Palm payments are coming to Europe, and the Baltics go first

Handwave, a Riga-based company building palm-based biometric payment and identity technology, announced on 3 September that it is expanding its partnership with Visa to support a rollout of biometric payments across Europe. The Baltics will be the first market. Handwave says it is in advanced discussions with banks and retailers in the region and expects to move from pilots into production deployments before the end of the year.

It would be easy to skim past as one more payments partnership with a hopeful quote attached. It is more interesting than that. If it works, Estonia, Latvia and Lithuania become the place where Europe finds out whether paying with the palm of your hand is a novelty or a piece of plumbing that ends up in every checkout.

What Handwave has actually built

The company is not building a card, an app or a wallet. It is building an acceptance layer, which is a different and considerably harder position in the stack. Its platform links payment cards, loyalty programmes and identity information to a person's palm, and runs applications on top of that: paying, activating a loyalty account, verifying age.

The user side is deliberately undramatic. A palm is captured with an ordinary phone camera, and cards are added the way they are added to any digital wallet. The merchant side is pitched as equally boring: the technology is designed to sit on top of payment infrastructure that banks, acquirers and merchants already operate rather than replacing any of it.

What Visa is bringing

Visa's contribution is mostly risk and distribution, which are the two things a young acceptance layer cannot build on its own.

• Tokenisation through Visa's Token Management Service, so a card is represented by a token rather than a stored number once it is linked to a palm.
• Authentication and fraud tooling, including Visa Decision Manager, for real-time monitoring of transactions.
• Market development support, including marketing and data-driven insight into which European markets to prioritise after the Baltics.
• A route into the Visa Acceptance Platform, which would let acquirers and merchants already connected to Visa switch the technology on instead of commissioning a bespoke integration.

That last item decides whether this remains a pilot programme or becomes something a merchant can adopt in an afternoon. An acceptance technology that requires every acquirer to run its own project spreads slowly and expensively. One that shows up as an option inside infrastructure merchants already pay for has a completely different ceiling.

Why the Baltics go first

The choice of launch market is less arbitrary than it looks. Three things line up at once.

• Density. The region's retail footprint is concentrated in a handful of cities, which makes a pilot far cheaper to instrument and measure than the same experiment in a large, dispersed market.
• Digital identity habit. National e-ID schemes and Estonia's e-Residency programme mean consumers here are already accustomed to authenticating themselves digitally in public, which is the behavioural leap that biometric payment depends on.
• A payments cluster. Tallinn, Riga and Vilnius have spent two decades producing payments and identity companies, so the engineering, compliance and fraud talent needed to run something like this is already local.

A combined population of roughly six million is normally framed as a limitation. For a payments pilot it is an advantage. Small enough to observe closely, wealthy enough to own the hardware, and integrated enough that a result in one country tells you something about the other two.

How palm recognition differs from a fingerprint

Palm recognition reads the pattern of veins and haemoglobin beneath the skin using near-infrared light, rather than the ridges on the surface. The practical consequences are what matter.

• It works without contact, which removes the hygiene objection that held back fingerprint payment trials.
• The identifying pattern sits under the skin, so it cannot be lifted from a surface the way a latent fingerprint can.
• A palm presents a much larger sensor area than a fingertip, which gives the matching algorithm more signal to work with and makes false accepts easier to control.

The trade-off is that a palm template still has to be stored somewhere and matched against something. That is where the genuinely difficult questions begin, and they are not technical.

The trust question is the whole ballgame

Handwave published consumer research in March 2026 that makes the adoption problem unusually explicit, which is to the company's credit.

• Nearly half of US consumers said they would adopt palm-based payments if security and privacy were guaranteed.
• 46 per cent of 25 to 34 year olds said they trust biometric recognition as a safe way to pay or claim loyalty rewards, against 28 per cent of over-55s.
• Across all age groups, 48 per cent said they would use palm payments regularly if their trust in data handling was assured.

