OTPs are slow and they fail
SMS codes take 20–45 seconds and drop on weak networks, roaming and SIM-swaps.
Passkeys for banks & fintechs
Give your customers a login and a checkout with nothing to steal.
ISG Passkey replaces passwords and OTPs with phishing-resistant, device-bound authentication — across every rail you run.
Built on FIDO2 / WebAuthn · Trusted across Visa, Mastercard and regional card schemes
Scheme-ready
Regional & domestic schemes
Regional & domestic schemesSecure checkout
Confirm with your device
No password. No OTP. No shared secret.
Passkey sign-in3–8 seconds
SMS OTP20–45 seconds
The problem
Passwords and OTPs are a liability you're paying for.
Shared secrets get stolen
Passwords and OTPs are phishable, replayable and leak in breaches; account-takeover fraud follows the shared secret.
Friction kills conversion
Every extra step at login and checkout drives abandonment.
SMS OTP is a running cost
You pay per message, forever, plus the fraud and support load.
What is a passkey
A credential that can't be phished, because it's never shared.
A passkey is a cryptographic key pair bound to the customer's device. The private key never leaves the device and is never shared — so there is nothing on your server for an attacker to steal, phish or replay.
Nothing to steal.
Your server keeps only a public key. A breach yields nothing an attacker can reuse.
PointPassword / OTPPasskey
Shared secretYesNo
PhishableYesNo
Works offline of SMSNoYes
Speed20–45s3–8s
Cost per usePer-SMSNear-zero
Proof it works
The world's biggest platforms already switched.
0M+
Google accounts using passkeys — with 2.5B+ passkey sign-ins.
Google, 2025
0M
Passkeys created at Amazon; sign-in ~6× faster than a password.
Amazon, 2025
0%
Fewer account takeovers on passkey transactions at PayPal, plus ~50% fewer password-related support tickets.
PayPal
0%
Login success with passkeys vs 63% with traditional MFA — ~8.5s vs ~31s to sign in.
Industry benchmarks, 2025
>0%
Of identity-based attacks blocked by phishing-resistant sign-in.
Microsoft Digital Defense Report, 2025
~0B
Passkeys now in active use worldwide.
FIDO Alliance, State of Passkeys 2026
In payments
Visa Payment Passkey reports ~50% less fraud vs SMS OTP; Mastercard Payment Passkey is live at 1,000+ merchants.
Use cases
Where passkeys pay off for banks & fintechs.
One enrolled credential, applied across the journeys where friction and fraud cost you the most.
Frictionless card payments (3-D Secure)
Replace the OTP step-up at online checkout with a device biometric. Authentication drops from 20–45s to 3–8s, lifting completed payments.
In the real world
Visa and Mastercard payment passkeys are already live across major markets and leading merchants worldwide.
Passwordless mobile & net-banking login
Let customers open the banking app with a face or fingerprint instead of a password.
In the real world
Revolut and Ubank run passkey login; ABANCA has 42% of mobile customers authorising with passkeys.
High-value transfers & step-up
Require a fresh passkey signature for wires and risky actions; Secure Payment Confirmation binds the exact amount and payee into the cryptographic approval.
In the real world
Used for step-up on money movement and privileged actions.
Recurring payments & e-mandates
Authorise mandates and subscriptions without OTP friction or delivery failures.
Bill & recurring payments
One credential to authorise bill, utility and subscription payments — no SMS OTP. (BBPS in India.)
Secure digital onboarding
Enrol a passkey during signup so accounts are phishing-resistant from day one.
In the real world
Fintechs use WebAuthn biometric onboarding for cross-device portability without re-registration.
Workforce & staff login
Passwordless login for employees and branch staff cuts risk and support load.
In the real world
Financial firms report helpdesk password resets down ~75% after moving staff to passkeys.
See it in action
What your customer actually sees.
One enrolment, then a single device gesture at every checkout.
9:41
Your bank app
Set up your passkey
Use Face ID or your fingerprint instead of a password.
Phishing-resistant
Bound to this device
Set up now
1Set up once
9:41
Secure checkout
MerchantNorthwind Travel
Amount249.00
Card ending 4417
Confirm payment
Touch the sensor to approve
2Confirm with your device
9:41
Secure checkout
Payment approved
No OTP. No password.
Authorised in 4 seconds
Done
3Approved
Illustrative representation. Based on published Visa Payment Passkey and Mastercard Payment Passkey Service flows.
How a scheme passkey checkout works
Visa Payment Passkey
- 1
Cardholder enrols once inside the issuer's app or website (identity verified at login), binding a passkey to their device.
- 2
At a participating merchant, the cardholder is taken into passkey authentication.
