The practice of providing something you know, something you have and something you are is failing. 71 percent of accounts are guarded by passwords that are used across multiple sites. When a password is compromised due to a phishing attack or data breach, multiple accounts belonging to that user are at risk. Gartner research found that users fail to answer knowledge-based questions 1530 percent of the time, while fraudsters answer correctly 60 percent. New technologies such as behavioral biometrics have the potential to replace passwords and help organizations avoid compromise.”]
Source: https://securityintelligence.com/trust-but-verify-authentication-without-validation-is-naive/