World Network’s Enterprise Push to Verify Human Identity at Scale

The Orb, the $25M Deepfake, and the Race to Prove You're Human

A deep dive into World — the most ambitious, most controversial, and largest proof-of-personhood network on the planet.

---

Prologue: Why YC Just Rang the Bell

In July 2026, Y Combinator published its Fall 2026 Requests for Startups. Among 13 entries — spanning AI tutoring, offshore compute, and defense tech from the sitting U.S. Secretary of the Army — one stood out for its quiet urgency.

Proving You're Human, written by YC partner Max Kolysh, opened with a story that has become the reference case for an entire emerging market.

In January 2024, a finance employee at Arup Group's Hong Kong office received an email that appeared to come from the company's UK-based CFO. It requested an urgent, confidential transaction. Suspicious, she ignored it. Then a video meeting invitation arrived. She joined the call. On screen were the CFO and several senior colleagues — people she recognized, people who spoke and gestured and responded in real time. They confirmed the instructions.

She transferred HK$200 million — roughly US$25.6 million — across 15 transactions to five local bank accounts.

Everyone on that call was a deepfake.

The incident, reported by CNN and Hong Kong police, crystallized a truth that YC's Kolysh framed bluntly: seeing and hearing someone is no longer proof of anything. Banks, apps, video calls, contracts — every interaction that assumes a human on the other end needs a new trust layer.

What YC didn't say explicitly is that the largest company already building that layer was co-founded by the same person who served as YC's president from 2014 to 2019: Sam Altman.

---

Part I: The Bet Before It Was Obvious

2019: Three founders, one uncomfortable question

Tools for Humanity was incorporated in 2019 in San Francisco and Munich by Sam Altman, Alex Blania, and Max Novendstern. The founding thesis was unusually early: as AI approached indistinguishability from humans, the internet would need a new primitive — a way to answer the question "are you a real, unique human?" without requiring anyone to reveal who they are.

Altman had already been thinking about this at OpenAI. "We started thinking about the infrastructure that society was going to need if AI really started to happen," he later said. The conclusion was uncomfortable: in a world where AI agents could pass as humans at near-zero marginal cost, every digital interaction would become suspect unless there was a cryptographic anchor to a real person.

The project was initially called Worldcoin, and its ambition was even larger than verification: a global identity protocol, a global digital currency (WLD), and an app for payments, purchases, and transfers. The vision was a three-layer stack — World ID (proof of personhood), World App (the consumer wallet), and World Chain (the blockchain layer).

In 2023, a few months before the public launch, Altman and Blania wrote: "Worldcoin is an attempt at global scale alignment. The journey will be challenging and the outcome is uncertain. But finding new ways to broadly share the coming technological prosperity is a critical challenge of our time."

In October 2024, the project rebranded from Worldcoin to World. The name change reflected a pivot: the crypto token was becoming secondary. The identity layer was the real product.

The PayPal playbook

The growth strategy borrowed directly from Peter Thiel's PayPal. Of its initial funding, PayPal spent under $10 million building the product — and pumped roughly $70 million into a referral program that paid both new users and the people who invited them. World adopted the same logic: if proof of personhood is a network good (it becomes more valuable as more people have it), the fastest way to bootstrap the network is to pay people to join.

The mechanism was the WLD token. In countries where regulations permitted, verified users received WLD grants simply for being human. The economics were simple: scanning your iris at an Orb took five minutes, and you walked away with digital currency.

---

Part II: How It Actually Works

The Orb

The centerpiece of World's architecture is the Orb, a chrome-plated spherical device roughly the size of a bowling ball that houses a custom multispectral imaging system. As of mid-2026, approximately 1,680 Orbs are deployed globally.

The process is five steps:

1. A user downloads World App, which generates a Semaphore key pair on-device. The public key is presented as a QR code to the Orb.
2. The Orb captures high-resolution images of the user's irises and performs liveness detection (confirming the eyes belong to a living person, not a photograph, video, or prosthetic).
3. The Orb's onboard processor — now running on NVIDIA Jetson modules with roughly 5× the AI performance of the original hardware — converts the iris images into an IrisHash, a numerical representation of the unique iris pattern.
4. The Orb sends the IrisHash and the Semaphore public key hash to a sign-up sequencer, which checks the IrisHash against a database of previously registered hashes to confirm uniqueness. The iris images themselves are encrypted, sent to the user's phone, and then permanently deleted from the Orb.
5. The sequencer registers the Semaphore identity commitment on-chain. The protocol now knows "this is a unique human" without knowing anything about who they are.

