B ∙ R ∙ A I ∙ N

Palm biometrics is getting a big boost in Central Asia as one of the world’s largest countries sees major implementation of one of the most secure biometric modalities.

Kazakhstan’s National Bank and the Agency for Regulation and Development of the Financial Market (ARDFM) have approved new rules governing how financial institutions must verify customers using state‑held biometric data.

The framework formalizes biometric login and identity checks across banking apps, remote onboarding and high‑risk financial transactions, and introduces palm‑vein authentication as a regulated modality alongside facial recognition.

The new system has banks authenticating users by comparing live biometric samples against reference templates stored in the National Bank’s Identification Data Exchange Center, according to El.kz.

Customer biometrics will be collected through secure video channels or certified biometric scanning devices and transmitted to the unified state system for verification, with a match threshold of 95 percent required for successful authentication.

All attempts will be logged and retained for at least five years, both by the state system and by financial institutions after a customer relationship ends.

Palm‑print and palm‑vein authentication are being added for the first time, enabling banks to verify users based on the vascular patterns and surface lines of the hand. The rules prohibit the use of a customer’s smartphone for palm‑based verification, requiring specialized hardware or secure terminals instead.

Users will have three attempts to authenticate, according to reporting by The Caspian Post. If palm verification fails, banks must fall back to face biometrics. The regulations also include alternative pathways for people with disabilities, such as video‑based identification or specialized assistive technologies.

Biometric verification will now be mandatory for remote account opening along with initial registration in digital banking services, and for issuing electronic digital signatures. The same applies for updating customer data, granting loans above a regulatory threshold and certain in‑branch or microfinance transactions.

Microfinance organizations will also be permitted to use biometrics for higher‑value microloans. The move follows earlier restrictions introduced in March that banned online loan issuance without biometric verification.

Alongside the regulatory rollout, palm‑vein payment systems are gaining traction in Kazakhstan’s retail and service sectors. These systems link a user’s biometric signature directly to a bank account, enabling payments without cards, phones or cash.

Kazakhstan’s adoption of multimodal, state-anchored biometrics places it among a growing group of countries using centralized identity databases to secure financial services, with palm‑vein technology now joining face recognition as a regulated authentication method.

Kazakhstani startup Biometric.Vision struck a deal to supply biometric ID services including liveness detention for customers of the National Bank of Kazakhstan in 2024. The company was one of several, along with Alaqan and Oqylyq.kz.

Kazakhstan-based startup Alaqan demonstrated a palm vein biometrics scanner which uses infrared sensors in 2024. Alaqan developed products for payments that were deployed to coffee shops and schools. More than 140 schools across Kazakhstan were using the system for meal tracking and other applications, and the company planned to roll out its technology in Georgia and Türkiye.

Palm-based biometrics is gaining ground in healthcare, payments and blockchain, and even getting standardized for automated forensics. A palm biometric identity verification system has received venture funding to tackle the threat of deepfakes and AI-generated identities.

According to recent research from Handwave, U.S. consumers are increasingly open to palm biometrics. Handwave CEO Janis Stirna talked through the possibilities of the palm on the Biometric Update Podcast, going through plans to leave a bigger handprint on the U.S. market.