Apparatus and methods for continuous real-time authentication are provided. The apparatus and methods may include using a biometric sensor on an Internet-of-things (“IoT”) device to measure a biometric attribute of a user. The measured biometric attribute may be transmitted to a server to compare to a stored biometric attribute and authenticate the user. The IoT device may continue to measure the biometric attribute of the user at a pre-determined interval. Each measurement may be used to authenticate the user. This continuous authentication process may take place without the user's conscious interaction with the IoT device. The apparatus and methods may include using the continuous authentication to process and approve a transaction the user requests.