A system and method for conducting a tokenized electronic transaction may comprise: receiving identifying biometric data for the user, generating a biometric template representative thereof, and destroying the identifying biometric data. The identifying biometric data is not stored permanently, is not transmitted, cannot be derived from the biometric template, and is destroyed so that only the biometric template remains. The biometric template is attached to a transaction token for completing the transaction represented by the token including: comparing the token and attached biometric template with reference transaction data and with a reference biometric template. When the token matches the reference transaction data and the biometric template matches the reference biometric template, then the transaction is authorized and completed, and when the token and/or the biometric template does not match the reference therefor, then the transaction is rejected.