Palm payment biometrics in Kazakhstan — how it works and how secure it is

The Kaspi Alaqan service allows you to pay without a card, phone, or QR code — just connect your biometrics once and hold your palm over a special device at the checkout. Let’s look at how the technology works, what happens to biometric data, and how secure this payment method is.

How palm payment appeared in Kazakhstan

Alaqan.kz began developing palm biometrics technology in 2018. After several years of development, the system evolved into a payment solution, and the first payment points appeared in Kazakhstan in 2024.

In 2025, Kaspi.kz launched Kaspi Alaqan — its own palm payment service. The service allows users to pay for purchases, withdraw money, and top up accounts using palm biometrics. In July 2026, Kaspi announced that the technology was gradually becoming available in all cities of Kazakhstan.

In April 2026, new rules for biometric authentication of financial and payment organizations came into force. They provide for identification by facial image or palm print.

According to the National Bank, the biometric identification service receives about 3.5 million requests per month.

How palm payment works

The system reads the features of the palm and converts them into a digital biometric template. When connecting Kaspi Alaqan, an encrypted template is created, which the system uses to compare data during payment.

The process looks like this:

1. The user connects Kaspi Alaqan.
2. At the checkout, the user holds their palm over the device.
3. The system recognizes the user and offers a payment method.
4. The user selects the desired account or product.
5. Confirmation arrives in the Kaspi.kz app.

No phone or bank card is required.

Can the system be fooled by a photo of a hand

Kaspi states that it is not possible to pay for a purchase using a photo of a palm. A real palm is required for the transaction.

However, security depends not only on recognition but also on the protection of biometric data and the entire payment infrastructure.

How secure is palm payment

Kaspi claims that palm data is stored in encrypted form, and the created digital code cannot be used outside the system.

The user can also disable Kaspi Alaqan. After that, palm information is deleted, according to the service data.

The main feature of biometrics is that it cannot be changed like a password. Therefore, it is especially important how such data is stored and protected.

In 2026, the Agency for Regulation and Development of the Financial Market approved separate rules for biometric authentication for banks, certain financial organizations, and microfinance organizations.

What happens to biometric data

Kaspi uses an encrypted digital template, not a regular photo of the palm. According to the company, this code cannot be used outside the system.

Before connecting the biometric service, it is important for the user to understand what data is collected, where it is stored, and how it can be deleted.

Why Kazakhstan needs biometric payments

Palm payment is part of a broader digitalization of Kazakhstan's financial system. In 2026, the country is developing biometric identification, interbank payments, the digital tenge, open banking, and the National Anti-Fraud Center.

For the user, this means a gradual transition from cards and phones to biometric authentication.