\">GoldenDayz\/Shutterstock<\/a><\/span><\/figcaption><\/figure>\n<p>You unlock your phone with your face, your fingerprint sends your laptop whirring into action, you pass airport security by glancing at a camera. Biometric technology has become so woven into the daily routine that for many people, it barely registers any more.<\/p>\n<p>That invisibility is part of the point. These systems are usually fast, convenient and feel secure. Unlike a <a href=\"https:\/\/theconversation.com\/topics\/passwords-5432\">password<\/a>, you can\u2019t forget your face. But that doesn\u2019t mean they are without risk.<\/p>\n<p>Biometrics fall into two broad families: <a href=\"https:\/\/theconversation.com\/topics\/physiology-3322\">physiological<\/a> (fingerprints, faces, irises, even nailbed patterns) and <a href=\"https:\/\/theconversation.com\/topics\/behavioural-science-10812\">behavioural<\/a> (how you walk or type, the rhythm of your speech, the angle you hold your phone).<\/p>\n<p>Both forms are already being widely used \u2013 you just may not realise it. Many banks and retailers now <a href=\"https:\/\/www.nature.com\/articles\/s41598-025-13571-6\">monitor how you interact with your device<\/a> \u2013 from swipes, taps and scrolls to the angle you hold your phone, the rhythm of how you move between fields, and the pressure of your touch. If someone else picks up your unlocked phone and tries to access your banking app, this can automatically trigger a fraud alert.<\/p>\n<p>My <a href=\"https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167404822001754\">research with colleagues<\/a> even shows it\u2019s possible to infer a user\u2019s name and native language from the timing patterns of their keystrokes.<\/p>\n<p>The graphic below shows the full extent of biometric technologies. Those marked dark green are in widespread commercial and government use today \u2013 including less-familiar examples such as the <a href=\"https:\/\/www.pcs.com\/en\/services\/blog\/biometrie\/palm-vein-recognition\">veins in your hand<\/a> and other bodily <a href=\"https:\/\/www.ncsc.gov.uk\/collection\/biometrics\/vein-pattern\">vein patterns<\/a>.<\/p>\n<p><strong>Physiological and behavioural biometric systems:<\/strong><\/p>\n<figure class=\"align-center zoomable\">\n            <a href=\"https:\/\/images.theconversation.com\/files\/737674\/original\/file-20260522-57-j9qj02.png?ixlib=rb-4.1.0&amp;q=45&amp;auto=format&amp;w=1000&amp;fit=clip\"><img decoding=\"async\" alt=\"Illustration of current and future biometric technologies\" src=\"https:\/\/images.theconversation.com\/files\/737674\/original\/file-20260522-57-j9qj02.png?ixlib=rb-4.1.0&amp;q=45&amp;auto=format&amp;w=754&amp;fit=clip\"><\/a><figcaption>\n              <span class=\"caption\">Biometric technology colour-coded by use status, from active to still in research.<\/span><br \/>\n              <span class=\"attribution\"><a class=\"source\" href=\"https:\/\/www.lboro.ac.uk\/departments\/compsci\/staff\/oli-buckley\/\">Oli Buckley<\/a>, <a class=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by\/4.0\/\">CC BY<\/a><\/span><br \/>\n            <\/figcaption><\/figure>\n<p><a href=\"https:\/\/www.techrxiv.org\/doi\/full\/10.36227\/techrxiv.19425254.v1\">Gait analysis<\/a> \u2013 reading how you walk \u2013 is already used for security and surveillance purposes, from venue access to detecting potentially suspicious behaviour. You can wear a mask, pull up a hood, avoid looking at a camera \u2013 but you can\u2019t easily change how you walk.<\/p>\n<p>China\u2019s authorities have been <a href=\"https:\/\/apnews.com\/article\/bf75dd1c26c947b7826d270a16e2658a\">using this technology<\/a> for nearly a decade. And in 2023, the UK\u2019s Biometrics and Forensic Ethics Group <a href=\"https:\/\/www.biometricupdate.com\/202303\/uk-biometric-ethics-group-to-consider-implications-of-gait-and-voice-recognition\">flagged gait recognition for ethical guidance<\/a>. This is usually a sign that operational use isn\u2019t far behind.<\/p>\n<p>A number of other biometric technologies (marked light green), ranging from skin texture and ear shape to micro-expressions and hand-grip patterns, are being actively researched for use in the near future. A further group (marked red) have so far only been demonstrated in the laboratory. But even body odour and breath signatures are further along than their novelty might suggest.<\/p>\n<p>What once felt like science fiction is now embedded in our everyday lives. You can\u2019t always see this technology, and you can\u2019t always opt out. But knowing it exists is the first step to understanding how much of yourself you\u2019re already sharing.<\/p>\n<h2>V is for vulnerability<\/h2>\n<p>In April 2026, financial security expert Li Chang <a href=\"https:\/\/www.scmp.com\/news\/people-culture\/trending-china\/article\/3352777\/china-tv-variety-show-exposes-scam-linking-peace-sign-selfies-privacy-risks\">showed Chinese TV viewers<\/a> how AI tools could extract a celebrity\u2019s fingerprints from a single selfie. The culprit? The classic V-sign, finger pads pointed straight at the lens.<\/p>\n<p>This built on work by Japan\u2019s <a href=\"https:\/\/phys.org\/news\/2017-01-japan-fingerprint-theft-peace.html\">National Institute of Informatics<\/a> which in 2017 showed that usable fingerprints could be lifted from photos taken up to three metres away. And phone camera technology has only got better since then.