[acomar]

I saw that, but it sounds vague enough that there a few different scenarios I can think of to attack this service. Like what are they going to do if multiple people are sharing an account, but they only have photos of one?

edit: I just realized how they can deal with that -- take a picture when the person walks in and tie it to the account they scanned. There still seem to be a bunch of fraud issues, but this is certainly interesting.

[dandr01d]

They don't need to remember photos at all. Just track the person beginning at the point of scan.

[ReverseCold]

Just don't share the account. That may already be part of their ToS.