The card was never the customer

For four decades the cash machine has asked the same question, and it has always been the wrong one. It asks what you are holding. It reads a strip or a chip, compares a number you type, and infers a person from the combination. That inference is the whole of the trust model, and it is why every attack on self-service banking since the 1980s has been an attack on the card rather than on the customer.

AU announced its work with ShoCard to bring biometric authentication to the ATM for exactly this reason. The intent was not to add a sensor to a fascia. It was to change the question the machine asks, from what is in your hand to who is standing here.

What changes at the fascia

When identity moves to the front of the transaction, the card stops being a credential and becomes, at most, a convenience. The customer is recognised, the entitlement is checked, and the cash is dispensed. Nothing has to be skimmed, because there is nothing at the reader worth skimming. Nothing has to be shoulder-surfed, because the secret is not a four digit number held in a person's memory.

A machine that recognises a person can be trusted with more than cash.

That last point is the commercially interesting one. A terminal that only verifies a card can only ever hand over money. A terminal that verifies a person can open an account, issue a card, re-register a phone number, accept a document, or complete any of the branch tasks that currently require a member of staff to look at a passport. This is the same logic that drove AU's 2016 work on multi function kiosks with instant card issuance: once the machine knows who it is speaking to, the list of things it can finish without a queue grows quickly.

The part nobody photographs

Biometrics photograph well and deploy badly. The sensor is the easy half. The hard half is the enrolment journey, the fallback when a finger is wet or a face is covered, the audit trail a regulator will ask for, and the service model that keeps a few thousand sensors in working condition across a country.

This is the part AU cares about most, because it is the part that decides whether a pilot becomes an estate. AU maintains its installed base through 42 service centers with more than 600 field technicians, and that network is the reason a new authentication method can be rolled out as an operational programme rather than a demonstration. A sensor that is out of calibration in a branch six hours from the capital is not a security feature. It is a queue.

Where this goes

• 01Cash out without a card, with the entitlement checked against the person.
• 02Onboarding and card issuance finished at the machine instead of the counter.
• 03Fewer disputes, because the evidence of who transacted is stronger than a PIN.
• 04A cleaner path to shared and white-label estates, where the machine is not tied to one issuer's plastic.

None of this removes the card overnight. Estates change slowly, and they should. But the direction is settled: the credential is moving from the customer's pocket into the customer. AU would rather build for that ATM now than retrofit for it later.