<\/p>\n<p>In the UK, police have made at least two arrests based on fingerprints lifted from photos: one from a WhatsApp image of a <a href=\"https:\/\/www.bbc.co.uk\/news\/uk-wales-43711477\">hand holding ecstasy pills<\/a>, the other when a drug dealer was identified from a photo of him <a href=\"https:\/\/www.bbc.co.uk\/news\/uk-england-merseyside-57226165#:%7E:text=A%20drug%20dealer%20was%20tracked,posted%20in%20an%20online%20chat.\">holding a block of Stilton cheese<\/a>. <\/p>\n<p>This technology can work in the other direction too. In the Chinese city of Hangzhou in July 2025, criminals reportedly <a href=\"https:\/\/www.asiae.co.kr\/en\/article\/2026051308414684001\">tried to unlock a smart door<\/a> using a photo the homeowner had posted online with his fingers visible. The attempt failed but the intent was clear. <\/p>\n<p>While this kind of targeted, technically demanding attack is still unusual, there are some precautions I would advise taking as the use of biometric technology grows.<\/p>\n<figure><figcaption><span class=\"caption\">China\u2019s use of biometric surveillance technology explained. Video: The New York Times.<\/span><\/figcaption><\/figure>\n<h2>How to protect yourself<\/h2>\n<p>First, be selective about when you agree to share biometric data \u2013 fingerprints, face, iris, voice, all of it.<\/p>\n<p>Most modern smartphones store biometric templates in a secure chip that never leaves the device. But third-party apps and workplace systems rarely offer the same guarantee.<\/p>\n<p>In July 2024, US tech giant Meta paid the state of Texas <a href=\"https:\/\/www.texasattorneygeneral.gov\/news\/releases\/attorney-general-ken-paxton-secures-14-billion-settlement-meta-over-its-unauthorized-capture\">US$1.4 billion<\/a> (\u00a31.1bn) after running facial recognition on users without consent. This followed a class-action settlement with TikTok\u2019s parent company ByteDance in Illinois <a href=\"https:\/\/globallawexperts.com\/biometric-data-lawsuits-on-the-rise\/\">for US$92 million<\/a> over similar allegations.<\/p>\n<p>So, try to keep track of which apps have access to your camera and microphone. On both iOS and Android, this takes about two minutes. And don\u2019t use biometrics as the only layer of security \u2013 make sure there\u2019s a second step.<\/p>\n<h2>Three potential biometric weakpoints<\/h2>\n<p><strong>Voice:<\/strong> This is probably the most casually surrendered biometric. <a href=\"https:\/\/theconversation.com\/ai-scam-calls-imitating-familiar-voices-are-a-growing-problem-heres-how-they-work-208221\">AI voice cloning<\/a> requires only seconds of audio to produce a convincing replica, and it\u2019s being used in fraud calls impersonating family members. This is a far more realistic \u2013 and terrifying \u2013 version of the <a href=\"https:\/\/www.fbi.gov\/news\/stories\/virtual-kidnapping\">virtual kidnapping scam<\/a> that\u2019s been around for years. Establishing a safe word with the people closest to you for any unexpected financial request is a simple and underrated defence.<\/p>\n<p><strong>Eyes:<\/strong> Iris recognition is considered robust because this coloured eye muscle has around 250 measurable features \u2013 far more than a fingerprint \u2013 and remains stable throughout your life. But the quiet expansion of eye-tracking data collected through VR headsets, for example, is going unnoticed. Check the privacy settings on any VR device you use, and be aware that <a href=\"https:\/\/perkinscoie.com\/insights\/blog\/intricacies-gaze-tracking-balancing-personalization-and-privacy\">gaze data<\/a> is increasingly treated as a commercial asset by platforms that collect it.<\/p>\n<p><strong>Fingerprints:<\/strong> Beyond being careful what you point at the camera, know where you\u2019ve enrolled your fingerprint. Workplace access systems and payment terminals vary widely in how they store and protect data \u2013 and unlike your phone, they\u2019re not legally required to tell you.<\/p>\n<p>None of this means biometric systems are broken. For most purposes, they are more secure than the passwords they are replacing. The question is not whether to engage with these systems \u2013 they\u2019re already too embedded to avoid. It\u2019s whether we\u2019re <a href=\"https:\/\/arxiv.org\/pdf\/1905.04615\">engaging with our eyes open<\/a> \u2013 eyes that are, of course, already regularly being scanned.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/counter.theconversation.com\/content\/283454\/count.gif\" alt=\"The Conversation\" width=\"1\" height=\"1\" \/><\/p>\n<p class=\"fine-print\"><em><span>Oli Buckley receives funding from UKRI (including EPSRC and ESRC). <\/span><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>GoldenDayz\/Shutterstock You unlock your phone with your face, your fingerprint sends your laptop whirring into action, you pass airport security by glancing at a camera. Biometric technology has become so woven into the daily routine that for many people, it barely registers any more. That invisibility is part of the point. These systems are usually [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-551","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=551"}],"version-history":[{"count":0,"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/551\/revisions"}],"wp:attachment":[{"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/redzine.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}