Read those three figures together and they say the same thing. Demand is not the constraint. Confidence is. Every one of those numbers is conditional on a guarantee that the industry has to actually deliver on, and the first well-publicised incident will define the category for years.

What the rules say

Biometric data used to identify a person is a special category under the GDPR, so it requires a stronger legal basis than ordinary personal data, typically explicit consent or a substantial public interest argument. That single classification shapes most of the design decisions downstream of it.

The European Union's AI Act adds a further risk-tiered regime on top of the data protection rules, with additional obligations attached to biometric systems. The direction of travel in Brussels is more scrutiny of biometric processing, not less, which is worth remembering when a rollout is announced as a technical milestone.

For a company in Handwave's position that cuts both ways. Compliance is slow and expensive, and it will delay things. It is also a moat, because a startup that clears European requirements can sell into markets where those requirements function as the entry ticket. The same rules that slow a launch also keep out cheaper competitors.

The design questions that follow are unglamorous and decisive. Where does the palm template live: on the device, in the merchant's system, or in a central store? Can a user revoke a palm as easily as they can cancel a card? What happens to the template when the underlying card is replaced or the account is closed? Is enrolment separated from payment consent, or quietly bundled into a single tap? Regulators will ask all of these, and the answers determine whether the product ships at all.

The competition is not standing still

Palm payment is not a new idea. Amazon has been running Amazon One, its own palm system, in its stores and licensing it to third parties, so the concept has already been tested at scale inside a controlled retail environment. Iris-based enrolment has been attempted at global scale and has attracted regulatory scrutiny in several countries, which is a cautionary tale about how quickly biometrics can become a political problem rather than a product one.

The competitor people consistently underestimate is the status quo. A new payment method does not compete against cash. It competes against a tap that already takes under a second, already sits in everyone's pocket, and already works everywhere. Palm payments have to be meaningfully better in a specific situation to earn space at the till.

The plausible wins are narrow and real. Canteens and stadiums, where queues are the enemy. Gyms and swimming pools, where nobody wants to carry a phone. Industrial and construction sites, where gloves are on and hands are full. Transport, where speed matters at scale. If the technology finds those settings first and gets them right, broader retail becomes credible later.

What has to happen in the next twelve months

• Pilots have to convert into live merchants. A pilot that ends without a real transaction in a real shop is a data point, not a business.
• Acquirer integration has to become routine. The Visa Acceptance Platform route is the mechanism, and how quickly it lands sets the pace for everything else.
• Enrolment has to be trivial. If signing up involves a branch visit, a queue or a separate app, adoption collapses before it starts.
• The convenience case has to be demonstrated in specific settings rather than asserted in a press release.
• The privacy story has to survive its first serious test, because there will be one.

Why this matters beyond one company

The Baltic tech scene has a long record of building payments and identity infrastructure and then exporting it. The region's fintech reputation rests on companies that treated the single market as their home market from the first day, and on a tolerance for running infrastructure experiments early, while the market is still small enough for the experiment to be cheap.

Palm payments are a good test of whether that habit still holds. The recognition itself is not the hard part. Enrolment flows, template storage, consent design, merchant unit economics and regulatory clearance are the hard part, and that is precisely the kind of glue work the region's engineers have historically been good at.

If the Baltics become the first European market where paying with a palm is unremarkable, that is a more durable export than another consumer app. If it fails, the experiment was small and contained enough to have been worth running anyway.

What to watch

• Whether the banking and retail partners in talks are actually named before the end of 2026, and whether a transaction happens outside a demonstration.
• Whether Handwave appears inside the Visa Acceptance Platform. That is the difference between a partnership and distribution.
• How the template storage question is answered in public documentation, since that is where privacy objections will concentrate.
• Whether a second Baltic payments company follows with a rival approach, which would confirm the region as a testbed for the category rather than one company's bet.

None of this is settled. The announcement is evidence that the infrastructure is being assembled, not evidence that anyone's habits have changed. But the Baltics going first is not a coincidence, and the next few months will show whether the region can turn a pilot into plumbing.