Step 1
Customer gives their biometrics
Once — in the “Gosuslugi Biometrics” app or at a bank branch: a selfie and consent to biometric processing. The shop takes no part in this step and does not receive biometrics.
Biometric payments: paying by face and palm
Biometric payments let a customer pay without a card or phone: they look into the terminal camera, and the money is debited from the account linked to their biometrics. NeuroVision checks that a live person is in front of the camera, not a photo, a mask or a deepfake, and compares the face. The check against the UBS is done by your acquiring bank — customers’ faces are not stored at the till.
Biometric payment at the till
Liveness before the face comparison The payment is processed by the acquiring bank Web SDK, WebView and API
The biometric payment is processed by the acquiring bank; NeuroVision checks live presence and compares the face
Biometric payments: the customer pays with a glance, not a card
A till without a card, phone or wallet
The customer confirms who they are not with a card or PIN, but with their face. The money is still debited from the bank account: instead of “tap your card” — “look into the camera”.
- 01
The face is the key to the account, not to the shop’s database
The customer gives their biometrics to the Unified Biometric System once and allows paying with them in their bank’s app. The terminal captures the face; the check against the UBS and the debit are done by the acquiring bank. The shop does not store customers’ biometrics and must not collect them for payment.
- 02
Paying by face is dangerous without a live person check
A customer’s photo is easy to find on social media and show to the camera from a screen. So before the comparison the terminal checks that a live person is in front of it, not a printout, a mask or a video.
- 1 glance instead of a card and PIN
- 1:1 comparing a face with a single reference
- Liveness before the face is compared
Where biometric payment is accepted
Wherever it is inconvenient for the customer to take out a card or phone, and a queue is costly. The technology is the same; only the device with the camera changes.
-
Shop till
A POS terminal with a camera next to the cashier. The customer chooses biometric payment and looks into the camera — no card, phone or PIN.
-
Self-checkout
The camera is built into the till. Age for 18+ goods can be checked separately — without a selfie, from the document data: age check.
-
Café, canteen, food court
The longest queue is at lunchtime. A guest holding a tray does not have to take out a phone.
-
Transport fares
A validator with a camera at the turnstile or on board: fare payment without a card in hand.
-
Vending, kiosks, petrol stations
A machine or kiosk with no cashier: a camera on the front panel, payment without staff involvement.
-
Resorts, campuses, corporate canteens
A closed territory where people pay many times a day: a face instead of a wristband. The scheme is chosen together with a lawyer.
Four biometric payment schemes and which of them 572-FZ allows
Since 2023, organisations may not collect and store biometrics for identification on their own, and may compare faces for authentication only against UBS vectors (Part 1 of Art. 15 of 572‑FZ). So the scheme is chosen first, and the hardware second.
-
Via the UBS and the acquiring bank
The main scheme in Russia. The customer has given their biometrics to the UBS and enabled payment in their bank. The terminal captures the face, the acquiring bank, through the system of an accredited organisation, compares it with UBS vectors and debits the money (Part 4 of Art. 16 of 572‑FZ). So that a spoof does not reach the comparison, a live presence check is placed before it; how it is built into the terminal process is determined at connection. Connection to the UBS
Suitable for:
For shops, cafés, petrol stations, transport
-
Payment confirmation in an app
The customer confirms an online purchase or transfer with their face in the app instead of an SMS code. This is biometric authentication following the same path — via the UBS or a repeat check against the document. Transaction confirmation by face
Suitable for:
For banks, fintech, marketplaces
-
Face + QR
The customer shows a QR code from the app, and the terminal camera confirms that this is the phone’s owner. The QR carries the payment data, the face carries the person: a stolen phone with an unlocked screen will not help.
Suitable for:
For QR payments
-
Closed loop and palm payment
A company canteen, campus, resort: a person pays from an internal account by face or palm, and the database is kept by the organisation. This is biometrics outside the UBS, so the scheme is launched only after a lawyer’s opinion — with written consent and another payment method.
Suitable for:
At a lawyer's decision
How a biometric payment works at the till
The scheme via the UBS and the acquiring bank. The customer does the first two steps once, the last two — with every purchase. Example — paying for coffee in a café.
Step 2
Links the account to biometrics
In their bank’s app or SBPay, the customer chooses an account, enables biometric payment and gives consent. From then on they can pay with a glance at any point that accepts such payment.
Step 3
Looks into the terminal camera
At the till the customer chooses “biometric payment”. The terminal finds the face and checks that a live person is in front of it, not a photo, a screen or a mask.
Step 4
Bank processes the payment
The frame goes to the UBS for comparison via the acquiring bank. A match — the money is debited and the screen shows “Paid”. No match or the check is not passed — the terminal offers to pay by card or QR code.
