Facial scanning, or biometric verification, has become a common practice globally, especially in countries like Trung Quoc, where it is integral to everything from electronic payments to administrative procedures. Despite its widespread convenience, this technology is raising significant privacy concerns. On 8/3, Professor Zhang Junping of Fudan University in Trung Quoc issued a stark warning: "Absolutely do not scan your face while bathing or unclothed."
Professor Zhang explained that when a system requests facial verification, the screen interface typically displays a small circle around the face. However, this circle is merely a graphic aid for users to position their face correctly. The phone's camera, in fact, captures the entire scene within its lens. This means that the surrounding environment and the user's upper body are all recorded in the frame, not just the face.
Even legitimate applications, despite having strict security protocols that only upload data to servers for algorithmic matching, carry a risk of exposure. He Yanzhe, an expert at the Trung Quoc Cybersecurity Research Center, confirmed the possibility of these images being viewed by system administrators. "No one can guarantee 100% that no individual in the operational process will violate regulations. Self-protection lies in the user's own vigilance," he emphasized. The risk is particularly high if users inadvertently grant camera access to junk applications or phishing websites, as these sensitive images could easily be stolen and exploited.
![]() |
Dress appropriately during facial verification to avoid sensitive image leaks. *Pymnts*.
The topic "risk of private image leaks during biometric verification" has surged as a top search on Weibo social media, sparking millions of discussions. Many users expressed their dismay and concern. "What did the system see when I verified my account in the restroom?", one user commented. Another shared, "When it is hot, I often transfer money shirtless; how many shirtless photos of me have been captured?"
In response to these concerns, some users and experts suggest that app developers should integrate an automatic face-cropping algorithm directly on the device before uploading data to servers. Alternatively, they propose that applications should display a clear warning message on the screen, informing users about the actual scope of camera capture during verification.
Bao Nhien (According to World Journal)
