Your Rewards Points Just Became a Bribe for Your Face

Imagine opening your favorite payment app one morning and finding out your points — the ones you've been stacking for months — are now frozen. Not because you did anything wrong. Not because you were hacked. Just because you haven't uploaded a photo of your face and your government ID yet. That's exactly what happened to millions of people in Japan this summer, and if you think it can't happen to the apps on your phone, I'd read a little further before deciding that.

What Actually Happened

On June 2, 2026, BigGo Finance reported that PayPay — Japan's dominant mobile payment platform — revised its rewards program. The change was simple, brutal, and almost certain to be buried in a terms-of-service email nobody opened: users who had not completed identity verification would no longer earn any point rewards at all. Not reduced rewards. Not fewer perks. Zero.

Social media in Japan responded the way you'd expect. People called it a "downgrade." Some were furious. Others were just confused about why their points suddenly stopped accumulating. PayPay framed it as a security improvement. And technically? They're not wrong. But the security angle is only half the story — and arguably the less interesting half.

Here's the part that matters for the rest of us: PayPay didn't need a law to force this change. No regulator required it. The company looked at its fraud problem, looked at its 74 million users, and decided the smartest move was to make identity verification feel like the obvious, financially sensible choice — rather than something they could demand outright.

The Real Reason They Did This

PayPay had a genuine fraud crisis. Criminals were exploiting the app's money transfer tools — creating fake accounts, generating fake payment links, and using the "My Code" QR feature to launder money. So starting June 18, the app made identity verification mandatory just to access those transfer features at all. That part makes complete sense. This article is part of a series — start with Europe Now Scans Your Face At The Border And Keeps It For 3 .

But the rewards change is different. You can still use PayPay to pay for your coffee without verifying. You just won't earn a single point doing it. That's not fraud prevention — that's a company using financial incentives to push tens of millions of people toward sharing their face, their government ID, and their personal data.

And look — it works. People hate losing money more than they hate filling out forms. Behavioral economists have a name for this (loss aversion — the very human tendency to feel losses about twice as sharply as equivalent gains), and PayPay is using it masterfully. They're not demanding verification. They're just making non-verification progressively more expensive, one missing reward point at a time.

"Biometric authenticated payments, once considered emerging, have become mainstream, with consumer demand growing and merchants starting to incorporate them at increasing rates." — Visa, as reported by Payments Dive

Visa isn't talking about some future state. Biometric payments — meaning payments confirmed by your face, fingerprint, or other body-based identifier — are already here and expanding fast. Fortune Business Insights puts the global biometric payment market at $13.48 billion in 2026, on track to hit $44.69 billion by 2034. That is not a niche. That is an industry sprint.

This Is Happening Everywhere — Quietly

PayPay is just the loudest recent example. The broader pattern is unmistakable: payment apps, loyalty programs, and digital wallets are steadily linking your rewards and permissions to how much of yourself you're willing to share. Verified users on PayPay get higher limits for topping up their accounts, access to international payments, and — crucially — full protection if their account is used fraudulently without their knowledge. Unverified users get none of that.

Think about how many apps you use that offer some version of rewards: grocery store apps, airline miles, credit card points, retail cashback. Now think about how many of those are not already quietly collecting identity information in the background. Some of them are. More of them will be. Previously in this series: That Perfect Hotel Photo 1 In 5 Is Fake And Europe Just Gave.

FinancialContent tracks this shift closely, noting that user adoption of biometric payment methods is accelerating specifically because transaction speed improves and fraud drops when identity is confirmed at the point of payment. The security benefits are real. But so is the data collection that comes with it.

The Question Nobody's Asking Out Loud

Here's what gets me about the PayPay story. The company's official reason is fraud prevention. Fine — that's legitimate. But the mechanism they chose reveals something about where the whole industry is heading: identity verification is becoming the currency you pay with to get the full version of an app.

Not the secure version. The full version. The one with rewards, higher limits, international features, fraud insurance. The unverified version still works — you can still tap your phone to pay — but it's increasingly a stripped-down experience designed to feel slightly inadequate. Like using a streaming service on the free tier and watching the same ad for the same product seventeen times until you finally pull out your credit card.

According to Paravision, the infrastructure making all of this possible — the systems that check whether your face matches your ID, confirm you're a real live person and not a photo or a deepfake (a fake video or image generated by AI), and link your verified identity to your payment account — has been maturing rapidly. The technology isn't the bottleneck anymore. Consumer habit is. And apps like PayPay are solving the habit problem with the oldest trick in the book: make the alternative cost money.

If you've ever looked at a photo of someone online and wondered whether that person is who they claim to be — a seller on a marketplace, a match on a dating app, a contact asking for money — that's the exact question identity verification systems are built to answer. The difference is that PayPay's system is checking you. And once that check exists, it exists. A record of your verified identity, attached to your account, sitting in a database you'll never see. Up next: Locked Phone Sms Privacy Gap.

What to Actually Do Right Now

You don't have to refuse every identity verification prompt that comes your way — sometimes the security tradeoff genuinely works in your favor. Fraud protection on a payment account is valuable. But there's a difference between verifying with a major financial institution that has legal obligations around your data and verifying with an app that's primarily a loyalty program with a payment feature bolted on.

The one thing worth doing before you tap "verify" on anything: spend 90 seconds reading the privacy policy section on data retention and third-party sharing. Most apps bury this. The ones that share your biometric data (your face, fingerprints, or other body-based identifiers that are unique to you) with marketing partners will say so — in small type, in language designed to seem boring. It's not boring. It's a permanent record of your face attached to your purchasing behavior, and unlike a password, you can't change it if something goes wrong later.

The identity verification market is projected to hit $29.32 billion by 2030, according to MarketsandMarkets — and a huge chunk of that growth is coming from exactly this kind of consumer-facing rewards integration, not just banks and border security. That market exists because companies figured out that people will share a lot more about themselves when the alternative is losing something they already feel like they earned.

PayPay's 74 million users didn't vote on this change. They woke up one day and found out the rules had shifted — and that the cost of opting out wasn't a security risk, just a quieter account with fewer perks. That's the new shape of the deal. The app still works. You just have to decide whether the points are worth the price of admission — and whether you've actually read what's on the ticket.