Your Selfie Now Unlocks Your Pension — And Scammers Have a $15 Workaround

For fifteen dollars, someone can buy a fake identity good enough to fool a face scanner. Fifteen dollars. And right now, more than seventy thousand retired United Nations workers collect their pensions by scanning their faces on a phone or a kiosk.

If you've ever unlocked your phone with your face,

If you've ever unlocked your phone with your face, this story is already about you. More and more, your face isn't just a password. It's the key to your money. The United Nations pension fund just made face scanning the way its retirees prove they're alive and owed a payment. But the same technology that opens that door can be tricked by a convincing fake. So the question that runs through this whole story is simple. When your face becomes the lock, who's making sure a fake face can't pick it?

Let's start with the retirees. The U.N. runs pension kiosks across eighteen countries, according to reporting from ID Tech Wire. A pensioner walks up, scans their face, and the system confirms they're a live person — not a photo, not a recording. That's called a proof-of-life check. It replaces the old paper forms retirees used to mail in every year. Convenient, right? But convenience cuts both ways.

Here's what makes fakery so cheap now. According to Biometric Update, criminals can generate a deepfake image for somewhere between ten and fifty dollars. A full synthetic identity — a person who doesn't exist — sells for about fifteen. That's not a Hollywood budget. That's the price of a couple of coffees. For the rest of us, that means the tools to impersonate a face are no longer rare or expensive. They're for sale.

These attacks are climbing

And these attacks are climbing. Fraud researchers report that deepfake attempts against biometric systems grew by more than half in a single year. That's not a future worry. That's happening now. So the U.N. did something most systems don't do openly. It put its face scanners through spoof testing — a lab checking whether the system can catch a fake.

A testing firm called BixeLab ran those checks against an international standard for spoof detection. They tried to fool the scanners with printed photos, with three-D masks, even with balaclavas covering part of the face. They ran it on both iPhones and Android phones. Why does that matter to you? Because most companies that scan your face have never told you whether they test for any of this at all.

And that gap is becoming a liability. One industry report suggests that by next year, nearly a third of organizations may stop trusting face scanning on its own. Pension experts warn that trustees — the people responsible for paying retirees — could face regulators if a deepfake slips through.