We are working on an online eCommerce site and we need to have online transactions. The common mechanism of verifying the online transaction seems the OTP (one Time Passwords) over SMS.
But this mechanisms is alarming as came across following vulnerability/exploit on SMS protocol.
***As per the second article even Telecoms have warned using SMS (insecure) for banking purpose.
Is there an alternative way of verifying online transaction through 'evolving mobile bio metric capabilities'?
Or Are there any other alternative we can adopt?