What biometric payment gives the shop and the customer
-
A shorter queue
No need to look for a card, unlock a phone and enter a PIN. In a canteen, café or petrol station at peak time this is noticeable.
-
You cannot pay with someone else’s face
A card and phone can be lost or handed over, a PIN can be spied on. A face with a live check cannot be handed over.
-
Free hands
A tray, bags, a child, gloves in winter — paying with a glance requires taking nothing out.
-
A new service for the acquiring bank
A reason to offer merchants a new payment method. The live presence check can be connected ready-made rather than developed in-house.
Biometrics does not replace the card and QR code but is added to them — for those who find it more convenient. The gain is made up of small things at the till.
According to the Bank of Russia, in nine months of 2025 Russians paid for almost 146 million purchases by biometrics — nine times more than a year earlier. How the UBS works is described in the article “The Unified Biometric System (EBS)”.
How the terminal tells the customer from a photo, a mask and the next person in the queue
The till camera stands in a public place: there are queues, children, reflections and attempts at deception in front of it. Before the check against the UBS, the terminal filters out everything that does not look like a live customer who has decided to pay.
- A printout, a photo on a phone or tablet screen, a photo from social networks in front of the camera
- A mask or recorded video instead of a live face
- Deepfake: the face is generated by a neural network. Face swap in the frame
- There are other faces in the frame: the platform detects them, and what to do is up to you
- The customer turned away or left the frame — the check is not passed, it can be repeated
- A medical mask, glasses, headwear: the platform detects them, and whether to allow them is up to you
- Poor light, backlight, a face covered by a hand or too far away
- The frame passed the checks and is sent to the UBS for comparison via the bank
- Another person’s face or signs of spoofing: “suspicious” status, the payment is stopped
- “Reject” — the payment does not go through, the customer is offered another method
- “Suspicious attempt” — a sign of deception, the payment is stopped
- “Configuration” — the rule is set for your point of sale
- “Retry” — the screen shows a hint on what to fix. Learn more about protection on the page about deepfake protection
Palm payment: a vein pattern instead of a face
The palm is the second method of biometric payment. The customer holds their hand up to the scanner without touching it, and the terminal recognises them by the vein pattern under the skin. In Russia, banks are so far only testing such terminals.
-
How it works
An infrared scanner illuminates the palm: the blood in the vessels absorbs light more strongly than the surrounding tissue, and the vein pattern shows up. It is unique to each person and is not visible in a photograph — it is harder to forge than a face.
-
When the palm is more convenient than the face
Where the face is covered — protective masks, hard hats, helmets — or the customer objects to having their face filmed but agrees to a palm scanner.
-
What the law says in Russia
The Unified Biometric System currently stores only a face image and a voice recording (Government Resolution No. 772). Palm payment via the UBS will become possible if the vein pattern is added to its scope. Until then — only closed loops and only after a lawyer’s opinion.
-
Hardware and timing
Palm scanners are made by terminal manufacturers and launched by banks: the timing of a mass launch in Russia has not yet been announced. Today the working route for biometric payment is the face via the UBS.
Biometric payment and the law: the UBS, customer consent and 572‑FZ
The face image by which a customer confirms payment is biometric personal data. It is governed by 152‑FZ on personal data and 572‑FZ on identification and authentication by biometrics. Below is a summary of the norms as of October 2026. It is a guide for a conversation with a lawyer, not a legal opinion.
- Organisations and sole traders are prohibited from collecting and storing in their own systems biometrics used for identification, except collection for placement in the UBS (Clause 1 of Part 1 of Art. 15 of 572‑FZ)
- Biometrics for authentication may be processed only for comparison with UBS vectors under the terms of Art. 16 and stored for no longer than 10 days — for handling complaints (Clauses 2–3 of Part 1, Part 2 of Art. 15 of 572‑FZ)
- Organisations and sole traders may use the system of an accredited organisation to authenticate a person so that they can perform actions or confirm their intent — with their consent (Part 4 of Art. 16 of 572‑FZ)
- Data protection measures and certified encryption tools are mandatory (Parts 3 and 5 of Art. 16 of 572‑FZ)
- Only an accredited organisation may compare faces with UBS vectors in its own system (Art. 17 of 572‑FZ, Accreditation Rules — Government Resolution No. 810 of 22.05.2023)
- The UBS holds two kinds of biometrics: a face image and a voice recording (Government Resolution No. 772 of 30.06.2018)
- The palm vein pattern is not part of this scope — palm payment via the UBS is not yet possible
- Biometrics are processed only with written consent, except for the cases of Part 2 of Art. 11 of 152‑FZ; since 1 September 2025 consent to personal data processing is drawn up separately from other documents (Part 1 of Art. 11, Part 1 of Art. 9 of 152‑FZ)
- The customer gives consent to authentication when connecting payment at the bank; it can be signed with a simple or an enhanced unqualified electronic signature (Part 16 of Art. 16 of 572‑FZ)
- Refusal of authentication by biometrics cannot be a reason to refuse a service, the sale of goods or servicing (Part 13 of Art. 3 of 572‑FZ)
- A person is not obliged to provide biometrics (Part 3 of Art. 11 of 152‑FZ): a till with biometrics always keeps payment by card, QR code or cash
- Authentication with cross-border transfer of biometrics is prohibited (Part 21 of Art. 3 of 572‑FZ)
- The retention period of NeuroVision session data is set in the scenario, and personal data is destroyed on request via the API; where the data is processed is fixed in the contract
- The summary of the norms is simplified: 572‑FZ — as amended on 28.12.2024, 152‑FZ — as of October 2026, Resolution No. 772 — as amended on 03.04.2026; check the current versions in ConsultantPlus. What the UBS is and how it differs from commercial biometric systems — in the article “The Unified Biometric System (EBS)”; how to protect biometrics — “How to ensure the protection of personal and biometric data”.
