To be fair, it somehow got into hands of the owner of the bank, who is very closely tied to the government

See my other comment on this post

Also this https://telegraf.ua/ukr/ukrayina/5935111-gorokhovskogo-chekae-pokarannya-yuristi-rozpovili-chim-dlya-monobank-zakinchitsya-skandal-z-oprilyudnennyam-foto-klientki

TLDR: some woman did a facial recognition log in method, the bank said that the photos are not stored and deleted instantly, but because there was a Slovenian flag (looked like russian in the photo)in the background, she got her bank account blocked and the CEO posted the verification image online

Edit: wrong link

monobank