Biometric Verification: Why India Killed Its Face Database

India just walked away from a plan to link the faces of over a billion mobile phone customers into one shared database. They didn't cancel the face scans. Those are still mandatory to get a SIM card. What they killed was the part where every phone company could look each other's customers up.

That distinction sounds like paperwork

That distinction sounds like paperwork. It isn't. If you've ever unlocked your phone with your face, or scanned your ID to open an account, you've already lived on one side of this line. And most of us assume the risk lives in the scan itself — that the scary part is the camera. It's not. The scary part is what happens to that measurement one second after the match succeeds. So why would a government keep the face scanning but throw out the database?

Start with what the scan actually does. When a phone shop checks your face against your ID photo, the software asks one narrow question. Is this the same person, yes or no? Under India's replacement rules, people without an Aadhaar number go through what's called D-KYC — a live face capture plus a scan of their ID document. The comparison still happens. The answer just doesn't go anywhere. No shared vault holds the result.

The original proposal, called the Biometric Identity Verification System, worked differently. It would have handed every telecom customer one unique identity number. Then it would have let companies check their customers against each other's records. Same cameras. Same algorithms. Completely different animal.

The article uses an analogy I keep coming back to. A single check is a security guard at a door, glancing at your face and your ID, waving you through, forgetting you. A pooled database is photographing every visitor, filing every photo in a city archive, and letting every other building in town search that archive. The photography never changed. The exposure multiplied.

The number that stopped me cold

Now the number that stopped me cold. Aadhaar, India's biometric ID system, already covers close to one point three four billion people with fingerprints and iris scans. That's roughly one in five human beings alive. Stack a unified telecom database on top of that, and you've built the most valuable single target on earth.

So why do so many of us assume scaling up is harmless? Because the technology genuinely is reliable. When your face matches your passport photo, it works. It feels solved. Adding more faces sounds like a storage problem, not a safety problem. But researchers studying centralized biometric systems point to a specific flaw — one compromised central server can expose everything at once. And you can reissue a stolen password. You cannot reissue your face.

There's a second risk, and it's quieter. The Bureau of Justice Assistance has flagged what happens when biometric data collected for one reason gets used for another. Data gathered to confirm you're really you can quietly become data used to find you. That's not a hack. That's mission creep, and it needs no break-in at all.

One honest footnote. India's Department of Telecommunications also launched something called a Digital Intelligence Platform. It pulls subscriber data and photos from operators to catch people holding more phone lines than allowed. So data still crosses company walls. Just through a narrower pipe, for a stated purpose, instead of one open pool.