Biometric proof of personhood for every AI-driven transaction

Wink and Vouched partnership set the new standard for authorized agentic commerce.

Sunmi x Wink

Vouched is a leading AI-powered identity verification platform and the creator of Know Your Agent (KYA) — the industry's first framework for verifying agentic identities.

Wink brings face, palm, and voice biometrics with liveness detection to complete the stack. Together, they ensure every AI agent action carries verified human intent — not just a credential, but proof that a real, consenting person said yes.

Biometric proof of personhood at agent creation
‍
When a human creates an agent, Wink's face, palm, or voice verification with liveness detection confirms the person is real, present, and consenting. The authorization the agent carries is biometrically anchored — not just a token that can be stolen.

Know Your Agent session governance

Vouched's KYA framework detects whether a session is human or agentic, classifies the agent type, and routes it through the appropriate authorization pathway. No more agents silently impersonating users.

Scoped payment authorization via Wink PG 2.0
‍
Permissions granted at agent creation are cryptographically scoped to specific transaction amounts, merchant categories, and time windows. Agents cannot exceed what the human explicitly authorized — enforced at the payment gateway level.

Tamper-evident audit trail for compliance

Every agent-initiated transaction produces a full authorization record — from biometric consent to agent execution. Financial institutions, healthcare organizations, and enterprise legal teams have the evidence they need.

Read the Announcement

Validated & Production-Ready

Whether you’re launching in days or building bespoke in-store flows, Wink meets you where you are.

Tested on Sunmi V2 Pro, P2, T2, and D2s devices in Wink lab

Supports face + palm biometric authentication

Deployable in retail and QSR environments globally

Vouched named Best Identity Verification Solution in the 2026 FinTech Breakthrough Awards — alongside Wink, named Best in Class for Biometric Authentication as a Service by Javelin Strategy & Research in their 2025 Emerging Biometric Authentication at the Point of Sale Scorecard.

Both companies are founding members of the Agentic Commerce Consortium, co-setting the standards for trusted AI-driven commerce.

Vouched's KYA framework and MCP-I specification are active open standards, adopted by the Decentralized Identity Foundation — not proprietary to any single vendor.

Vouched processes identity verifications across healthcare, financial services, automotive, and hospitality — Wink's biometric layer now extends human authorization into all of those workflows.

How human authorization works in agentic commerce

Human User

Creates agent in Vouched workflow
‍
‍

Customer

Biometric  Check

Face, palm or voice + liveness detection
‍
‍

Wink

Scoped Credentials

Payment token, ID, loyalty - bounded by merchant & amount
‍

Wink

Agent  Authorized

Acts within scoped limits - no human needed per step
‍

Vouched KYA

Audit  Trail

Biometric + intent signals logged for compliance
‍

Wink + Vouched

Authorization is anchored to a verified human once - the agent carries that proof to every downstream action, with nothing more than was intended.

Wink Verified

A device or model is "Wink Verified" when it meets these criteria:

Wink software installed and tested

Face recognition flows validated

Camera specifications confirmed for biometric accuracy

Stability tested on production firmware/OS build

Use Cases

Connect to your current payment processor, acquirer, and POS system. Wink layers in on top — no migrations, no new contracts, no downtime.

Authorized Agent Shopping

A consumer creates a shopping agent, authorizes it biometrically via face recognition, and sets a spending limit. Vouched's KYA confirms the session is agentic. Wink's gateway executes within the human-approved boundary. No fraud. No overreach.

Agentic Financial Services

A banking customer authorizes an AI agent to manage recurring transfers via palm verification. Every action carries a biometric-backed audit trail that satisfies compliance requirements.

Onboarding & KYC

New customers complete identity verification in under 10 seconds using Vouched IDV + Wink biometrics — document authentication, liveness check, and biometric enrollment in a single flow.

Enterprise Workforce Agents

Employees authorize AI agents to act on their behalf for procurement, travel, and approvals — within limits they set biometrically. Every agent action is identity-linked and auditable.

Age-Restricted Agentic Commerce

An agent attempting to purchase age-restricted goods triggers a biometric re-verification challenge. Vouched confirms the human is real and of legal age.

High-Value Transaction
Re-Authentication

When an AI agent attempts a transaction above a pre-set threshold, Wink triggers a biometric re-verification challenge in real time — face or palm confirmation from the human before the payment executes. Vouched validates the identity is unchanged.

Credentials prove access. Biometrics prove intent.

THE OLD MODEL
Proof of ownership

OTPs, passkeys, and hardware tokens verify credential control - not human presence.

- No human intent verification
- Fails when no human is atkeyboard
- Can't detect hijacking or injection
- No audit trail for agent actions
‍

WINK + VOUCHED
Proof of personhood

Biometric human authorization anchored to every agent action - face, palm, or voice.

- Verifies the human, not just credentials
- Liveness detection blocks deepfakes
- Scoped payment authorization
- Tamper-evident audit trail
‍

Results from the Floor

“Know Your Agent is the next frontier of digital identity. Wink’s biometric depth transforms KYA from agent-level authorization into human-anchored authorization. That distinction is everything,”

— Peter Horadan, CEO of Vouched.
‍
‍

Deployment & Integration

Wink integrates with Sunmi devices through an Android SDK designed for rapid deployment across global merchant fleets.

Integration Model

Type: Software deployment (Android SDK for Android-based Elo devices / API for other platforms)
Gateway Compatibility: Works on existing payment infrastructure OR integrates with Wink gateway
Acquirer Compatibility: Processor-agnostic (supports major global acquirers)

Implementation Details

Integration Type: API + SDK — Wink and Vouched APIs connect at the agent creation and authorization layer
Vouched Integration Options: Self-serve (live in 30 min), No-code, JS Plugin, iOS/Android/React Native SDK, API
MCP-I Compatible: Yes — open specification, interoperable with any MCP-based agent framework
Acquirer Compatibility: Fiserv, TSYS, Chase Paymentech, Global Payments, FIS, Elavon
Deployment Environments: Retail, financial services, healthcare, enterprise, travel — any environment where agents execute on behalf of humans

Security & Compliance

Wink and Vouched are built to the security standards regulated industries require. Biometric templates are encrypted end-to-end, never stored on user devices, and processed on Wink's Azure-distributed cloud infrastructure. Every agent transaction produces a tamper-evident authorization record.

Wink's platform is built with privacy, consent, and security as first-order constraints. Identity data is protected through layered controls, policy enforcement, and merchant-defined configurations that align with modern compliance expectations.

Tokenized biometrics (no photos or voice files stored)

PCI DSS + SOC 2 Type II certified

Liveness detection and spoof prevention

Built-in support for biometric laws by state and region

Wink's Android SDK integrates securely with Sunmi's device security architecture. Biometric templates are encrypted end-to-end and never stored locally on merchant devices.