Facial Recognition Security App Threat Report Q4 2025

This document is an App Threat Report for Q4 2025, focusing on the state of facial recognition security within the financial sector. It outlines the increasing threats posed by deepfake attacks and other methods aimed at bypassing facial authentication systems. The report details various attack types, including unauthorized access to bank accounts and identity theft, and discusses the motivations behind these attacks, such as financial gain and regulatory manipulation. Additionally, it describes the regulatory responses from authorities like the Hong Kong Monetary Authority regarding biometric verification systems. The report also explains the facial recognition process, highlighting the difference between using system biometry services and facial recognition SDKs. It categorizes attacks into application, system, and hardware levels, providing insights into the methods attackers use to manipulate camera feeds. The report concludes with a discussion on countermeasures and the importance of securing facial recognition technologies in banking applications.