For what it's worth, I can confirm that I've seen my girlfriend use facial recognition to identify and authenticate herself and authorize payment via Alipay at a self checkout at a grocery store, using a camera on the self checkout machine. She probably got a message on her phone once she did, but there was no second factor.