Zero-knowledge proofs: the privacy engine

The crucial privacy property comes from Semaphore, an open-source zero-knowledge proof system originally developed for Ethereum. Here's how it works:

• The Orb links an IrisHash to a SemaphoreHash on-chain.
• That SemaphoreHash is never used publicly for anything that could be tied to the user.
• When a user wants to prove they're a verified human to a third party (say, Tinder or Zoom), they generate a zero-knowledge proof that cryptographically demonstrates: "I am a member of the set of verified humans, and this is my first time proving it to you."
• The verifier learns exactly one bit of information: this person is a verified unique human. Nothing else.

There is no database of user records. No names, no emails, no phone numbers are required for verification. The protocol is designed so that even World itself cannot link a World ID usage to a specific person, cannot track users across applications, and cannot reconstruct which iris scan corresponds to which on-chain identity.

This is the architectural bet that separates World from traditional KYC/identity verification providers. KYC answers "who are you?" World ID answers "are you a real human, and are you unique?" The distinction matters enormously for privacy, and it also defines the use-case boundary: World ID is not a replacement for regulated identity checks.

World ID 4.0 and the enterprise stack

April 2026 marked World's transition from consumer experiment to enterprise infrastructure. World ID 4.0 introduced multi-key support, key rotation, account recovery, and session management — the features that security and IT teams require for production deployment.

The protocol's framing shifted from "proof of personhood" to human continuity: the idea that the person who authorized an action is the one performing it, not just their device or credential. Today's enterprise security — MFA, endpoint protection, zero-trust architectures — verifies the device, not the human. World ID closes that gap.

---

Part III: The Enterprise Pivot — Who's Betting on World

The partner list announced at World's "Lift Off" event in San Francisco in April 2026 is the strongest signal of where proof-of-human technology is heading:

Zoom: Deep Face for real-time meeting verification

Zoom became the first communications platform to integrate World ID Deep Face directly into its meetings product. The approach is architecturally distinct from deepfake detection — rather than trying to spot fake video frames (an arms race against improving generative models), Deep Face proves presence.

The system uses a three-way cryptographic match:

1. The signed iris image captured when the user originally verified at an Orb.
2. A real-time Face Auth liveness selfie taken on the user's device during the meeting.
3. The live video frame other participants see on screen.

When all three match, participants see a Verified Human badge on the participant tile. Hosts can enable a Deep Face Waiting Room requiring everyone to prove humanity before entering. Any participant can request an on-demand check of another participant mid-call. VanEck Funds, a global investment manager, is in limited beta.

The privacy model is designed for enterprise: Zoom receives only the high-assurance signal, not the underlying biometric data.

DocuSign: proof of human for legally binding agreements

DocuSign integrated World ID to add a "verified human" check to the signing workflow. As document workflows become increasingly automated and agent-assisted — AI agents drafting, reviewing, and even negotiating contracts — the question of whether a human actually authorized the signature becomes critical. World ID provides an optional layer: the signer can prove they are a real, unique human who consciously authorized the agreement.

Okta and Vercel: human-in-the-loop for AI agents

Okta and Vercel are integrating World ID to verify that a real human approved specific actions taken by AI systems. This is the agent authorization problem: when an AI agent provisions infrastructure, sends a payment, or modifies a production system, who — which human — authorized it?

Tinder and Match Group: verified humans in dating

Tinder, which first piloted World ID in Japan, expanded the integration to the United States. Orb-verified users receive a distinctive badge on their profile and five free Boosts. The use case is straightforward: in a world of AI-generated profiles and catfishing, a cryptographic signal that a real human is behind the profile reduces fraud and increases trust. Match Group, which owns Tinder, OkCupid, and Hinge, is the largest consumer platform to adopt World ID.

Others in the pipeline

• Razer: Razer ID verified by World ID for human-first competitive gaming.
• Mythical Games: proof of human for player-owned economies.
• Concert Kit: a new product that allows artists to reserve tickets for verified humans. Thirty Seconds to Mars committed to pilot on their 2027 tour, working with Bruno Mars's current world tour.
• Outtake Verify for Email: a browser extension that cryptographically signs outgoing emails with proof a verified human pressed send. Tools for Humanity deployed it internally.
• Shopify, AWS: mentioned in World's partner communications, with scope still emerging.

