Case Study: WithLess achieves PSD2-compliant biometric authentication with Ping Identity

How WithLess met PSD2 SCA requirements, secured transactions, and delivered a seamless, passwordless experience with PingOne Recognize

WithLess, a growing SaaS expense and payments platform, needed to achieve PSD2 SCA compliance while reducing the friction and security risks of SMS OTPs. The company also wanted to protect sensitive step-up actions like address and IBAN changes, so it turned to Ping Identity and PingOne Recognize.

Ping Identity implemented PingOne Recognize with zero-knowledge biometrics, embedded in the WithLess app via SDK, to authenticate both the user’s face and device with one glance. The solution replaced SMS OTPs, strengthened security against SIM-swap attacks, and was deployed in under two weeks, enabling PSD2-compliant multi-factor authentication and biometric protection for sensitive actions.

WithLess

Thomas Alisi

Co-Founder and CTO