概述
It scans people's irises with a device called the Orb to issue a World ID, a credential meant to prove that someone is a unique human, and it has offered WLD crypto tokens to people who sign up. It draws privacy scrutiny for three reasons: an iris pattern cannot be changed if it is exposed, early sign-ups were concentrated in lower-income countries, and several regulators have suspended or restricted its operations.
深入探討
World is a proof-of-personhood project from Tools for Humanity. The Orb verifies a person and issues a World ID. Historically, the project described computing iris codes and comparing them with enrolled codes to establish uniqueness. Its current AMPC description differs: World says the Orb processes iris information into anonymized encrypted fragments without storing iris codes or plaintext Hamming-distance comparisons. Apps are designed to receive a proof and an app-specific nullifier, not an iris image or code. These are project claims, not an independent audit, and the protocol can change. Privacy concerns include an irreversible biometric, whether sign-up consent is informed, retention and deletion, and protections for minors. A 2022 MIT Technology Review investigation reported incentives and limited explanation during some early sign-ups. In 2024 World announced “personal custody,” with iris images encrypted and stored on the user’s phone. The later AMPC design, launched in 2025 and updated in May 2026, is described by World as using encrypted fragments across multiple parties. Regulators have taken different actions. Kenya suspended operations in 2023; in May 2025 its High Court ordered deletion of biometric data collected there using the Orb. Spain and Portugal temporarily halted collection in 2024, and Hong Kong’s privacy regulator ordered Worldcoin to cease iris and face scanning. On December 19, 2024, Bavaria’s data protection authority (BayLDA) issued a corrective order requiring GDPR-compliant erasure and explicit-consent procedures and deletion of specified iris codes and encrypted shares collected from 2023 through December 13, 2024. This case-specific order addressed the processing examined at that time, not every later version of the system. Those orders address processing and periods considered in each proceeding; they do not decide every question about later systems, model training, or service terms. Check current regulator records and distinguish them from the company’s technical claims.
戰略影響
供應商策略
供應商路線圖會影響您的團隊接下來可以建立的功能。
成本與預算
商業條款和部署選項會影響長期成本和風險。
風險與安全
公司激勵措施塑造了產品預設、安全態勢和開放性。
The Future of Worldcoin and Iris-Scanning Privacy
Demand for proof-of-personhood tools is likely to grow as AI-generated accounts spread. World now competes with government digital IDs and other verification methods. Its expansion, including a U.S. launch in 2025, keeps its practices in front of regulators. Several questions remain open: whether courts and data protection authorities accept its encryption and deletion measures, how it handles consent and the exclusion of minors, and how users can scrutinize the entities and protocol that control identity verification. Outcomes are likely to vary by jurisdiction rather than be settled globally.
現實世界的實施
A 2022 MIT Technology Review investigation reported on Orb sign-ups in countries such as Indonesia and Kenya. It described cash and token incentives, limited explanation of how data would be used, and gaps between the project's privacy claims and its early practices.
Kenya suspended Worldcoin activities in August 2023. In May 2025, its High Court later quashed the challenged collection decision and ordered erasure of biometric data gathered there with the Orb; that was a case-specific judgment, not a global shutdown.
In March 2024 Spain's data protection agency ordered a temporary halt to Worldcoin's data collection there, and Portugal's regulator imposed a similar suspension the same month.
A social platform adds World ID to its sign-up flow to limit bots. The platform receives a cryptographic proof that the user is a verified unique human, plus an identifier specific to that app. It never receives the iris code itself.
風險與防護欄
發佈公告可能會超過實際生產工作流程的穩定性。
API 定價或政策轉變可能會在一夜之間打破假設。
單一供應商依賴性增加了鎖定和遷移成本。
實施路線圖
使用您自己的任務和資料集評估提供者。
在整合之前查看隱私、安全和法律條款。
維護跨模型或供應商的後備計劃。
監控發行說明，以便路線圖的變更不會讓團隊感到意外。
不斷探索
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the Worldcoin and Iris-Scanning Privacy quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
常見問題
What is Worldcoin and Iris-Scanning Privacy?
Worldcoin, renamed World in 2024, is a project from the company Tools for Humanity. It scans people's irises with a device called the Orb to issue a World ID, a credential meant to prove that someone is a unique human, and it has offered WLD crypto tokens to people who sign up. It draws privacy scrutiny for three reasons: an iris pattern cannot be changed if it is exposed, early sign-ups were concentrated in lower-income countries, and several regulators have suspended or restricted its operations.
Why can't an iris code simply be protected by running it through a cryptographic hash?
Iris matching tolerates small differences between scans. A cryptographic hash changes completely when even one bit changes, so matching on hashes would fail.
According to World’s current AMPC description, how is uniqueness checked without storing iris codes?
The guide reports World’s current AMPC description: encrypted fragments are used for uniqueness checks while the project says it does not store iris codes or compare plaintext Hamming distances. This is a project architecture claim; the guide distinguishes it from earlier designs and regulator decisions.
When an application verifies a World ID proof of human, which information does it receive?
World ID is designed so apps learn only that the user is a verified unique human. The iris data stays out of the app's hands.
How does a per-application nullifier help World ID proofs avoid cross-site linkability?
Because the nullifier is specific to each app and action, it blocks duplicate sign-ups while preventing apps from connecting a user's activity across services.
What did Kenya’s High Court order in May 2025 regarding Worldcoin data collected there?
The High Court ordered erasure of the biometric data collected from Kenyan residents through the Orb; the order concerned the Kenyan collection and respondents.
繼續學習
相關指南
為此主題精選的更多指南