Bad Lighting? Ticketmaster Keeps Your Face 3 Years. A Good Selfie? 60 Days.

Say you're buying concert tickets. Ticketmaster asks you to scan your face and hold up your ID. Your camera glitches, or the lighting in your kitchen makes you look like a suspect in a true crime documentary, and the check fails. Here's the part nobody tells you: that failed selfie doesn't just disappear. It can sit in a database for three years. If the check had worked? Gone in 60 days.

Let's slow down on that math for a second, because it's genuinely strange. TechTimes reported that Ticketmaster's identity verification runs through a third-party provider, which uses your phone camera to confirm you're a real, live human (not a photo of a photo — that's what people in this industry politely call a "liveness" check, but really it's just "prove you're not holding up a picture of your face") and then compares that live scan to your government ID.

When it works, your data — your face, basically — is wiped in 60 days. When it doesn't work, it can stick around for three years. That's not a small gap. That's the difference between "we deleted the thing that identifies you" and "we're keeping this file open long enough to see two presidential elections go by." This article is part of a series — start with Biometric Binding Id Verification Explained.

Why the "Failed" Pile Is the One to Worry About

Here's the thing that should bug you: a failed check doesn't mean you did anything wrong. It could mean your ID photo is a decade old and you grew a beard. It could mean your phone camera is garbage. It could mean the app hiccupped. Or — sure — it could mean someone actually was trying to pull a fast one with a stolen ID. The problem is the system doesn't seem to separate "honest mistake" from "attempted fraud" before deciding how long to keep your face on file. Everyone who fails, for any reason, gets thrown into the same three-year bucket.

Compare that to how identity checks are supposed to work under the federal government's own rulebook. The National Institute of Standards and Technology — NIST, the agency that literally writes the technical standards companies point to when they want to look responsible — requires that companies document their retention periods and be able to publicly justify why they're keeping biometric data as long as they are, especially when there's no easy way for the person to ask for it to be deleted. Ticketmaster has published the retention windows — 60 days versus three years is right there for anyone to read. What's missing is the "why." Why three years specifically? Why not six months? Why not one year? Nobody's saying.

The distinction between successful and failed retention periods has fueled privacy concerns among customers, particularly given that the identity verification process has generated notable pushback from ticket buyers concerned about the amount of sensitive personal data being requested. — reporting from TechTimes

The Fraud Argument (And Why It's Only Half the Story)

Now, to be fair to Ticketmaster and its provider for a second — because it's easy to just be outraged and skip the nuance — there's a real argument buried in here. Ticket scalping and resale fraud cost the industry serious money every year, and if the same person keeps trying to buy tickets under fake or stolen identities, a company would want a record of that pattern. That's not crazy. Comparing a new failed attempt against old failed attempts is a genuine security tool, similar in spirit to concerns raised elsewhere about long-retention biometric fraud databases in other industries, like tax verification. Previously in this series: That Prove Youre 18 Pop Up One Version Forgets You One Keeps.

But here's where it falls apart: that logic only justifies keeping data on people who were actually attempting fraud. It does nothing to explain why someone whose check failed because of bad lighting gets lumped into the same three-year holding pen as someone running an actual scam. If you can't tell the difference between "camera glitch" and "criminal," you shouldn't be treating both cases identically. That's not fraud prevention. That's just... hoarding data and calling it security.

What You Can Actually Do About This

If you've ever wondered whether a photo, a video, or a "verified" profile online is really what it claims to be, that's exactly the question this whole industry exists to answer — and honestly, that's a good thing when it's done right. The problem isn't that companies check identities. It's that once they've checked yours, you have almost no visibility into what happens next.

So here's one concrete thing worth doing: before you ever do a face scan for any company — ticket sites, banking apps, whatever — search for their "biometric privacy notice" or "biometric privacy policy" (Ticketmaster actually has one posted publicly). Look specifically for two numbers: how long they keep your data if the check succeeds, and how long they keep it if it fails. If those two numbers are wildly different — like 60 days versus three years — and there's no plain explanation for the gap, that's your signal to ask questions before you scan your face into their system. A company that can tell you exactly why should get more trust than one that just tells you what. Up next: Your Real Id Can Still Be Used To Steal 47 Billion Heres The.

The Part That Should Actually Worry You

Here's where it gets interesting: nobody's tracking whether these three-year fraud files actually catch repeat fraudsters, or whether they're just digital lint traps — full of harmless people's faces, sitting there because deleting data is apparently harder than collecting it. If Ticketmaster and its provider wanted to prove this system works, they could publish numbers: how many of those three-year retained faces actually turned out to be repeat fraud attempts versus honest mistakes. They haven't. And until they do, the three-year window looks less like a security measure and more like a company deciding that "we might need it later" is reason enough to keep your face on file longer than most people keep their car.

Think about that for a second: the version of you that fails — tired, badly lit, holding your phone at a weird angle at 11pm trying to snag concert tickets before they sell out — gets remembered longer than the version of you that succeeds. If that's not a design flaw, someone owes the rest of us an explanation for why it's a feature.