I saw that, but it sounds vague enough that there a few different scenarios I can think of to attack this service. Like what are they going to do if multiple people are sharing an account, but they only have photos of one?

edit: I just realized how they can deal with that -- take a picture when the person walks in and tie it to the account they scanned. There still seem to be a bunch of fraud issues, but this is certainly interesting.