find someone that uses face recognition, go to their social media, point camera at their picture and your in.
I'm not defending this smile-to-pay thing, but I don't think it's this easily exploitable. As far as I know
(not sure, don't quote me on this), most decent facial recognition systems take note of the sort of "depths" of a certain face. So chances are that simply using a photo of a person won't do the job.