Written on 11 September 2025.

Biometric Identity, Worldcoin, and the Risks of Irrevocable Identification

Overview

Sam Altman’s Worldcoin project aims to create a global system of proof of humanness by scanning people’s irises through devices known as Orbs. These scans generate a unique binary code linked to each individual. The system is promoted as a fraud-resistant alternative to passwords and as a way to prevent artificial intelligence (AI) bots from impersonating humans online. It is also tied to cryptocurrency distribution and future visions of Universal Basic Income (UBI).

While Altman and his company claim that iris scans are deleted after processing, concerns remain. Unlike passwords, biometric identifiers cannot be changed. If compromised, an iris code could become a permanent vulnerability in a person’s digital life.

Hardware Exploitation Risks

Although Worldcoin asserts that its process is privacy-preserving, the Orbs themselves present attack surfaces. Possible risks include:

Fake Orbs — Counterfeit devices resembling legitimate Orbs could be deployed to collect raw iris data while pretending to register users.
Compromised Orbs — Genuine devices could be tampered with in the supply chain or on-site, leaking data to attackers.
Evil Maid Attacks — Short-term access to an Orb could allow malware or hardware modifications that secretly store scans.
Man-in-the-Middle Attacks — Intercepting communications between Orbs and servers could expose raw images or cryptographic hashes.

These risks undermine the claim that the iris image is always deleted and never stored.

Detailed Attack Scenarios

Because Worldcoin’s devices are distributed globally, often in regions with weak oversight, the risks of fraud and exploitation increase. Some possible scenarios include:

Spoofed Enrollment Centers in Developing Countries — Criminal groups could set up fake Worldcoin booths with counterfeit Orbs, harvesting raw iris images from unsuspecting participants in exchange for promises of cryptocurrency.
Supply Chain Tampering — Orbs shipped internationally could be intercepted and modified before reaching deployment sites, embedding hardware backdoors.
Insider Threats — Employees with access to the Orb firmware or server infrastructure could siphon off data before it is anonymized, selling iris templates to third parties.
State-Level Interception — Governments could require that all Orbs within their territory transmit copies of iris scans to domestic intelligence services under the guise of “national security.”
Replay Attacks — Even if only binary codes are stored, captured transmission data might be replayed to impersonate a user at a later time if communication protocols are weak.

These scenarios highlight that the entire pipeline — device, software, network, and institutional trust — must be secure. A single weak link compromises the permanence of the biometric identifier.

State and Corporate Exploitation

Beyond hacking, greater dangers arise when institutions gain control over such a system.

Surveillance and Tracking — If governments acquire iris codes, they could become global ID numbers, linking banking, healthcare, and travel.
Financial Control — Tying World ID to Central Bank Digital Currencies (CBDCs) could allow authorities to freeze or condition financial access.
Exclusion and Blacklisting — Dissidents or unwanted groups could be denied access to essential services.
Law Enforcement Integration — Iris codes could be cross-referenced with surveillance cameras or border controls.
Corporate Monetization — Companies could require World ID for online participation, charging per verification and building detailed data trails.
Global Kill Switch — A universal biometric identifier could act as a means of digitally erasing individuals.

Case Study: Spoofed Orb in Africa

Consider a hypothetical case in which a young man in Nairobi encounters a Worldcoin enrollment stand at a local market. The Orb looks authentic, the staff wear branded T-shirts, and the promise of “free cryptocurrency” is enough incentive to try.

Unbeknownst to him, the Orb is a counterfeit device built to capture raw iris scans without forwarding them to Worldcoin. His biometric data is stored, copied, and later sold on a black market server to an unknown buyer.

Months later, that same iris code is used in another country to impersonate him for fraudulent transactions or to set up multiple Worldcoin accounts. Because the iris is permanent, he cannot revoke or replace it. Meanwhile, governments or private firms may already have linked his biometric identity to financial accounts, leaving him locked out when “duplicates” appear.

This scenario illustrates how easily the system could be abused, particularly in regions where oversight is minimal and enrollment is incentivized with cash or tokens. A single fraudulent registration event could compromise an individual’s identity for life.

State and Corporate Exploitation

Beyond hacking, greater dangers arise when institutions gain control over such a system.

Surveillance and Tracking — If governments acquire iris codes, they could become global ID numbers, linking banking, healthcare, and travel.
Financial Control — Tying World ID to Central Bank Digital Currencies (CBDCs) could allow authorities to freeze or condition financial access.
Exclusion and Blacklisting — Dissidents or unwanted groups could be denied access to essential services.
Law Enforcement Integration — Iris codes could be cross-referenced with surveillance cameras or border controls.
Corporate Monetization — Companies could require World ID for online participation, charging per verification and building detailed data trails.
Global Kill Switch — A universal biometric identifier could act as a means of digitally erasing individuals.

Biblical Parallels

The permanence of biometric identifiers resonates with biblical prophecy concerning the mark of the beast described in the Book of Revelation. Just as Revelation warns of a system where buying and selling requires a mark, Worldcoin envisions a global structure in which identity verification is mandatory for participation in the economy and society.

Unlike a password, the iris cannot be revoked. Once linked to commerce and governance, it would effectively serve as a permanent seal on one’s economic existence.

Conclusion

Worldcoin is presented as a solution to fraud and digital impersonation, but its reliance on unchangeable biometric data creates unprecedented risks. Hacking, hardware compromise, and state or corporate appropriation could transform it from a fraud-prevention tool into an irreversible mechanism of surveillance and control.

AI Disclosure: Parts of this page may have been created, edited, or assisted by artificial intelligence tools (such as ChatGPT or other language models). All AI-assisted content is reviewed by a human before publication. For questions, contact the site administrator.