2K Face Scan: 13 Photos Amazon Stores Indefinitely

Here's a weird fact to sit with tonight: somewhere in NBA 2K's history, an unknown number of players took out their phone, opened an app, turned their head slowly in a circle, and handed over something a lot more valuable than a selfie. They handed over the actual geometry of their face. Not a photo. Not a filter. A math model, precise enough that a computer can pick that one face out of a crowd. And according to legal filings, nobody fully spelled out how long that model would stick around.

A 2K face scan takes 13 photos of your face through your phone's camera, turns those photos into a 3D geometric model on a cloud server, and that model can outlast your NBA 2K season, your console, and possibly your memory that you ever did it.

What Actually Happens During a 2K Face Scan (And Why It's Not Just a Photo)

When you fire up the 2k face scan feature on your phone, the app asks you to slowly rotate your head while the camera fires off a burst of images. Specifically, it captures 13 separate photographs from slightly different angles. The app uses those angles to reconstruct a face in three dimensions, the same basic principle used in professional 3D facial recognition, where structured lighting patterns bounce off your face and get measured to build a shape map, according to a technical explainer from Ingenia. Your phone doesn't have industrial lighting rigs, so it substitutes multiple angles for the missing depth sensors, then software fills in the gaps mathematically.

Once those 13 images leave your phone, they get compressed and uploaded, and here's the part almost nobody expects: the company actually doing the heavy computational lifting isn't 2K's parent company Take-Two at all. It's Amazon Web Services, the cloud computing arm of Amazon. According to reporting from Yahoo Sports, AWS pulls the scan data from a Take-Two server and converts it into what's called face geometry, essentially a set of coordinates describing the exact shape and proportions of your face, and then stores a copy of that data on its own servers too. You uploaded a face. Two different companies now have a copy of the math behind it.

Why a 2K Face Scan Fails So Often (It's Not You, It's the Pipeline)

If your scan keeps getting rejected, you are not bad at holding a phone. The system demands near-perfect conditions: even lighting, a head tilt that never exceeds about 45 degrees, and zero shadows crossing your face. Tip past that angle, and the whole capture gets thrown out. According to a troubleshooting breakdown from Windows Report, the single biggest cause of a broken scan is poor lighting, followed closely by account mismatches, where your app login and your game account aren't properly linked. That means the scan, the upload, the account sync, and the in-game fetch are four separate steps that all have to line up perfectly. Miss one, and you get a completed upload that never shows up on your player card, even though the data behind it was already sent off and processed. This article is part of a series, start with How To Protect Yourself From Identity Theft 6 Free Moves Pod.

---

The 2K Face Scan Lawsuit: What It Reveals About Where Your Data Actually Goes

This is where the story stops being about glitchy avatars and turns to biometric-data collection. Take-Two, the company behind NBA 2K, faced multiple class-action lawsuits over its face scan feature. The claim: Take-Two violated the Illinois Biometric Information Privacy Act, a state law known as BIPA that requires companies to get real, informed consent before collecting biometric data (your face, voice, or fingerprints, basically the physical stuff that's uniquely you) and to tell people exactly how long that data will be kept. The lawsuits alleged that never happened properly here.

Illinois BIPA allows individuals who are "aggrieved" by a violation to sue and recover statutory damages of up to $5,000 per violation, alongside attorney's fees.

legal analysis reported by Frankfurt Kurnit Klein & Selz

Some of the early cases were dismissed, not because the accusations were wrong, but because the plaintiffs couldn't prove they'd suffered concrete harm, a distinction that kept those plaintiffs from proceeding with their claims, as explained by Zwillgen. But a separate case, aimed squarely at Amazon Web Services for its role storing the biometric data, resulted in an undisclosed settlement in 2023, according to reporting from IDTechWire. The settlement resolved that separate case without public terms.

Does 2K Face Scan Data Get Deleted After the Season Ends?

There's no evidence it does automatically. Lawsuits alleged Amazon failed to establish a clear retention policy or a set deadline to permanently delete the biometric identifiers it collected. That gap is the entire issue. Unless a user actively requests deletion, and knows to ask, the 3D geometry can simply remain on file indefinitely, tied to an account that might not even be actively played anymore.

