The tests, conducted on a Samsung Galaxy S20 and iPhone 15, included 1,500 spoofing attempts and 550 genuine user trials.