Finger print scanners, iris eye-readers and facial recognition technology can be tricked into allowing hackers access, the EU’s law enforcement agency has warned.
Fingerprints have become a popular method of unlocking mobile phones, but Europol warns that there are methods to forge a finger.
Fingerprints and iris scans are popular because every individual is unique. They can be scanned like barcodes to validate access to devices or to unlock doors in secure locations.
But so-called biometric data can be exploited by criminals.
“As authentication increasingly relies on biometric technology, it is crucial for law enforcement to understand the associated vulnerabilities”, Europol warns in a new report.
“Fingerprint scans or facial recognition technology are increasingly replacing passwords to make logging in or confirming payment effortless. But this convenience presents new threats that need to be acknowledged by law enforcement and the general public.
A password can be updated, but biometrics cannot.”
The methods for criminals to fraudulently gain access can be ghoulish, the report warns.
Getting hold of the eye or the finger is one method.
But there are others, Europol says, such as creating wax copies of fingerprints or even using a photograph of an eye.
Deepfakes which make use of emerging and fast advancing digital technology could also be used as a way for hackers to gain access.
Voice recognition is another popular tool, but deepfakes are increasingly able to convincingly imitate accents and impersonate individuals.
Europol says that it is drawing attention to the risks so that “law enforcement agencies…update their systems and detect such incidents during investigations.”
It may also make institutions such as banks and governments think again about the technology.
“Law enforcement must work closely with experts in the field to gain insight into potential attacks, so that any attempts at exploitation will be detected early on.
Encouraging collaboration across relevant disciplines, such as biometrics, forensics and cybersecurity, is essential to staying ahead of this threat”, Europol advises.