Recommended Free Tools
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
When Futurism reported in August 2024 that at least 14 countries were scrutinizing Worldcoin, the figure captured a real international backlash—but not 14 identical, simultaneous investigations. Governments variously opened inquiries, issued warnings, suspended enrollment, or made formal findings. Since then, Kenya’s police investigation has closed without further action, while Thailand and Spain have seen newer developments. The project, now called World, remains under jurisdiction-by-jurisdiction scrutiny.
What World is—and what the Orb does
World, formerly Worldcoin, is a digital identity and cryptocurrency project co-founded by Sam Altman and Alex Blania. It is not an OpenAI product. Its central idea is proof of personhood: letting someone demonstrate that they are a unique human without repeatedly revealing their name or other conventional identity details.
The Orb is the physical device used to verify uniqueness. World says it captures a person’s face and iris imagery, processes images and derived information, and can issue a World ID credential. Users interact with the service through the World App; eligible participants may also access WLD, the project’s cryptocurrency, subject to local rules and availability. Tools for Humanity supports the project’s development and operations, while the Worldcoin Foundation is associated with protocol governance. These names describe different parts of the undertaking, not interchangeable entities.
World’s stated rationale is that a privacy-preserving proof of a unique human could help online services distinguish people from bots and duplicate accounts. The company describes its technical design and privacy approach in its Orb explanation and regulatory and privacy statement. Those are the company’s claims about its system; regulators have separately questioned whether collection, consent, retention and user rights meet local legal standards.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
What information is involved?
“An iris scan” can conceal several distinct data types. The Orb captures face and iris photographs. The system may also process derived biometric representations or uniqueness-check data, issue a World ID credential, and connect that credential to app or wallet activity. Operators and service providers may handle other information. These components have different purposes and retention rules, so it is inaccurate to collapse them into a claim that “your iris is on the blockchain.”
- A participant presents their face and eyes to an Orb.
- The device captures imagery and processes it for verification.
- Images or derivatives are transmitted through the project’s systems, according to World’s description, for processing and uniqueness checks.
- If verification succeeds, the user can receive a World ID credential and use the app’s relevant features.
- Access to WLD or other incentives depends on eligibility, local law and current program terms.
World says imagery is encrypted and that its architecture is designed to avoid retaining conventional identity information. The important questions are not limited to whether a particular server can decrypt an image. They include what is collected at each stage, what derived data persists, who controls it, where it is processed, and what deletion actually removes—including backups, operator-held records and linked account data.
Why a biometric credential raises a different privacy risk
An iris pattern is a biometric identifier. A compromised password can be replaced; a person cannot simply replace their iris. That makes questions about access controls, purpose limitation, retention, cross-border transfers and deletion consequential even if no breach has been established.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Regulators and critics have also focused on the circumstances of enrollment. A cryptocurrency reward can encourage participation, but may make it harder to establish that people understood the terms and felt free to decline—especially where the reward is financially significant to them. A token is not necessarily cash: its value can fluctuate, and availability varies. Reports of minors being enrolled have added concern because a child may not be able to provide legally valid consent and may be especially susceptible to inducements.
These concerns are not proof that World caused a global biometric breach or that every participant was coerced. They are questions about whether consent is informed and voluntary, whether the collection is proportionate to the stated purpose, and whether safeguards work in practice.
What the “more than a dozen countries” figure means
The 14-country figure was a reported tally of government scrutiny, drawing on earlier reporting—not a count of 14 formal criminal investigations or final rulings. Some authorities investigated; others warned, temporarily halted activity, examined data practices or pursued a different regulatory issue. The status of a case can also change. The table separates the best-documented examples from jurisdictions included in the reported tally where the available record does not establish an equivalent formal proceeding.
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
| Jurisdiction | Action or concern | How to read the status |
|---|---|---|
| Hong Kong | The privacy regulator investigated and, in May 2024, found contraventions concerning collection, retention, transparency and data access or correction rights. It ordered local scanning and collection to cease. | A completed regulatory finding and enforcement action, not merely an open inquiry. Regulator’s findings. |
| Spain | Spain’s data-protection authority ordered a temporary halt in March 2024. In February 2026 it issued a warning concerning resumed World-related activity. | The 2024 halt was not the final word on current status. The later warning shows renewed scrutiny; it should not be described as a permanent nationwide ban without further evidence. 2024 halt; 2026 warning. |
| Thailand | Authorities have examined iris enrollment, data-protection issues and whether WLD-related services required a digital-asset licence. The Department of Special Investigation reported searches at five locations in January 2026 and evidence-gathering; the SEC described interagency examination and licensing concerns. | A serious, evolving multi-agency matter—not a final finding that every aspect of the project is illegal. DSI update; SEC update. |
| Kenya | Authorities suspended enrollment in 2023 amid privacy, security and financial concerns. The police investigation was reported closed in June 2024 without further police action. | A key counterexample to the idea that scrutiny necessarily ends in prosecution or a permanent ban. Report on closure. |
| France | The privacy regulator scrutinized the project’s collection and preservation of data. | Regulatory scrutiny should not be conflated with a final sanction. Italian regulator’s notice discussing scrutiny. |
| Germany (Bavaria) | Data-protection supervision raised questions about transparency, security, consent and user rights. | Bavarian supervision is not the same as a national criminal investigation. European Parliament response summarizing reported scrutiny. |
| United Kingdom | Privacy and data-protection scrutiny was reported. | The cited summary does not establish a final order; do not read “scrutiny” as a finding of illegality. European Parliament response. |
| South Korea | Reported scrutiny included data handling and overseas transfers. | Attribute the reported concerns; the cited summary is not a substitute for a specific final decision or penalty. European Parliament response. |
| Portugal | Authorities scrutinized enrollment, including concerns involving minors and biometric-data practices. | Temporary administrative measures are not automatically permanent prohibitions. European Parliament response. |
| Argentina | Futurism reported consumer-protection action and a fine over allegedly abusive terms. | The reported tally is not enough to characterize the precise legal basis or current status of the fine. Futurism’s account. |
| Colombia | Data-protection scrutiny and alleged sensitive-data violations appeared in an incident summary. | Allegations or reported scrutiny are not the same as a final regulatory finding. OECD incident overview. |
| Chile | Included in Futurism’s count of countries where government scrutiny was reported. | The cited source does not establish the precise procedural status. Futurism’s account. |
| Indonesia | Reported concerns involved registration and authorization. | The cited overview does not establish the exact action or a final outcome. OECD incident overview. |
| European Union | EU-level and member-state discussions have raised GDPR questions about transparency, consent, erasure and security. | This is not one EU-wide criminal case. Data-protection enforcement is carried out through relevant authorities and procedures. European Parliament response. |
Because the count groups unlike actions and may include jurisdictions with limited procedural detail, “at least 14 countries scrutinized or challenged Worldcoin” is more defensible than “14 countries are investigating it.” The latter implies a uniform, current legal status the evidence does not support.
