Change user picture via services 3
The file ID is stored in the  picture column of the users table


  Foreign key: {file_managed}.fid of user's picture.


So your payload to the update resource would look something like

{
  "uid": "123", 
  "data": { 
    "picture": "1078",
    # rest of user data
  }
}