Who biometric payment suits
Those who accept many small payments, process them through their own terminals or want to offer customers a new payment method.
-
Acquiring banks
- Biometric terminals for points of sale
- Live presence check before the comparison with the UBS
- Payment confirmation by face in an app Learn more
-
Retail chains
- A till and self-checkout with a camera
- Age check for 18+ goods — separately, by document
- Protection against payment with someone else’s face
-
Cafés, restaurants, canteens
- Payment at peak time without a card
- Food courts and corporate catering
- Self-service kiosks
-
Payment services and wallets
- Payment confirmation by the phone’s owner
- Face check in an app via Web SDK and WebView
- Payment confirmation without an SMS code Learn more
-
Transport and petrol stations
- Validators with a camera
- Paying for fuel at the pump
- Fares without a card in hand Learn more
-
Hotels, resorts, campuses
- Payment on site without a wristband
- Closed loop — on a lawyer’s decision
- Another payment method — always Learn more
Biometric POS terminal, self-checkout, validator: what is needed
The NeuroVision software part is the frame check: Liveness and face comparison. Capture, terminals, tills and validators are yours, your bank’s or the manufacturer’s. We select hardware requirements for your point of sale. The connection is made by your integrator or a NeuroVision partner.
-
Camera at face level
A front-facing terminal camera or a module above the till. The face is large and frontal, with no bright window behind.
Suitable for:
For a POS terminal, till, kiosk
-
Terminal app and frame check
The terminal app captures the face and sends the frame for checking: Liveness and comparison. The result returns to the app, and the payment module decides what to do next.
Suitable for:
For terminal manufacturers and acquirers
-
Connection with the bank
The payment is processed by the acquirer: via the UBS for biometrics, as usual — for card and QR.
Needed:
a contract with an acquiring bank
-
Where data is processed
The retention period of session data is set in the scenario, and where it is processed and on what terms is fixed in the contract.
Terms:
in the contract
If the customer has not given biometrics or does not want to pay with them
-
No biometrics in the UBS
The terminal does not find the customer and immediately offers a card, phone or QR code. No “give your biometrics to buy”.
-
Does not want to look into the camera
Capture starts only after the customer has chosen “biometric payment” themselves. Someone paying by card does not get into the frame and is not processed.
-
Does not pass the check
Poor light, glasses with glare, an injury. After a failed attempt — a hint and another payment method, not endless repetition.
-
A child or a stranger in the frame
A payment is not created from a face that accidentally got into the camera: biometric payment starts only after the method is chosen on the terminal.
Biometrics is an additional payment method, not a mandatory one. Refusing it cannot be a reason to refuse a sale (Part 13 of Art. 3 of 572‑FZ), so a till with a camera always accepts ordinary payment too.
The customer can at any time disable biometric payment in their bank’s app or delete their biometrics from the UBS. How to do it — in the article “The Unified Biometric System (EBS)” (section “How to check and delete your biometrics”).
How much biometric payment costs for business
The price depends on the scenario: customer registration, frame check at payment or Face API. The commission for the payment itself is taken by your acquiring bank — it is not included in the NeuroVision price.
- Enable the package
Registration in a closed loop
from 29 ₽ per session
“Document + Liveness”: passport check, Liveness and comparison of the face with the photo in the document, when a campus or resort registers the person itself.
-
Liveness and face comparison at payment: protection against photos, screens, masks and deepfakes. Terms and price — for your scenario.
- Calculate the price
Face API
on request
1:1 comparison via API with your capture interface: the terminal or app sends the frame, and the response is the check result. Terms — for your scenario.
The first month is a free test, payment only for completed checks. Prices of the other checks are in the price matrix.
Connection: terminal, app, Web SDK or KYC link
The face check is built into your terminal, website, personal account or mobile app. The scenario and checks are changed in the personal account without development.