What regulators are questioning
Consent and transparency
People need to understand what the Orb captures, why each data type is needed, who is responsible for it, how long it is kept, whether it can be deleted and what happens if consent is withdrawn. Hong Kong’s regulator cited failures involving transparency and access or correction rights. Consent is not just a screen users tap through; it depends on whether information is understandable and whether the user has meaningful choices.
Minors and enrollment safeguards
Reports that underage people were enrolled have drawn attention to age checks and local operators’ practices. If minors can participate, the issue is not only whether an age rule exists on paper, but how it is enforced at enrollment and whether any reward creates additional pressure.
Rank #4
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
Retention, deletion and international transfers
“Delete my data” can mean different things: removing raw images, derived templates, backups, an account, or a credential. A user may also have app and wallet records that are distinct from biometric records. World’s privacy architecture and regulators’ concerns should therefore be considered separately: a technical claim about encryption does not, on its own, establish that the user can exercise every legal right or verify complete deletion.
Financial regulation
Thailand illustrates that the dispute is not exclusively about privacy. Its SEC has raised questions about whether operators providing WLD services were conducting a digital-asset business without the required licence. Privacy compliance and financial licensing are separate legal tests; satisfying one would not automatically resolve the other.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteThe case for and against proof of personhood
The potential case for it: Bots, synthetic identities and duplicate accounts can undermine online services, voting mechanisms, promotions and other systems that need one-person-one-account rules. A reusable credential that demonstrates personhood without repeatedly disclosing a legal name could be useful. World argues its cryptographic approach is intended to reduce exposure of personal information.
Best Value
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
The core objection: A global identity layer built on biometrics creates a high-consequence collection point. Iris data is difficult to replace; enrollment happens through local operators; consent quality can vary; and the cryptocurrency incentive complicates voluntariness. Even if the system works as designed, regulators can still ask whether biometric collection is necessary and proportionate, whether less intrusive alternatives exist, and whether governance is accountable across borders.
Proof of personhood is also not the same as legal identity, citizenship, or entitlement to government benefits. Nor does a project’s long-term vision for distributing tokens make it an operating universal-basic-income program. Those are separate claims from whether the verification system is useful or lawful.
What has—and has not—been established
- Established in specific places: Hong Kong announced a regulator finding and cessation order; Spain imposed a temporary halt and later issued a warning; Kenya suspended enrollment and later closed its police probe without further action.
- Still developing: Thailand’s 2026 activity involves evidence-gathering and interagency scrutiny, including data-protection and licensing questions.
- Reported but procedurally varied: The 2024 “14 countries” tally covers a mix of inquiry, warning, suspension, enforcement and other scrutiny.
- Not established by this record: That every country found World unlawful, that every investigation resulted in a ban, or that World caused a confirmed global biometric breach.
The project’s name change from Worldcoin to World can also make older records harder to spot. When assessing a current claim, check the date and authority involved, and distinguish an allegation, an open inquiry, a temporary order and a final finding.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Before enrolling: questions worth getting clear answers to
- Does this enrollment capture raw iris and face images, derived biometric data, or both?
- What is retained, for how long, and in which countries—including backups and records held by the local Orb operator?
- What does deletion remove: images, templates, credentials, app data, wallet records, or only account access?
- Who is the data controller or responsible organization, and how can you contact it?
- Can you complete verification without accepting a token reward? What is the reward worth now, and can that value change?
- What happens to your World ID and data if service is suspended in your country or you lose access to the app?
- Are minors excluded, and how is age actually checked?
- What privacy, consumer and financial rules apply where you live?
If the answers are unclear, a reward should not be treated as compensation for a risk you do not understand. The practical decision is not simply whether World’s stated goal sounds useful; it is whether the data collected, retention and deletion terms, local safeguards and legal protections are acceptable to you.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
