Mitigating shoulder spoofing vulnerabilities in mobile payment systems: a security framework

The rapid growth of mobile payment platforms has enhanced transactional convenience but also introduced critical security challenges, notably shoulder spoofing. This attack occurs when unauthorized individuals or surveillance devices visually intercept sensitive information, such as Mobile Personal Identification Numbers (MPINs), during payment processes. Existing security mechanisms-including PIN masking and screen dimming-fail to detect environmental threats or provide adaptive responses, leaving users vulnerable in public spaces. To address this gap, propose a novel solution titled Gaze-Aware Threat Detection with Contextual Scene Analysis (GATCSA). GATCSA leverages the front-facing camera and on-device computer vision algorithms to monitor the surroundings during mobile transactions. The system identifies suspicious behavior such as gaze fixation by nearby individuals or the presence of surveillance equipment targeting the mobile screen. A risk evaluation module considers proximity, gaze direction, and focus duration to classify threat levels in real time. Upon detection, the system provides users with contextual alerts and actionable suggestions-such as changing the device angle, enabling a privacy screen, or halting the transaction-to safeguard against unauthorized visual access. Unlike traditional methods, GATCSA processes all data locally to ensure user privacy and operates efficiently on resource-constrained mobile devices. Preliminary testing in varied real-world conditions-differing in lighting, crowd density, and device orientation-demonstrates high accuracy in threat identification and user responsiveness. By integrating gaze tracking with environmental awareness, GATCSA represents a significant advancement in mobile payment security, enhancing user trust and privacy during digital transactions.