Tools for Humanity, the company behind Sam Altman's World (formerly Worldcoin), unveiled World ID for Banking and Finance at the Money20/20 conference in Las Vegas on October 18, 2026. The product bundles three existing tools — World ID app, World ID for Zoom, and World ID for Agents — into the p...
"As AI becomes increasingly prevalent in all aspects of our lives, enterprises are requesting individuals provide 'Proofs' about themselves to help mitigate fraud and increase trust." — Sandro Herbig, President, Tools for Humanity
Tools for Humanity, the company behind Sam Altman's World (formerly Worldcoin), unveiled World ID for Banking and Finance at the Money20/20 conference in Las Vegas on October 18, 2026. The product bundles three existing tools — World ID app, World ID for Zoom, and World ID for Agents — into the project's first industry-specific offering aimed at financial institutions.
The timing is deliberate. Deloitte projects AI-enabled fraud losses in the United States will reach $40 billion by 2027, up from $12.3 billion in 2023. In October 2026 alone, fraudsters using AI-cloned voices stole €95 million ($108 million) from Fideuram, the private banking arm of Italy's Intesa Sanpaolo. The global identity verification market stands at approximately $16.5 billion in 2026, with banking and financial services accounting for over 35% of demand.
Yet for all the urgency of the problem World claims to solve, the product arrives without a single named bank client. Design partners include Bain Capital, VanEck Funds, OpenExchange, Outtake, and Pantera Capital — all financial firms, none of them banks. Meanwhile, World's iris-scanning operations remain banned or restricted in at least 11 countries, including Brazil, Germany, Spain, Kenya, and Hong Kong, raising questions about whether regulated financial institutions will adopt biometric infrastructure that multiple data protection authorities have declared unlawful.
The World ID for Banking and Finance suite consists of three components:
World ID App. A mobile identity wallet where users store cryptographic "Proofs" of humanness generated through iris scans at physical Orb devices. The wallet holds credentials that can be presented to third parties without revealing underlying biometric data, using zero-knowledge proofs.
World ID for Zoom. A real-time deepfake detection layer that compares a caller's live video feed against prior biometric enrollment and a phone selfie. The tool displays a verification badge during video calls, giving meeting participants confirmation that participants are human. Tools for Humanity joined Zoom's independent software vendor exchange program to distribute it.
World ID for Agents. A delegation framework that lets verified humans authorize AI agents to act on their behalf in financial workflows. The tool creates a cryptographic chain linking agent actions back to a verified human identity.
None of these components are new. World ID for Zoom launched in limited testing in April 2026 with VanEck as the only identified institutional participant. The banking suite repackages them under a single vertical offering.
The market context for identity verification in banking is quantifiable and severe:
The attack vectors are shifting. The Fideuram case demonstrates the pattern: WhatsApp message impersonating a CEO, followed by a phone call with an AI-cloned voice of a senior lawyer, resulting in wire transfers to accounts in China and Hong Kong. Social media platforms used to distribute deepfakes for fraud include X (Twitter) at 42.1% of incidents, LinkedIn at 14.5%, Facebook at 12.8%, and TikTok at 12.5%.
Financial services is the primary target sector. Banking, financial services, and insurance account for over 35% of the $16.5 billion identity verification market, according to multiple market research firms including Fortune Business Insights and Mordor Intelligence.
World's user base has grown substantially since its 2023 launch, but the numbers require context:
The verification rate tells a different story about scalability. With approximately 1,500 Orbs scanning roughly 700 new users per week per device, the network can add roughly 1.05 million new verified users per week. For context, JPMorgan Chase alone serves approximately 82 million consumer customers. The global banking sector serves billions.
World also launched World Money in September 2026, a stablecoin payments product available in 150+ countries, creating a payment layer adjacent to its identity infrastructure.
World is entering a market with entrenched incumbents that already serve banks at scale:
Jumio, headquartered in the U.S., holds one of the largest enterprise customer bases in identity verification. It appears in the Gartner Magic Quadrant for Identity Verification and serves regulated financial services directly. Jumio moved from licensing iProov's liveness detection to an in-house system in late 2024.
Entrust IDV (formerly Onfido), acquired by Entrust in April 2024, combines document verification with biometric liveness. Its stack integrates partners including iProov, Namirial, and SecureKey.
iProov holds the strongest certification credentials among identity verification providers, with the first biometric product to receive FIDO Alliance certification and the first to achieve CEN/TS 18099:2025 High specification for injection attack detection.
