The decentralized identity market reached $7.4 billion in 2026, according to GM Insights, with projections indicating a compound annual growth rate exceeding 50% through 2031. Three competing models — government-mandated wallets (EU's EUDI), biometric proof-of-human networks (World ID), and zero-...
"The goal is not to onboard people to Ethereum. The goal is to onboard people to openness and self-sovereignty." — Vitalik Buterin, Ethereum Co-Founder
The decentralized identity market reached $7.4 billion in 2026, according to GM Insights, with projections indicating a compound annual growth rate exceeding 50% through 2031. Three competing models — government-mandated wallets (EU's EUDI), biometric proof-of-human networks (World ID), and zero-knowledge credential protocols (Polygon ID, Civic, Spruce) — are racing to become the default identity layer for the internet.
The stakes are concrete. According to ENISA, no EUDI Wallet has been deployed or certified as of early 2026, yet all 27 EU member states face a December 24, 2026 deadline to offer citizens a digital identity wallet. World ID claims 33 million app users and 18 million Orb-verified humans but faces bans or restrictions in at least seven jurisdictions. Polygon ID has issued over 4 million verifiable credentials but remains limited in institutional adoption. The identity infrastructure question — who verifies whom, and by what method — is now among the most consequential open questions in Web3.
The EU's eIDAS 2.0 regulation mandates that every member state provide at least one European Digital Identity Wallet to citizens and residents by December 24, 2026. From 2027, regulated private sectors — banking, telecommunications, healthcare, education, and very large online platforms — must accept the EUDI Wallet for authentication.
Readiness is uneven. According to the ENISA Launchpad report, fewer than one-third of member states meet the readiness benchmark. France is the furthest along: its France Identité app is already a live production service, actively expanding functionality and ecosystem integration. Germany hosted its EUDI Wallet Hackathon on June 4-5, 2026, but the government has announced its state-driven wallet app will not launch until January 2, 2027. Italy and Poland are classified as top-tier in preparation. The Netherlands has publicly signaled it is unlikely to meet the deadline. Bulgaria has not begun work on a state-provided wallet.
The cost differential is significant. According to research presented by Petra Krizan of The Blockhouse Technology, traditional identity verification costs €70-100 per user. The EUDI Wallet model brings that to €3-8 per verification event. For banks and telecoms processing millions of KYC checks annually, the savings are material.
The technical architecture relies on W3C Verifiable Credentials, ISO 18013-5 (mobile driving license), and OpenID protocols. Notably, the EUDI specification does not require blockchain infrastructure. Credentials are cryptographically signed by issuing authorities and verified through mathematical proof without contacting the original issuer, but the underlying ledger technology is left to national implementation.
Tools for Humanity, co-founded by Sam Altman and Alex Blania and valued at $2.5 billion with backing from Andreessen Horowitz, Bain Capital, and Khosla Ventures, has built the most widely deployed biometric identity network in Web3. The numbers as of mid-2026:
On April 17, 2026, World announced partnerships with Tinder, Zoom, and Docusign. Tinder is deploying World ID in the United States, offering verified humans a profile badge and five free Boosts. Zoom is integrating a feature called "Deep Face" to verify meeting participants are not deepfakes. Docusign is embedding proof-of-human into document signing workflows.
The counterweight: regulatory enforcement. World ID has been banned or restricted in at least seven jurisdictions. Spain's Data Protection Authority halted operations over minors' data collection. Kenya's High Court declared operations illegal in May 2025. Brazil banned the platform in January 2025 for paying citizens for iris scans in violation of data law. Indonesia temporarily suspended data collection in May 2025. Germany, Portugal, Hong Kong, and South Korea have imposed restrictions.
On June 8, 2026, TechCrunch reported that Tools for Humanity was conducting layoffs. The company, which had more than 500 employees, has not disclosed the number of affected staff. The stated issue: its Orb iris-scanning hardware has not generated sustainable revenue. The company has built capital-intensive biometric hardware with no clear monetization path, according to reporting by BeInCrypto.
Surveillance whistleblower Edward Snowden has characterized World as "cataloguing eyeballs." The core tension: World ID solves the bot problem through biometric uniqueness, but biometric data collection creates precisely the kind of centralized identity corpus that privacy advocates oppose.
The third model avoids both government mandates and biometric databases. Zero-knowledge proof-based credential systems let users prove claims — age, citizenship, accreditation status, KYC completion — without revealing underlying personal data.
Polygon ID is built on the Iden3 protocol and Circom ZK toolkit. Polygon has committed $1 billion to zero-knowledge technology broadly, and Polygon ID has issued over 4 million verifiable credentials. The protocol enables decentralized credit scores, sybil-resistant voting, and private peer-to-peer communication. However, adoption by governments and regulated financial institutions remains limited. Polygon ID is strongest in dApp-native compliance checks where friction tolerance is low.
Civic Technologies, founded in 2015, has evolved from simple identity verification to what it calls "soulbound identity tokens." Civic Pass is integrated across Gitcoin, Polygon, Solana, Arbitrum, Base, and dozens of other blockchain networks. Its model is closer to permissioned access control than full self-sovereign identity.
Spruce ID deployed W3C Verifiable Credentials across more than 50 chains in under six months. The company emphasizes standards compliance, working with the W3C Credentials Community Group and the Decentralized Identity Foundation.
Dock offers a more enterprise-oriented service, with pricing starting at $99/month for 1,000 credentials. Its model targets certification programs, professional qualifications, and supply chain verification.