---

Part IV: The Numbers

Metric	Value	Date
Network members	39M+	July 2026
Verified humans (Orb-scanned)	18M	July 2026
World App users	30M+ (some sources cite 34.2M)	Mid 2026
ID proofs processed	475M	July 2026
Daily wallet transactions (World Chain)	2.1M	Mid 2026
Total transactions (World Chain)	605.42M	Mid 2026
Active Orbs globally	1,680	Mid 2026
Employees (Tools for Humanity)	500+	2026 (up from ~400 in 2025)
New user onboarding rate	1 every 0.75 seconds	2025 data
Monthly active World App users	8M+	2025 data

Funding history

Date	Round	Amount	Lead / Notable Investors
Feb 2021	Series A	~$25M	Andreessen Horowitz, others
Mar 2022	Series B	Undisclosed	Andreessen Horowitz, Bain Capital, others
May 2023	Series C	$115M	Blockchain Capital (lead); a16z crypto, Bain Capital Crypto, Distributed Global
May 2024	Series C extension	$115M	Spencer Bogart (lead); Andreessen Horowitz, Bain Capital Crypto, Distributed Global
Sep 2025	PIPE (Eightco)	$250M	Pantera Capital, Brevan Howard, CoinFund, Kraken Ventures, others
Jul 2026	Token sale	$52.5M	Pantera Capital (lead); Bain Capital Crypto, Eightco Holdings, Selini Capital, Susquehanna Crypto

Total disclosed funding: approximately $550M+. Reported post-money valuation at Series C: roughly $2.5–3 billion range. The July 2026 token sale was structured with a 12-month lock on all WLD sold.

---

Part V: The Regulatory Headwinds

World's approach — collecting biometric data in exchange for financial incentives — has triggered a cascade of regulatory actions across jurisdictions. This is not peripheral friction; it is the single largest threat to the company's trajectory.

Jurisdiction	Action	Date	Detail
Spain	Halt order + data deletion	2024	Data protection authority found GDPR violations. High Court upheld temporary ban.
Brazil	Full ban	Jan 2025	Prohibited the project entirely, citing that financial incentives for biometric data undermined voluntary and informed consent.
Kenya	Court-ordered data deletion	2024	Ordered deletion of biometric data collected from Kenyan users.
South Korea	$830,000 fine	2024/2025	Privacy violations related to biometric data handling.
Hong Kong	Cease operations order	2024	Privacy Commissioner ordered halt to iris-scanning operations.

The pattern is consistent: regulators object to the combination of biometric data collection and token incentives. The argument is that paying people for body data cannot produce meaningful consent, especially in developing economies where the monetary incentive may represent significant value relative to local income.

World has responded with multiple architectural changes:

• Personal Custody (March 2024): biometric data encrypted and stored on the user's device, not World's servers.
• Open-sourced Orb software (March 2024): allowing independent security review of the capture pipeline.
• Self-serve Orb: a version users operate independently without staff assistance, reducing operator risk.
• Orb Mini: a smartphone-sized verification device expected to deploy in 2026, designed for accessibility and lower operational cost.

Despite these, the regulatory picture remains the project's most significant unsolved problem. Almost every major market expansion now faces preemptive scrutiny.

---

Part VI: Why World Wins — and Why It Might Not

The moat is real

World's competitive position rests on four reinforcing advantages:

1. Hardware dependency as barrier to entry. Manufacturing, deploying, and operating 1,680+ custom biometric devices across dozens of countries is an operations problem competitors cannot solve with software alone. The Orb network is a physical distribution advantage.

2. The network effect is bilateral. More verified humans → more platforms integrate World ID → more reasons for users to get verified. This flywheel is difficult to replicate from a standing start, especially when the incumbent already has 18M verified users.

3. Zero-knowledge privacy is the right architecture. Unlike traditional KYC providers that store identity documents, World's ZKP model creates zero data liability for enterprise customers. "No data, no problems" is a compelling enterprise sales pitch.

4. Enterprise partnerships compound. Zoom, DocuSign, Okta, and Tinder are not pilot experiments; they are production integrations with some of the largest platforms in communications, identity, and dating. Each integration normalizes World ID and creates path dependency for the partner.

The vulnerabilities are structural

1. The biometric incentive problem has no clean resolution. As long as World uses token grants to drive adoption, regulators in privacy-conscious jurisdictions will object. Removing the incentive would slow growth dramatically. Keeping it invites more bans.

2. Orb density is still low. 1,680 Orbs worldwide means most of the planet cannot access verification. The self-serve Orb and Orb Mini are attempts to solve this, but they are unproven at scale and introduce new attack surfaces (Forrester has noted that iris scanners on consumer-grade devices are vulnerable to presentation attacks).

3. The crypto association is a double-edged sword. WLD token volatility, the speculative interest around the token, and the general skepticism toward crypto projects create noise that obscures the identity infrastructure story. Many enterprise buyers want proof of human without the token, the blockchain, or the Altman drama.