Where 2K Face Scan Content Goes Viral: NBA, TikTok, and the App's Bigger Reach

Part of why this topic keeps resurfacing has nothing to do with courtrooms. It's because face scan fails have become genuinely entertaining content. Search TikTok or Twitch and you'll find clips of scans warping into nightmare fuel, players uploaded mid-blink turning into something out of a horror movie, and the clips go viral precisely because the failure is so visually strange. A bad scan on nba 2K doesn't just annoy the player, it becomes content. People post the results, the posts rack up views on tiktok, and the whole cycle reinforces itself. Someone sees a broken scan go viral, thinks "I have to try this," downloads the app on their android phone, and the data collection pipeline picks up a brand new face.

That's the strange feedback loop nobody designed on purpose. A privacy story turned into a meme format. And every meme, every clip, every "my scan came out looking like a Sim gone wrong" post is downstream of the exact same technical process: 13 photos, a conversion into geometry, a server, and very little public understanding of what "storage" actually means once your face becomes math.

---

The Big Misconception: "If My Avatar Looks Right, My Data Must Be Handled Right"

Here's the mistake almost everyone makes, and honestly, it's an understandable one. You scan your face, you see a loading spinner, and then your player card shows up looking (more or less) like you. Success, right? Transaction closed. That's how the whole interaction is designed to feel. But the appearance of your avatar tells you exactly one thing: the rendering worked. It tells you nothing about where the underlying geometry lives, who has access to it, how long it's kept, or whether real consent was collected before any of it happened. Previously in this series: Reverse Image Search Why A 95 Match Proves Nothing Podcast.

People believe the myth because the feedback loop is so visual and so immediate. You don't see a server. You don't see Amazon's infrastructure quietly holding onto a mathematical description of your cheekbones and jawline. You see a face on a screen, and your brain (reasonably!) treats visible success as proof that everything behind the curtain is fine too. That's not stupidity, that's just how interfaces are built to feel finished. The lawsuits over 2K's face scan tech exist precisely because a feature can work perfectly on the surface while the data pipeline underneath violates consent standards nobody explained to the person holding the phone.

What you see	What actually happened
Avatar appears in NBA 2K	13 photos converted into a stored 3D face geometry file
Upload spinner finishes	Data sent to Take-Two server, then pulled and processed by Amazon Web Services
Scan looks broken or the face never shows up	Account mismatch or lighting failure, but the attempted scan data can still persist
You stop playing NBA 2K	No confirmed automatic deletion of the biometric geometry on file

Face Scan Errors: How Do You Resolve Facescan Errors When the App Shows a Broken Upload?

Most fixes start with the basics. Log out and log back into your linked account so the app and the game are reading the same profile, since account mismatches are the top cause of a scan that uploads but never appears. Redo the scan in bright, even light with your head turned no more than 45 degrees. If it still fails after that, the issue is very likely a version sync problem between your app and the game itself, not something you're doing wrong.

This is where a group like CaraComp spends most of its time: not judging any single game's feature, but helping regular people understand what "biometric" actually means once it leaves your phone, and where to look first if you want to know what a company is holding onto in your name.

What "2K Face" Data Retention Should Teach You About Every Face Scan You've Ever Done

Step back for a second. NBA 2K isn't unique here, it's just the one that got sued and made headlines. Practically every app that offers a face scan, whether it's a game, a filter app, or an identity check, is running some version of the same pipeline: capture multiple angles, convert to geometry, store the result somewhere, hope you never ask where. The 2k face scan lawsuits are useful precisely because they're documented and public. They show, in black and white legal filings, that a feature can feel casual and voluntary to the user while functioning, technically and legally, as a serious biometric collection event.

The gap between "make a fun avatar" and "generate a persistent face model on someone else's server" is the whole story. A face-scan failure can leave you with no avatar, while the 13-image upload may still have created data the user needs to ask about. That is why a working, or broken, avatar is not an answer to the retention question.

2k face scan: Frequently Asked Questions