- Result in the webhook and the API
- Scenario in the KYC editor
- 1-month test
- Documentation and demo
Terms of connection
1-month test, support under the contract, payment for checks.
Glossary: bioacquiring, UBS, Liveness and palm
Terms you will meet in a contract with a bank, a terminal specification and a conversation with a lawyer.
- Biometric payment
- A payment where the customer confirms who they are with a face or other biometrics instead of a card, phone or PIN.
- biometric payment
- Bioacquiring
- Acceptance of biometric payment at points of sale by an acquiring bank: the terminal captures the face, the bank compares it with the UBS and processes the payment.
- biometric acquiring
- UBS
- The Unified Biometric System — a state system that stores face images and voice recordings of citizens for identification and authentication. More in the article about the UBS.
- Unified Biometric System
- Accredited organisation
- A company that, under Art. 17 of 572‑FZ, may compare faces with UBS vectors in its own system and authenticate customers for others.
- accredited biometric provider
- Liveness
- A check that a live person is in front of the camera, and not a photo, a screen, a mask or a deepfake.
- liveness detection
- Biometric terminal
- A POS terminal, till or kiosk with a camera or palm scanner for biometric payment.
- biometric POS terminal
- Palm payment
- Payment by the palm vein pattern, which an infrared scanner reads without touch.
- palm payment
- Face + QR
- Payment by QR code with confirmation of the phone owner’s face.
- face + QR payment
Licences and certificates
The project «Development of a multimodal system using artificial intelligence "Neuromed" for managing the diagnostic processes of a clinic on the basis of the "Neurovision" computer vision platform» is supported by the Innovation Promotion Foundation within the federal project «Domestic Solutions»
The Neurovision computer vision platform is registered with Rospatent (certificate No. 2023661508) and included in the Russian Software Registry (entry No. 19972 of 13.11.2023)
The right to use the Platform is granted under a licence agreement concluded by Neurovision with its customers
We will choose a biometric payment scheme
Tell us where you want to accept biometric payment — till, terminal, vending, transport or a closed territory — and who your acquiring bank is. We will propose a lawful scheme and hardware, and calculate the price.
Can't put your request into words? Book a call and our team will contact you at a convenient time
Book a call
The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.
Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.
Read also
Materials on face recognition, algorithm accuracy and protection against deepfakes — in our blog.
167 18
KYC, AML and Digital Identification
Unified Biometric System (EBS): What It Is, How to Enroll Your Biometrics, and Where It’s Used
162 25
KYC, AML and Digital Identification
Liveness Detection: What It Is, How Liveness Checks Work, and Where Businesses Need It
156 23
KYC, AML and Digital Identification
Face Recognition System: How It Works, Its Accuracy, and Where It’s Used
446 13
KYC, AML and Digital Identification
Deepfakes in KYC: Detecting Face Spoofing and Protecting Video Verification
384 16
KYC, AML and Digital Identification
How to ensure the protection of personal and biometric data in KYC processes
380 23
KYC, AML and Digital Identification
Local or cloud KYC: how to choose a biometric data storage model
Frequently asked questions about biometric payments
A payment method where the customer confirms who they are with their face rather than a card or phone. They give their biometrics to the UBS once and connect payment at the bank, and at the till they look into the camera. Paying by face debits the money from the same account.
Give biometrics in the “Gosuslugi Biometrics” app or at a bank, then in the bank’s app or SBPay choose an account and enable payment by biometrics.
A contract with an acquiring bank that supports biometrics, and a terminal with a camera. The live person check and face comparison from NeuroVision can be connected via API. You do not need to build your own database of customers’ faces — by law you cannot do that outside the UBS.
No. The frame from the terminal goes for comparison to an accredited organisation, and biometrics for authentication may be stored for no longer than 10 days and only for handling complaints (Part 1 of Art. 15 of 572‑FZ).
Liveness rejects printouts, screens, masks and recorded video, and the frame is checked for signs of a deepfake and face swap. If there are signs of forgery, the payment does not go through. There is no absolute protection, so the decision on the payment stays with the bank.
The customer shows a QR code, and the camera confirms that this is the phone’s owner. The QR transmits the payment data, and the face protects against payment from someone else’s phone.
Banks are testing terminals that recognise the customer by the palm vein pattern. But the UBS stores only a face image and a voice recording, so palm payment via the UBS is not yet possible.
No. Refusing biometric authentication cannot be a reason to refuse a sale or service (Part 13 of Art. 3 of 572‑FZ). A till with a camera accepts both cards and QR codes.
At the till the customer pays without a phone; in an app they confirm an online purchase or transfer with their face instead of an SMS code. The second is described on the page on transaction confirmation by face.
The frame check at payment is on request, the terms depend on the scenario. Registration in a closed loop by document and selfie — from 29 ₽. The commission for the payment is taken by the acquirer. The first month is a free test.
