SYSTEMS AND METHODS FOR PASSIVE MULTI-FACTOR AUTHENTICATION OF DEVICE USERS

A passive Multi-Factor Authentication (MFA) system includes a passive MFA server that receives, from a user computing device, passive biometrics data and device data collected during a current session on a remote site; submits the passive biometrics data to a user profile model, and in response receives a user authentication confidence score; and submits the device data to a device profile model, and in response receives a device authentication confidence score. The passive MFA server is also configured to receive a user authentication request for a current payment transaction associated with the current session on the remote site, and transmit the user authentication confidence score and the device authentication confidence score to an Access Control Server (ACS) configured to determine that the scores satisfy a predefined threshold for passively authenticating a user of the user computing device during the current session, without conducting an active authentication process with the user.