A method and system for authenticating users accessing financial accounts from user terminals via multi-factor image authentication. The system includes an authentication server and a user terminal. The method captures a first facial image of a user and compares this image with stored facial recognition credentials. The method prompts the user via a facial gesture cue to make a facial gesture, captures a second facial image of the user, and compares the second image with stored facial gesture credentials. The user is authorized to perform a transaction in the event the first facial image matches a facial recognition credential for an authorized account, and the second facial image matches a facial gesture credential associated with the authorized account. Facial gesture credentials may be based upon static gestures or dynamic gestures, and may be overt or secret. An additional authentication factor may employ a secondary biometric sensor.