Your Face Is Now Your Boarding Pass. Good Luck Getting It Back.

A hundred million times, someone has walked through an Indian airport and let a camera be their boarding pass. No paper. No ID held up to a gate agent. Just a face — scanned, matched, and waved through. And here's the question nobody at that gate can answer for you. Where did all those faces go?

If you've flown anywhere recently, this story is

If you've flown anywhere recently, this story is already about you. In the United States, the TSA now scans faces at more than two hundred fifty airports. Travelers say it's voluntary — but when people try to opt out, many report it's harder than it sounds. India's system, called Digi Yatra, just crossed a hundred million passenger journeys. So the convenience is real, and it's spreading fast. But can you ever take your face back out of these systems?

Start with that hundred-million number. It's not a pilot anymore. It's not a test. Face-based travel has quietly become infrastructure — the same way roads or power lines are infrastructure. And when something becomes infrastructure, it stops being optional in practice, even if it's optional on paper. For you, that means the next time you fly, the easy lane and the camera lane might be the same lane.

Now, about who's actually using this. Industry trackers say about half of all passengers have used biometrics somewhere in their airport trip. That's up nearly twenty points since twenty twenty-two. So adoption is sprinting ahead. The rules about consent — what you're agreeing to, and for how long — are walking. That gap is the whole story.

There was a recent international trial, run with

There was a recent international trial, run with the airline group IATA, that proved something important. These systems can talk to each other across countries. In that trial, data was shared only with consent, only as long as needed, with no central storage. That's the clean version. But the trial proved the technology works — not that your rights travel with you. Fly through ten countries, and you might be agreeing to ten different things you never read.

European regulators have been blunt about the danger. They say biometric data is uniquely sensitive. A face scan can produce a false miss. It can carry bias. And if it leaks, someone can impersonate you in a way you can't undo. You can change a stolen password. You cannot change your face.

So those same regulators drew a hard line on storage. They say the only acceptable setup is one where your biometric stays with you — on your device, or locked with a key only you hold. Not sitting in some company's central database. The problem? Many systems already running today don't meet that bar.