https://www.cnet.com/news/early-galaxy-s9-rumor-says-no-iphone-x-style-face-id/

That report comes from Business Korea, citing sources inside and outside the company.

The Galaxy S8, S8 Plus and Note 8 already have the face unlock functionality, using a facial recognition system that isn't secure enough to work with mobile payments. It serves as an alternative unlock method to a password, pin, pattern, fingerprint reader and iris unlocking. Those last two, by the way, are secure to work with Samsung Pay and Google Pay.