Palm vein biometrics

The science behind wave-to-pay.

CeletelPay uses near-infrared imaging to map the unique pattern of veins beneath the skin of your palm. It's contactless, hard to forge, and works in 0.3 seconds.

How it works

Four steps — from hand to approved transaction.

Hemoglobin in your veins absorbs near-infrared light. By shining an 850 nm NIR source at your palm and capturing the reflection, CeletelPay’s sensor creates a high-contrast image of your vein network — a pattern that is unique, stable for life, and stored only as a one-way encrypted template.

  • Illuminate — a safe 850 nm NIR LED lights the palm
  • Capture — a CMOS sensor images the vein network
  • Encode — the image becomes a 2 KB encrypted template
  • Match — the template is checked against the vault in < 300 ms
Customer scanning their palm above the Vega P1 smart POS
Why palm beats the rest

NFC vs. fingerprint vs. palm vein.

Every checkout method has trade-offs. Here’s where palm vein out-performs cards and fingerprints in a live payment context.

Attribute NFC card / tap Fingerprint Palm vein (CeletelPay)
ContactlessYesNoYes
No card, phone or device to carryNoYesYes
Works with dry, dirty or injured fingersYesNoYes
Cannot be lost, stolen or clonedNoYesYes
False-acceptance rate1 : 10⁵1 : 10⁷
Average auth time0.3 s0.5 s0.3 s
Security stack

Defence-in-depth, from sensor to settlement.

On-device template

Vein images are never stored. Only a one-way 2 KB template, encrypted with a device-unique key, leaves the sensor.

Hardware secure element

Keys, PIN blocks and tokens live inside a tamper-active SE that zeroises on attack — PCI-PTS v6 certified.

Point-to-point encryption

SRED encrypts card and biometric data from the moment of capture all the way to the acquirer.

Liveness detection

The scanner rejects printed hands, gel moulds and severed samples with active NIR reflectance tests.

Revocable templates

Customers can instantly revoke their palm template through the CeletelPay app — rotating keys in real time.

Compliance & privacy

GDPR, ISO 27001 and SOC 2 aligned. Customers' biometric data never leaves the region it was enrolled in.

Hands-on

Try a live palm authentication.

We’ll enrol you on a Vega P1 in under a minute — and show you exactly what data we store (spoiler: almost nothing).