A biometric heartrate authentication system and method is disclosed that leverages heartrate information collected by heartrate tracking devices to build a heartrate profile for a client. The system further leverages location information collected by existing location information services to determine an activity profile for a client. The activity profile information may be used together with the heartrate profile to generate an expected heartrate range against which a cardholder heartrate may be compared for authentication purposes. Because client heartrate characteristics are generally unique, varying according to the unique activities being performed by the client at any point in time, the system and method thus provide a low cost, non-invasive method for reliably authenticating individuals and securing against fraudulent account accesses.