Selfie auth? Could be an option, maybe not for day to day use but definitely as a fallback: http://www.independent.co.uk/news/business/news/amazon-files-patent-to-offer-payment-with-a-selfie-a6931861.html