A one-time passcode can be familiar and widely understood, but it can also interrupt a payment, depend on message delivery and expose customers to social-engineering risks. Device-based biometric-backed authentication offers a different experience,…