Mastercard is testing a smartphone app that uses facial recognition to verify online purchases.
Users in the trial can hold their phone up as though taking a selfie to approve transactions.
“The new generation, which is into selfies… I think they’ll find it cool,” the firm’s security expert Ajay Bhalla told CNN.
One security expert told the BBC facial recognition should be complemented with “extra layers of security”.
“Google tried facial recognition on Android phones and there were a lot of problems in the early days”, said Ken Munro, security researcher at Pen Test Partners.
“People realised you could take a photo of somebody and present it to the camera, and the phone would unlock.”
Google admits its facial recognition is “less secure than a pattern, PIN or password” on the website for one of its devices.
Mastercard’s app asks users to blink to prove that they are human, but even this has been spoofed in the past.
“People took photographs and animated them, drawing eyelids on,” said Mr Munro. “There have been advances in biometrics since then, but they’re not quite there yet.”