World, the iris-scanning identity venture co-founded by Sam Altman, presented its first sector package at Money20/20 in Las Vegas on October 18: a banking-and-finance edition of World ID. It uses cryptographic proofs so a financial institution can verify a person, not an automated system. AI fraud is the backdrop; the missing pieces are a confirmed bank, disclosed prices and independence from the Orb iris scan.
- Launch: World ID app with three checks; World ID for Agents, whose AgentKit is “currently in beta”; World ID for Zoom, live since April.
- Partners: Pantera Capital, Bain Capital, Outtake, VanEck Funds and OpenExchange—crypto fund, alt-investment manager, brand-protection firm, ETF manager, virtual-events platform. No bank; no prices.
- Investor tie: Pantera led July 2026’s $52.5 million World Foundation token sale with a one-year lockup; Bain Capital Crypto took part. Two of five partners invest.
- Oversight: Spain’s February 2026 warning; orders or bans in Germany, Kenya, Colombia, Brazil, Thailand and the Philippines.
Three checks and the Orb
The World ID app carries three checks. Proof of Presence is a phone-selfie liveness test. Proof of Attributes confirms official-credential data—nationality, age—without revealing more. Proof of Human, the system’s core, still requires what World calls
“a one-time visit to an Orb”
—the iris scanner. Less invasive layers were added, not a replacement. Bank uses: person-linked transfer approvals, account recovery, account opening and branch entry.
Tools for Humanity’s site states the company was:
“founded in 2019 by Alex Blania (CEO) and Sam Altman (Chairman)”
Altman is co-founder and chair, not the operator; Blania is CEO and presented the product.
“One of the core beliefs we had is that the future would be agentic,” Blania said. He said proof of humanity “would turn out to be kind of the gate for almost any transaction on the internet.”
Regulators, contradiction, Europe
The launch did not mention regulators. Spain’s data protection agency issued a formal warning in February 2026 before a planned restart. It said the activity
“podría suponer un tratamiento de datos biométrico para identificación en el caso del iris, y para autenticación en el caso del rostro.”
Its resolution added that
“el usuario parece que no tendría control total sobre los datos en la medida en que su acceso a los datos estaría condicionado al uso de la aplicación proporcionada por TfH.”
It found no information on legal bases or lifting the biometric ban, and demanded necessity, proportionality and non-biometric alternatives. The company said it would postpone temporarily while reviewing; that is the last known status.
Bavaria’s authority found GDPR violations in December 2024 and ordered stored iris codes deleted, erasure rights enforced and minors’ data protected. Kenya’s High Court called the activity illegal and unconstitutional in May 2025, ordering permanent deletion within seven days. Colombia’s regulator confirmed in June 2026, at second instance with no appeal, immediate final closure of personal-data operations and deletion of sensitive data, iris codes included. Brazil has banned iris payments since February 2025; Thailand ordered deletion for 1.2 million users; the Philippines issued a cease order that included blocking downloads.
World says the iris image is erased and only a cryptographic proof remains on the phone. Bavaria ordered stored codes deleted, Spain says users lack full control, and local-only data would leave nothing to erase. No independent source has verified the claim; two accounts remain unresolved.
Europe’s mandatory route is different. Regulation 2024/1183, eIDAS 2, requires member states to offer a European Digital Identity Wallet and obliges private entities bound to strong user authentication to accept it on request. Financial services are expressly covered.
AI fraud is real, but a regulated lender still needs a named client, a price, a live AgentKit and a data-protection answer that survives review. World has a Las Vegas stage, a beta toolkit and an Orb—not yet a banking product.