Veriff, based in Estonia, is noted for delivering the fastest verification turnaround times among major providers.
These vendors share a critical advantage over World: they do not require users to visit a physical device for enrollment. Their document-plus-selfie flows operate entirely through smartphones. World's Orb requirement introduces friction that banking customers have not historically been willing to accept.
Additionally, established vendors operate without the regulatory baggage that follows World's biometric data collection practices across multiple jurisdictions.
World's track record with data protection authorities represents the most significant obstacle to bank adoption. At least 11 countries have restricted or banned World's iris-scanning operations:
| Country | Action | Status | |---------|--------|--------| | Kenya | Court declared data collection unconstitutional; ordered deletion | Halted | | Brazil | Full ban; daily fine of 50,000 reais ($8,800) | Banned | | Spain | 3-month data collection ban; ordered iris scan data deletion | Suspended | | Portugal | Data collection banned | Suspended | | Germany | Data deletion orders issued | Restricted | | Hong Kong | Operations ceased; "unnecessary and excessive" collection | Ceased | | France | Removed from operational list | Withdrawn | | Indonesia | License frozen | Suspended | | India | Sign-ups halted | Halted | | Philippines | Operations halted immediately | Halted | | Thailand | Biometric data collection shut down; deletion ordered | Shut down |
The criticisms are consistent across jurisdictions: inadequate informed consent, unauthorized collection of minors' data, failure to conduct Data Protection Impact Assessments, and offering financial incentives (originally $50 in cryptocurrency) that regulators argue compromise voluntary consent under GDPR's "free, informed, and unequivocal" standard.
Edward Snowden has publicly criticized the project for "cataloguing eyeballs." MIT Technology Review documented "deceptive marketing practices" and revealed collection of "heartbeat, breathing, and other vital signs" without meaningful informed consent.
For banks operating under Basel III and local prudential supervision, partnering with an identity provider whose core product has been ruled unlawful in 11 jurisdictions introduces compliance risk that compliance departments are unlikely to accept without significant changes to World's data practices.
World's identity product is intertwined with the WLD token, which introduces an incentive structure that banking regulators may view unfavorably:
The economic model creates a structural tension. World's initial user acquisition strategy offered cryptocurrency payments to individuals who submitted to iris scans. While the banking suite does not appear to require WLD token usage, the underlying network and its user base were built through a mechanism that multiple data protection authorities have declared non-compliant. The separation between the token incentive layer and the enterprise product is unclear.
With 62% of WLD's total supply still locked and subject to future unlocks, the token's emission schedule represents ongoing dilution that may affect the economic stability of the project funding the identity infrastructure.
The banking sector's identity verification requirements are well-defined under existing regulation:
World ID for Zoom addresses point 5 partially. The Agents framework addresses an emerging need. But the Orb-dependent enrollment process conflicts with points 2 and 3. No amount of zero-knowledge cryptography resolves the fundamental question of whether a bank's compliance department will approve a vendor whose data collection methods have been ruled unlawful in over a dozen jurisdictions.
World's pivot to banking is a rational business decision. AI fraud is measurably growing, banks need better tools, and World has a unique biometric asset in its 18 million-strong Orb-verified user base. The product components — especially the Zoom verification badge and the AI agent delegation framework — address real gaps in existing banking workflows.
The problem is execution context. Every major bank operates compliance departments that evaluate third-party vendors not only on product capability but on regulatory standing, data governance practices, and jurisdictional risk. A vendor whose core product has been banned in Brazil, shut down in Thailand, ruled unconstitutional in Kenya, and fined in Spain will face scrutiny that no amount of Money20/20 marketing can bypass.
The absence of any named bank client — as opposed to investment firms like Bain Capital and VanEck — is telling. Design partnerships with financial investors are not the same as deployment agreements with regulated depository institutions. Until World can demonstrate actual bank adoption, the product remains a pitch rather than a product.
The competitive moat, if it exists, lies in the Orb-verified identity layer — a biometric dataset that no competitor can easily replicate. Whether banks view that dataset as an asset or a liability depends entirely on whether World can resolve its regulatory standing in the jurisdictions where banks operate.