- 3
They approve with the same Face ID / fingerprint they use to unlock the device.
- 4
Cryptographic proof authorises the payment — biometrics never leave the device.
Mastercard Payment Passkey (with Click to Pay)
- 1
At checkout the customer selects their card (Click to Pay, card-on-file, or guest).
- 2
Instead of CVV or OTP, they're prompted for their passkey.
- 3
A WebAuthn biometric prompt confirms the transaction — either on-site via Secure Payment Confirmation (SPC) or via a quick redirect.
- 4
The tokenised payment completes.
Illustrative only. In-Solutions Global is not affiliated with or endorsed by Visa or Mastercard; screens shown are original illustrations of the passkey experience.
The regulatory moment
The timing is now.
Regulators are moving beyond OTP
Central banks and regulators across South Asia and the Middle East are increasingly encouraging a move beyond static SMS OTP toward stronger, device-based authentication.
Schemes are already live
Visa and Mastercard are already live on payment passkeys in multiple markets; regional and domestic card schemes are following on FIDO.
The direction is set
The global card networks have set the direction — device-based authentication is where payments are heading.
Moving off OTP-only is no longer optional — the question is who helps you do it.
Track record
Proven internationally.
Live in Australia
ISG's payment switch routes live EFTPOS scheme transactions for a major Australian bank.
Across the Middle East & South Asia
Payment technology delivered for banks across these markets, with local regulatory familiarity.
Standards-native
Native ISO 8583 and AS 2805, FIDO2 / WebAuthn, EMV 3DS.
Why ISG
One passkey. Every rail you run.
A software-only auth vendor can secure a login. ISG owns the rails — so the same credential carries through issuing, acquiring, switching, bill pay and loyalty.
Already in your transaction flow
ISG already runs the issuer switch, acquiring switch, 3-D Secure ACS and tokenisation for banks. Passkey is an attach to rails you already operate — not another vendor to bolt on. One enrolled passkey works across cards, app, mandates, bill pay and loyalty.
Recognised TSP for Visa & Mastercard
Technology Service Provider status with scheme tokenization in production across Visa, Mastercard and regional/domestic card schemes (including RuPay in India).
3DS Server, ACS and fraud management
3-D Secure Server / Access Control (ACS) and FRM / e-FRM fraud risk management.
Bank-grade cryptography and protocols
FIPS 140-2 Level 3 HSM cryptography; native ISO 8583 & AS 2805; FIDO2 / WebAuthn; EMV 3DS.
Certified today
Certified today: PCI DSS, PCI SSF, ISO 27001, ISO 27701 — already held, not a roadmap.
Proven internationally
Deployed for banks across the Middle East, South Asia and Australia.
Deploys onto your existing estate
Including the ACS/3DS you may already run — with a ready SDK and fast integration.
Deployment & data residency
Run it where your regulator needs it.
Flexible deployment
SaaS, private cloud, or fully on-premise. For banks that cannot move sensitive authentication to public SaaS.
Data residency & sovereignty
In-region hosting and data residency controls to meet local regulatory requirements.
In-market delivery
Local implementation, customisation and support across the Middle East, South Asia and Australia; Arabic / RTL and local-language readiness for customer-facing screens.
Visa, Mastercard and regional/domestic card schemes · multi-currency
Outcomes
What it means for you.
Less fraud
Phishing-resistant credentials remove the shared secret attackers rely on.
Higher conversion
A single device gesture replaces the step that loses customers.
Lower OTP/SMS cost
Cut per-message spend and the support load that follows failed codes.
Better customer experience
Sign in and pay in seconds, with nothing to remember.
Compliance-ready
Aligned to FIDO2 / WebAuthn standards and scheme passkey programmes.
How it works
Three steps to a passwordless estate.
01
Enrol
The customer registers a passkey (a face/fingerprint gesture) during login or onboarding.
02
Authenticate
Future logins and checkouts are a single device gesture.
03
Authorise everywhere
The same passkey works across cards, app, mandates, bill pay and loyalty via ISG's rails.
Editions
Choose your edition.
ISG Passkey for Banks
Digital Banking / CISO
ISG Passkey for Cards
Card Product
ISG Passkey for Wallets & PPI
Payments / Compliance
Nothing to steal.
One key. Every step.
Let's give your customers the safest, fastest way to log in and pay. One email to our team is all it takes — we'll come back within one business day.
Hello@insolutionsglobal.comWhat happens next
- 30-minute discovery call with our passkey team
- Journey-by-journey assessment of your current authentication
- Pilot scope, timelines and integration plan for your stack
Prefer a call? Mention a convenient time in your email and we'll dial in.
Works across the schemes you already runRegional & domestic schemes
Regional & domestic schemes