Transaction authorization

A system comprising:

• a processor;
• and
• a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor to cause the system to:
• verify, by a first computing device, a user by:
• (i) capturing biometric data via a biometric sensor, and (ii) comparing the biometric data captured by the biometric sensor to registered biometric data, the first computing device being a smartphone;
• determine, by the first computing device that the first computing device is in a short range communication with a payment device comprising an account number associated with the user;
• receive, at a server system, a verification message from the first computing device comprising a memory storing the account number of an account held by the user, the first computing device different from the payment device associated with the user, the verification message comprising the account number, a first indication that the first computing device verified the user, and a second indication that the first computing device determined that the first computing device is within the short range communication with the payment device comprising the account number and associated with the user, the payment device being in form of a card and the second indication produced in response to a signal received by the first computing device from the payment device, which is proximate to the first computing device, wherein the first computing device and the payment device are operated by the user and are separate from a payment terminal;
• responsive to receiving the verification message and based on the first indication and the second indication, determine, by the server system, that the first computing device is within the short range communication of the payment device associated with the user, and that the user was verified by the first computing device;
• set, by the server system, a verification status associated with the user to be authorized in a memory of the server system, based on determining that the first computing device is proximate to and within the short range communication of the payment device, and that the user was verified by the first computing device;
• determine, by the server system, a number of transactions that have been authorized upon the verification status being set to authorized;
• responsive to the number of transactions that have been authorized exceeding a threshold value of transactions, reset, by the server system, the verification status as being unauthorized;
• receive, from the payment terminal, an authorization request comprising the account number to authorize a payment transaction, the authorization request being received from the payment terminal after detecting the payment device, and receiving the account number from the payment device, the authorization request including a cardholder verification method (CVM) field indicating that the user was verified and that verification has been performed, wherein the payment terminal is a POS terminal;
• responsive to receipt of the authorization request, identify, at the server system, the verification status associated with the user by analyzing the CVM field included in the authorization request;
• and
• determine, by the server system, whether to authorize the payment transaction based on the verification status and the number of transactions that have been authorized being lower than the threshold value of transactions, wherein the payment transaction does not comprise a verification process to verify the user.