Tools for Humanity, the company behind Worldcoin's iris-scanning "Orbs," is under investigation for bribery, financial misconduct, and harvesting biometric data from millions of people who didn't fully understand what they were consenting to. Internal probes by major law firms are examining whether senior leaders approved six and seven-figure payments to foreign firms to artificially inflate the value of the Worldcoin cryptocurrency token, potentially violating U.S. securities laws.

What Happened in Thailand and Southeast Asia?

Thailand's Department of Special Investigation uncovered one of the most troubling aspects of Worldcoin's expansion. The agency found that approximately 1.2 million Thai citizens underwent iris scans through the Orb program, but most of them were "incentivized by the promise of the cryptocurrency named 'Worldcoin' while they misunderstood or were unaware of the required consent". This wasn't a simple miscommunication; it was a coordinated effort to enroll people in a biometric database without their genuine understanding of what they were agreeing to.

The situation became even more troubling when investigators discovered that Worldcoin's rollout in Thailand involved partnerships with companies linked to Benjamin Mauerberger, a South African businessman currently facing arrest warrants for transnational cyber-fraud and "pig butchering" scams, a type of romance scam that tricks victims into investing in fake cryptocurrency schemes. When confronted about the connection, the company claimed it had been given a "false name" and was unaware of the allegations, a defense that raises questions about how thoroughly the company vetted its international partners.

How Did Worldcoin Justify Its Data Collection?

Worldcoin and its parent company Tools for Humanity have publicly stated that the goal of collecting iris scans is straightforward: to "distinguish humans from AI bots" in an era where artificial intelligence is becoming increasingly sophisticated. The company frames World ID, its biometric identity system, as a necessary tool for verifying human identity in digital spaces. However, the scale and methods of data collection, combined with the financial incentives and partnerships uncovered by investigators, paint a different picture of what the operation actually represents.

The company's expansion into developing nations, where regulatory oversight is weaker and populations may be more vulnerable to financial incentives, suggests a deliberate strategy to build a massive global biometric database with minimal friction. The use of cryptocurrency rewards as an incentive mechanism is particularly significant because it targets people in regions where such rewards may represent meaningful income, creating pressure to participate even if consent is not fully informed.

What Are the Key Concerns Investigators Are Examining?

• Securities Law Violations: Internal investigations are looking into whether senior leaders at Tools for Humanity approved payments to foreign firms specifically designed to artificially pump up the value of the Worldcoin token, which would constitute market manipulation and potential violations of U.S. securities regulations.
• Bribery of Foreign Officials: Multiple internal investigations have been launched into financial misconduct and the bribery of foreign government officials, suggesting that the company may have paid officials to facilitate or overlook its iris-scanning operations in their countries.
• Informed Consent Failures: The Thai investigation found that the vast majority of the 1.2 million people scanned did not genuinely understand what they were consenting to, raising serious ethical and legal questions about the validity of the biometric data collected.
• Partnerships with Scammers: The discovery that Worldcoin worked with entities linked to individuals facing fraud charges suggests either gross negligence in vetting partners or a willingness to work with questionable actors to expand operations.

Steps to Understand the Scope of This Investigation

• Track the Legal Proceedings: Follow developments in the Thai Department of Special Investigation's case and any U.S. regulatory actions, as these will reveal the full scope of misconduct and potential penalties the company faces.
• Monitor Internal Audit Findings: Watch for public disclosures or leaks from the internal investigations by major law firms, which may reveal specific payments, officials involved, and the extent of token manipulation schemes.
• Review Regulatory Responses: Check statements from the U.S. Securities and Exchange Commission (SEC), the Federal Trade Commission (FTC), and international data protection authorities to see what enforcement actions may be coming.
• Examine Consent Documentation: Request or review any available consent forms and materials used in Worldcoin's campaigns, particularly in non-English-speaking countries, to assess whether they adequately informed participants about data collection and use.

The Worldcoin investigation represents a critical moment in the debate over biometric data collection and corporate accountability in the AI era. As companies race to build digital identity systems and collect biological data from billions of people, the methods and safeguards they use matter enormously. The findings from Thailand and the internal investigations suggest that at least one major player in this space prioritized expansion and profit over genuine informed consent and regulatory compliance.

For people who have already participated in Worldcoin's Orb program, the investigation raises uncomfortable questions about where their iris scan data is stored, who has access to it, and whether it will be used for purposes beyond what they were told. For regulators and policymakers, it underscores the urgent need for stronger oversight of biometric data collection, particularly in developing nations where enforcement mechanisms are weaker and vulnerable populations may be more easily incentivized to participate in programs they don't fully understand.