BPI's Face Scan Cannot Find the 22-Year-Old Holding the 2019 Passport
Philippine banks are tying logins to ID photos that age out before the account does. The verification fails. The branch line moves.
Open your banking app. The screen asks for a face scan. You blink, tilt, smile on cue. The app tells you to try again. Then it tells you to visit a branch.
This is the quiet rollout happening across Philippine banks right now: liveness checks tied to the photo on file from your most recent valid ID. If your passport, UMID, or driver's license photo is more than five years old, the matching engine starts throwing errors. The face on your phone does not look enough like the face on the database to clear the threshold.
Five years is a long time on a face
A 22-year-old today was 17 when she got her first passport. She has lost weight, gained weight, grown out a fringe, started wearing glasses, gotten braces off. The algorithm reads all of that as drift.
Banks frame this as fraud prevention. The Bangko Sentral has been pushing harder on know-your-customer rules since the e-wallet scam waves, and biometrics are the cheapest way for institutions to say they did their part. The cost gets pushed to you, the account holder, who now has to renew an ID before you can move your own money.
The branch line is the punishment
Getting locked out of the app means going to a branch during working hours. For anyone on a BPO shift, a freelance deadline, or a service job that does not give you a paid hour off, that is a half-day gone. Some branches will not even reactivate you on the spot. They tell you to come back with a freshly issued ID, which means a DFA appointment slot that does not exist for the next three months.
The workaround circulating in group chats: keep one ID renewed at all times, even if you do not need it for travel or driving, just so the bank's matching engine has something recent to compare against. Renewing a passport you will not use costs ₱950 for regular processing. That is a verification tax the bank does not call a verification tax.
Whose face the system was trained on
Face matching also performs worse on darker skin, on women, on anyone whose features were underrepresented in the training data. Academic audits of commercial face recognition have shown this for years. Filipino banks license these engines from foreign vendors and tune them on local datasets that nobody outside the procurement office gets to see.
The National Privacy Commission has guidance on biometric processing, but the consent flow is take-it-or-leave-it. You either enroll your face or you cannot use mobile banking. There is no middle path where you log in with a password and accept the lower transaction limit.
The bargain you did not agree to
The deal used to be simple: the bank holds your money, you log in with credentials you can replace if compromised. A password leaks, you change it. Your face leaks, you cannot change your face.
And when the match fails, the bank does not pay for your jeepney fare to the branch, your missed shift, or the ₱950 passport renewal. You do. The next time the app asks you to scan, count how many people in your barkada have already given up and gone back to over-the-counter withdrawals.