4. A software-only alternative with acceptable assurance could undercut the Orb. If someone builds a multi-signal system (combining device fingerprinting, social graph analysis, behavioral signals) that achieves "good enough" Sybil resistance without hardware, the cost and friction advantages could erode World's enterprise pipeline. Proof of You and others are probing this angle.

5. The Altman concentration risk. Sam Altman chairs Tools for Humanity while running OpenAI. The perception of one person controlling both the leading AI company and the leading human-verification network creates optics that regulators and competitors will exploit.

---

Part VII: Open Questions

1. Can World decouple from crypto? The identity protocol is technically independent of the token. Would enterprise adoption accelerate if World ID were sold purely as infrastructure, with WLD treated as a legacy artifact?

2. What happens when AI agents need their own identities? World's framing is "prove you're human." But the agentic future YC describes in the same RFS batch (Multiplayer AI, Company Brain, AI-native compliance) implies a world where agents act semi-autonomously on behalf of humans. Does the protocol need an "authorized by verified human X" primitive rather than a simple human/not-human binary?

3. Is hardware the moat or the anchor? The Orb makes World difficult to copy and difficult to scale. If the winning approach turns out to be a pure-software solution with 95% rather than 99.9% assurance, World's capital-intensive model becomes a liability.

4. Does privacy-preserving proof of personhood require decentralization? World's architecture is technically decentralized (the protocol runs on World Chain), but Tools for Humanity is a private company that controls Orb manufacturing, the sequencer, and the foundation. A fully decentralized alternative with comparable scale does not exist yet.

---

Epilogue: The Market YC Is Calling For

When YC put "Proving You're Human" on the Fall 2026 RFS, they were not asking for another World competitor. They were asking for the thing World cannot yet be: the universal, invisible, zero-friction trust layer that works everywhere, for everyone, without hardware, without tokens, and without regulatory baggage.

World has proven the demand. 39 million people signed up. Zoom, DocuSign, Okta, and Tinder integrated. The $25.6 million deepfake at Arup was not an isolated incident — it was the leading edge of a fraud wave that grew 1,210% in 2025 alone.

What remains unproven is whether World's specific approach — infrared iris scanners, blockchain tokens, and Sam Altman's personal brand — is the one that crosses the chasm to ubiquity, or whether it clears the path for something simpler.

Either way, the market is not theoretical. It is here.

