Revolut pilots pay-by-face payments at London cafés

Revolut has begun a three-day trial of a facial-recognition payment method at three London coffee shops, letting enrolled customers pay by looking at a terminal rather than tapping a card or phone. The pilot, called Pay with Smile, runs from 24 to 26 September 2026 at Kiss the Hippo cafés in Bloomsbury, Chelsea and Soho.

The system is opt-in. A customer who has switched on Pay with Smile in the Revolut app can, at the till, select the option on a Revolut Register terminal, look at the camera, and have a successful facial match authorise a payment straight from their Revolut account. Anyone who hasn't enrolled, or whose face isn't recognised, still pays by card, phone wallet or the in-app Revolut Pay option as normal.

For UK shoppers, the pilot raises a familiar set of questions in an unfamiliar setting: what happens to a photograph of your face once it's taken at a café counter, how consent works when you can't easily "return" biometric data the way you can return a card, and what protection exists if the system gets it wrong. For merchants, it's a pitch built partly on a no-fee launch offer. Both sides are operating with real gaps in the public detail.

How the till works

Revolut Register is the point-of-sale hardware behind the trial: a system with a detachable payment tablet that already handles contactless and chip-and-PIN transactions, with Pay with Smile added as a third option. At checkout, the customer chooses to pay by face, the terminal captures a photograph, and Revolut converts it into an encrypted, single-use facial embedding to check against the customer's enrolled identity. A match approves the payment from their Revolut account; a failure or an inconclusive result sends the customer back to a card, phone or Revolut Pay. Revolut says customers can also seek human review through in-app support if a match doesn't go the way they expect.

What happens to the photograph of your face

This is where the pitch and the small print pull apart slightly. Revolut says the temporary facial embedding created at checkout — the mathematical representation used to run the match — is deleted immediately once the identity check is complete. But that isn't the whole file. Revolut's Pay with Smile privacy notice, dated 15 June 2026, says the original transaction photograph is separately uploaded to the company's internal cloud systems, where it's kept for fraud prevention and dispute handling. The notice doesn't give a fixed retention period for that photograph, or for related checkout, device and diagnostic records; it says these follow Revolut's "applicable retention policies" without stating what those are.

Press reporting has carried Revolut's statements that participating merchants don't store customers' personal data and that facial-recognition data is encrypted end to end. Revolut's own privacy notice is consistent on the first point — it says processing happens inside Revolut's own environment, with only its cloud provider named as a recipient — but it doesn't itself define or document what "end-to-end" means in this context, describing instead encrypted facial embeddings and encrypted payment parameters. The identity of that cloud provider, and whether any data leaves the UK, isn't specified in the notice.

A customer can freeze Pay with Smile without affecting their main account, card or phone-wallet payments, or they can withdraw consent entirely. Revolut says withdrawal immediately deletes the biometric template from the relevant database and requires the customer to enrol again to use the feature in future. What isn't stated is whether withdrawal also removes the stored transaction photographs, checkout records or fraud and dispute files built up while the feature was active.

The consent question, and what UK rules expect

Facial recognition used to identify someone is treated as special-category biometric data under the UK's data protection regime. The Information Commissioner's Office (ICO) says processing this kind of data needs both a lawful basis and a specific condition under Article 9 of UK GDPR, and that explicit consent is likely to be the most appropriate condition in many biometric-recognition cases. For consent to count, the ICO says it must be specific, informed and freely given, withdrawal must be possible without penalising the person, and a suitable alternative payment method has to be available. Revolut's structure — app-based opt-in, a withdrawal route, and card, phone or Revolut Pay as fallbacks — lines up with those expectations on paper. Revolut relies on explicit consent for the facial check itself, contract for delivering the service, legal obligation for regulatory compliance, and legitimate interests for fraud prevention, disputes, security and analytics, according to its privacy notice.

The ICO also says organisations deploying biometric-recognition systems are highly likely to need a data protection impact assessment before launch, given the risk profile of the technology. No such assessment, and no independent security audit or bias testing for Pay with Smile, has been published in the sources available for this article, so it isn't possible to say from public information whether one has been completed. It's also unclear whether the face used to authenticate a payment is generated fresh when a customer enrols in Pay with Smile, or drawn from the identity photograph taken when they originally opened their Revolut account.

Errors, security and who is left holding the loss

Biometric matching is inherently probabilistic. The ICO's guidance is explicit that no biometric system is error-free: organisations should assess the rate of false acceptances (the system wrongly says yes) and false rejections (it wrongly says no), and test for demographic bias across factors such as age or skin tone. Revolut hasn't published accuracy figures, false-match rates or bias-testing results for Pay with Smile in the material reviewed for this article, so shoppers have no independent basis to judge how reliable the checkout matching is in practice.

There's a payments-regulation dimension too. The Financial Conduct Authority's strong customer authentication rules have applied since 14 September 2019 to electronic payments initiated by a payer, unless an exemption applies. It isn't established from the available material how Revolut classifies this in-person, face-authorised account payment against those rules — whether the facial check is treated as one authentication factor, whether a second independent factor is also used, or whether an exemption is being relied on. Nor is it established what happens, financially, if a false match authorises a payment the customer didn't intend: Revolut's liability position, and any refund or buyer-protection arrangements for a disputed or wrongly authorised Pay with Smile transaction, were not found in the sources for this article.

One further detail reported alongside the trial: Revolut has said there's no blanket spending cap on Pay with Smile, describing a risk-based approach instead, though it hasn't disclosed what those risk thresholds are or when a transaction might trigger extra checks.

What cafés get out of it

For merchants, the incentive is largely commercial. Reporting around the launch describes a 0% processing fee on Pay with Smile transactions, though how long that rate lasts, its eligibility conditions, and what merchants pay for the underlying Revolut Register hardware or its ongoing use weren't established in the material available. Kiss the Hippo has said it intends to extend the system across all 12 of its cafés later in 2026, which is the most specific expansion figure on record. Separate reporting describes wider availability of Revolut Register more loosely, as coming "later in 2026" or "in due course" — language that shouldn't be read as a single confirmed national timetable.

What to watch after 26 September

The initial trial is short and small: three cafés, three days, no published figures on how many customers enrolled or how many transactions were completed. Whether it expands, and on what terms, will depend on decisions Revolut and Kiss the Hippo haven't yet detailed publicly — including the retention schedule for transaction photographs, any published data protection impact assessment, and how the company addresses strong customer authentication and dispute liability for face-authorised payments. The ICO's biometric recognition guidance was itself under review at the time of the pilot, following the Data (Use and Access) Act, so the regulatory detail here may move. Readers who want the primary text on how their data is used should read Revolut's Pay with Smile privacy notice directly, rather than relying on summaries of it.