Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Researchers Reveal “Windows Hell No” Vulnerability in Windows Hello Biometric System
Security researchers from ERNW disclosed a critical flaw in Microsoft’s Windows Hello for Business at Black Hat USA 2025. The vulnerability, nicknamed “Windows Hell No”, allows attackers with local administrator access to inject fake biometric templates into the system. The attack bypasses Windows Hello’s DPAPI protection and affects systems linked to Entra ID and on-prem Active Directory. Researchers noted that Enhanced Sign-In Security (ESS) can help mitigate risk, but compatible hardware remains limited. Microsoft has not yet issued a patch.
Philippine Central Bank to Mandate Biometric ID and Spending Controls for Online Gambling
The Bangko Sentral ng Pilipinas (BSP) announced new rules requiring biometric identity checks and spending controls for online gambling transactions. The regulations, expected to be implemented later this year, will mandate facial recognition for payment authorization and allow users to set daily limits, apply temporary suspensions, or permanently block gambling-related payments. The Department of Finance is also pursuing new tax measures on digital gambling platforms. The move follows concerns raised by President Marcos about the societal impact of online gambling.
Rwanda Prepares to Launch Biometric Digital ID with Multi-Format Access
Rwanda’s National Identification Agency (NIDA) is preparing to launch a biometric digital identity program, featuring a physical card, a virtual version, and a unique ID number. The system will include iris, fingerprint, and facial biometrics and is designed to improve access to services and strengthen digital infrastructure. The project is budgeted at approximately USD \$38 million, with a national communication campaign to precede mass enrolment. Officials say the program will prioritize privacy and inclusion, with data managed locally.
Data Breach Lawsuits Target Dating App Tea Amid Rising Biometric Privacy Concerns
Following a July 2025 data breach, multiple lawsuits have been filed against the dating app Tea over its use of selfie-based identity verification. While current claims focus on negligence and consumer protection, the company’s facial data collection practices may expose it to future BIPA litigation in Illinois. The breach has raised broader concerns about biometric use in dating apps. Legal experts point to prior rulings, including a 2024 Texas dismissal of BIPA claims against Match Group, as context for jurisdictional complexity.
Denver Airport Launches TSA Touchless ID Lanes with Facial Recognition for PreCheck Travelers
Denver International Airport has launched TSA PreCheck Touchless ID lanes that allow travelers to verify their identity via facial recognition instead of showing ID or boarding passes. The lanes are available to eligible passengers flying with American, Delta, United, or Alaska Airlines. The program is part of TSA’s broader biometric modernization effort, now active at 14 U.S. airports. Participation is optional, and passengers must still carry valid ID. TSA is also pursuing a \$5.5B tech upgrade initiative.
Identy.io and My Family ID Add Smartphone-Based Fingerprint Capture to Child Safety App
Biometric startup Identy.io has partnered with My Family ID to add touchless fingerprint capture to the app’s digital child identification tools. The feature allows parents to take high-resolution fingerprint scans using a smartphone camera. Data is stored locally and formatted to be compatible with law enforcement systems, though it is not automatically shared. Privacy advocates note the rise in consumer biometric apps for minors raises questions about data handling and consent. The app remains pay-once, with no subscription.
UK Police Accessed 150 Million Civilian Images for Facial Recognition, Advocacy Group Says
UK police forces have conducted hundreds of facial recognition searches using passport and immigration images – totaling over 150 million photos – without public disclosure or parliamentary debate, according to Big Brother Watch. FOI data show use of these databases increased significantly between 2020 and 2024. Civil liberties groups warn the practice undermines public trust and may breach privacy rights. The revelation follows expanded use of live facial recognition by the Metropolitan Police and a new £20 million software procurement framework.
By the ID Tech Editorial Team