Some phones, usually ones that just use the front camera, can be fooled by a photo of your face. Face scanners that map your face in 3D are much harder to trick.
The move
Use a strong PIN, passcode or fingerprint for your phone lock, and turn on 2FA for your most important accounts.
Seen via Which?