The common architecture across these protocols: credentials are cryptographically signed by issuing authorities, held by the credential subject in a personal wallet, and verified by relying parties through mathematical proof. Verification cost is incurred once by the issuer; every subsequent use by the holder is low-cost.
The identity layer sits at a critical juncture in the Web3 value chain. According to industry data, the broader blockchain identity management market is projected to reach $103.3 billion by 2035 at an 81.2% CAGR, per Fortune Business Insights.
Current revenue models vary sharply:
| Model | Revenue Mechanism | Scale | Unit Economics | |-------|-------------------|-------|----------------| | EUDI Wallet | Government-funded; verification fees to relying parties | 450M EU citizens (potential) | €3-8 per verification | | World ID | Enterprise licensing (Zoom, Tinder, Docusign); token (WLD) | 33M users; 18M verified | Undisclosed; revenue lagging per reports | | Polygon ID | Protocol fees; ecosystem grants | 4M credentials issued | Subsidized by $1B ZK commitment | | Civic Pass | SaaS integration fees | Multi-chain coverage | Not publicly disclosed | | Dock | Subscription ($99+/month) | Enterprise clients | $0.10 per credential at scale |
The revenue sustainability question is acute. Tools for Humanity raised at a $2.5 billion valuation but has not converted backing into sustainable revenue, leading to June 2026 layoffs. Polygon ID operates largely on Polygon's broader ZK investment. Only Dock and Civic appear to have conventional SaaS-style revenue models, but neither has disclosed figures suggesting scale.
The deeper economic question concerns who captures the value from identity verification. In the traditional model, KYC/AML vendors (Jumio, Onfido, Sumsub) charge $2-10 per check, generating a multi-billion-dollar industry. Decentralized identity threatens to collapse that to near-zero marginal cost after the initial credential issuance. The value shifts from per-verification fees to infrastructure provision, wallet hosting, and credential issuance.
The three approaches represent fundamentally different privacy trade-offs:
Government-issued (EUDI): The issuing authority (a government) knows the citizen's full identity. Selective disclosure is supported — users can share specific attributes without revealing full credentials. However, the government retains the ability to revoke credentials and, depending on implementation, could potentially track verification events. The architecture is not trustless; it requires trust in the issuing state.
Biometric-first (World ID): The Orb captures an iris scan and converts it to a hash stored on-chain. Tools for Humanity claims it does not retain raw biometric data after processing. The privacy concern: biometric data is non-revocable. Unlike a password, an iris scan cannot be changed. Critics characterize this as "latent surveillance" — even if data is hashed, the linkability and reidentification risk persists. Seven jurisdictions have agreed, taking enforcement action.
Zero-knowledge (Polygon ID, Civic, Spruce): Users prove claims without revealing data. A user can demonstrate they are over 18 without revealing their date of birth, or that they passed KYC without revealing their passport number. The issuer knows the user's identity at issuance, but verifiers never see it. This model offers the strongest privacy guarantees but depends on the trustworthiness of issuers — a compromised or corrupt issuer undermines the entire chain.
The SME adoption curve favors the ZK model. According to Mordor Intelligence, SMEs clocked a 17.9% CAGR in decentralized identity adoption between 2026 and 2031, driven by low-code APIs and wallet SDKs that let firms embed verifiable-credential flows without dedicated security infrastructure.
The decentralized identity market hit $7.4 billion in 2026. Three competing architectures — government wallets, biometric networks, and ZK-credential protocols — are vying for dominance with incompatible assumptions about trust, privacy, and control.
Fewer than one-third of EU member states meet EUDI wallet readiness benchmarks against a December 2026 deadline. France leads; the Netherlands has signaled it will miss the target. No wallet has been deployed or certified.
World ID has 33 million users and enterprise partnerships with Tinder, Zoom, and Docusign, but faces bans in seven jurisdictions and conducted layoffs in June 2026 amid revenue concerns.
ZK-credential protocols (Polygon ID, Civic, Spruce, Dock) offer the strongest privacy guarantees but have not achieved institutional-scale adoption. Polygon ID has issued 4 million credentials; Spruce has deployed across 50+ chains.
The economic model for decentralized identity remains unresolved. The sector threatens to collapse per-verification KYC fees from $2-10 to near-zero marginal cost, but no protocol has demonstrated sustainable revenue at scale.
Vitalik Buterin has framed 2026 as "the year we take back lost ground in computing self-sovereignty." The identity question is central to that thesis — whether verification infrastructure becomes more distributed or consolidates around a few dominant platforms.
The decentralized identity sector is at an inflection point defined by regulatory deadlines, enterprise adoption, and unresolved revenue models. The EU's EUDI mandate creates a hard deadline that most member states appear likely to miss, suggesting 2027 rather than 2026 will be the actual deployment year. World ID has demonstrated user scale that no ZK protocol has matched, but its biometric model generates regulatory friction that may cap its addressable market. ZK-credential protocols hold the technical high ground on privacy but lack the distribution to compete with government-backed or venture-funded alternatives.
The market is large enough — $7.4 billion and growing above 50% annually — to support multiple winners. The more likely outcome is segmentation: government wallets for regulated sector compliance, biometric networks for consumer app authentication, and ZK protocols for Web3-native applications. The risk is fragmentation without interoperability, forcing users and enterprises to maintain multiple identity systems simultaneously.
The economic value ultimately flows to whoever controls the credential issuance layer. In the EUDI model, that is governments. In World ID, it is Tools for Humanity. In ZK protocols, it is theoretically any trusted issuer. The sector's maturation depends on whether interoperability standards (W3C Verifiable Credentials, DID Core) can bridge these architectures, or whether identity becomes the next platform lock-in battle.