---

References

1. Y Combinator, "Requests for Startups — Fall 2026," https://www.ycombinator.com/rfs
2. CNN, "Finance worker pays out $25 million after video call with deepfake 'chief financial officer,'" Feb 4, 2024, https://www.cnn.com/2024/02/04/asia/deepfake-cfo-scam-hong-kong-intl-hnk
3. Fortune, "A deepfake 'CFO' tricked British design firm Arup in $25 million fraud," May 17, 2024, https://fortune.com/europe/2024/05/17/arup-deepfake-fraud-scam-victim-hong-kong-25-million-cfo
4. Wikipedia, "World (blockchain)," https://en.wikipedia.org/wiki/World_(blockchain)
5. Time, "The Orb Will See You Now," https://time.com/7288387/sam-altman-orb-tools-for-humanity
6. TechCrunch, "Worldcoin, co-founded by Sam Altman, is betting the next big thing in AI is proving you are human," Mar 7, 2023, https://techcrunch.com/2023/03/07/worldcoin-cofounded-by-sam-altman-is-betting-the-next-big-thing-in-ai-is-proving-you-are-human
7. World, "Introducing Worldcoin — A Letter from the Founders," July 2023, https://world.org/cofounder-letter
8. World, "How the Launch Works," https://world.org/blog/world/how-the-launch-works
9. World, "Privacy at World: A Technical Deep Dive - Part I," Feb 10, 2023, https://world.org/blog/developers/privacy-deep-dive
10. World, "World ID for business: Zoom and Docusign integrate proof of human," Apr 17, 2026, https://world.org/blog/announcements/zoom-docusign-world-id-for-business
11. World, "The New World ID: Proof of Human for the Internet — New Partners," Apr 17, 2026, https://world.org/blog/announcements/the-new-world-id-and-the-partners-bringing-proof-of-human-to-the-internet
12. Axios, "Sam Altman's 'proof of human' company pushes into mainstream services," Apr 17, 2026, https://www.axios.com/2026/04/17/worldcoin-zoom-shopify-retail-partnership
13. UC Today, "What If You Weren't Actually There? World Is the Reason Zoom, Docusign, and Okta Are Asking," Apr 22, 2026, https://www.uctoday.com/productivity-automation/what-if-you-werent-actually-there-world-is-the-reason-zoom-docusign-and-okta-are-asking
14. Decrypt, "World Foundation Raises $52.5M to Scale Sam Altman's 'Proof of Human' ID," Jul 24, 2026, https://decrypt.co/374216/world-foundation-raises-52-5m-to-scale-sam-altmans-proof-of-human-id
15. CoinStats AI, "Worldcoin (WLD) — Investment Analysis July 2026," https://coinstats.app/ai/a/investment-analysis-worldcoin-wld
16. Pantera Capital, "World: A Mission Critical Identity Solution," https://panteracapital.com/world-a-mission-critical-identity-solution
17. Messari, "What is World?" https://messari.io/project/world-network/profile
18. World, "Proof of human is essential, and it's going mainstream in 2025," https://world.org/blog/world/proof-of-human-essential-going-mainstream-2025
19. World, "The Revenue Potential from World ID," https://world.org/blog/announcements/world-id-fees-the-revenue-potential-from-world-id
20. World, "The benefits of proof of personhood by the numbers," https://world.org/blog/world/benefits-proof-personhood-numbers
21. Fortune, "Sam Altman's eyeball-scanning crypto project Worldcoin raises $115 million Series C," May 25, 2023, https://fortune.com/crypto/2023/05/25/sam-altman-eyeball-scanning-crypto-worldcoin-series-c-ai
22. Tools for Humanity, https://www.toolsforhumanity.com
23. World ID, https://world.org/world-id
24. Gate.com, "How Does World ID Work? A Complete Guide to Iris Verification and Proof of Personhood," May 8, 2026, https://www.gate.com/learn/articles/how-world-id-works
25. Hackernoon, "How World ID's Biggest Upgrade Replaces Device Trust With Human Continuity," Apr 17, 2026, https://hackernoon.com/how-world-ids-biggest-upgrade-replaces-device-trust-with-human-continuity
26. BusinessWire, "The New World ID: Proof of Human for the AI Era Scales Across the Digital Platforms People and Businesses Use Every Day," Apr 17, 2026, https://www.businesswire.com/news/home/20260417530721/en/
27. Mobile ID World, "World Ships World ID 4.0 App With Zoom, DocuSign Integrations," Apr 2026, https://mobileidworld.com/world-ships-world-id-4-0-app-with-zoom-docusign-integrations
28. Forbes, "The Evolution Of Proof Of Human Uniqueness: Building Trust In AI Age," Jan 29, 2025, https://www.forbes.com/sites/taarinikaurdang/2025/01/29/the-evolution-of-proof-of-human-uniqueness-building-trust-in-ai-age
29. Biometric Update, "Proof of personhood protocols jockey to establish networks of 'verified humans,'" May 2025, https://www.biometricupdate.com/202505/proof-of-personhood-protocols-jockey-to-establish-networks-of-verified-humans
30. CB Insights, "Tools for Humanity — Financials," https://www.cbinsights.com/company/worldcoin/financials
31. Startup Intros, "Tools For Humanity: Funding, Team & Investors," https://startupintros.com/orgs/tools-for-humanity
32. Tracxn, "Tools For Humanity — Company Profile," https://tracxn.com/d/companies/tools-for-humanity
33. Vectra, "AI scams in 2026: how they work and how to detect them," https://www.vectra.ai/topics/ai-scams
34. Regula Forensics, "Proof of Personhood vs ID Verification: What Businesses Need," https://regulaforensics.com/blog/proof-of-personhood
35. Forrester, "Worldcoin Orb Identity Verification Device Faces Headwinds In Mass Adoption," https://www.forrester.com/blogs/worldcoin-orb-identity-verification-device-faces-headwinds-in-mass-adoption
36. Observer, "What is Worldcoin, Sam Altman's Newly Rebranded Identity Project?" Nov 2024, https://observer.com/2024/11/sam-altman-worldcoin-rebrand-world-ai
37. Matthew Green (cryptography blog), "Some rough impressions of Worldcoin," Aug 21, 2023, https://blog.cryptographyengineering.com/2023/08/21/some-rough-impressions-of-worldcoin
38. ExplainX, "YC Requests for Startups Fall 2026: 13 Ideas Worth Building," Jul 25, 2026, https://explainx.ai/blog/yc-requests-for-startups-fall-2026
39. Startup Fortune, "Y Combinator's Fall 2026 wish list puts a sitting Army Secretary in the founder pitch room," Jul 24, 2026, https://startupfortune.com/y-combinators-fall-2026-wish-list-puts-a-sitting-army-secretary-in-the-founder-pitch-room