Jul 24
Our fraud team want a second check on payments over £500. At the moment Face ID happens once when the app opens, so a payment twenty minutes later needs nothing at all.
Our compliance officer has now raised it in two audits.
HaldeniOS
Everyday banking, on your phone.
Face ID on Payments
2 Replies
Ada WhitfieldJul 24
The twenty-minute gap is the finding here, not the amount. A session that authenticates once and then stays trusted indefinitely is the thing an auditor objects to, and they're right to.
We're scoping a re-auth prompt on the confirmation step with a configurable threshold, so your fraud team can move it without waiting for a release.
Ada WhitfieldAug 15
On track for the March build. The threshold is set from your admin console rather than baked in, which was the part your compliance officer actually asked about.