Zoom and Financial Firms Deploy Iris-Scanning 'Proof of Human' Credentials

A single undetected deepfake on a corporate video call can now cost a company tens of millions of dollars in a matter of minutes. That is the baseline risk driving a new integration between Zoom and the biometric identity network World, which aims to lock down high-stakes digital meetings.[5]

World, the identity project co-founded by OpenAI chief executive Sam Altman, unveiled its first industry-specific product suite at the Money20/20 conference in Las Vegas. The package bundles the company's identity wallet, an artificial intelligence delegation tool, and a live deepfake check built directly into Zoom.[1][4]

The system targets financial institutions, where digital interactions routinely involve sensitive data and large capital transfers. Five design partners—Bain Capital, VanEck Funds, Pantera Capital, OpenExchange, and Outtake—have signed on to explore how the technology can secure customer accounts and employee workflows.[4]

Verifying Biology Over Pixels

The core mechanism relies on World's proprietary hardware, a spherical device known as the Orb, which scans a user's iris to create a cryptographic biometric record. When a user joins a secured Zoom call, the platform compares that encrypted baseline against a fresh selfie and the live video feed.[3][5]

If the three data points match, the participant's video tile receives a blue "Verified Human" badge. The verification process runs locally on the user's mobile device, meaning no biometric data is shared directly with Zoom or the other meeting participants.[3][5]

Organizations can customize the verification experience, including configuring exactly how long a badge remains active before a participant must reauthenticate. Hosts will also have the ability to enable a dedicated waiting room, requiring every attendee to present their credentials before they are allowed to join the call.[5]

Crucially, any participant can request a verification check mid-meeting, rather than just at the initial login. This feature addresses the common tactic where malicious actors inject deepfake video feeds into a call after trust has already been established and the conversation is underway.[5]

The Escalating Cost of Deepfakes

The financial stakes for solving this vulnerability are escalating rapidly. A Deloitte forecast cited by World projects that artificial intelligence-enabled fraud losses in the United States could reach $40 billion by 2027, a steep climb from the estimated $12.3 billion recorded in 2023.[4]

The most prominent example of this vulnerability occurred in early 2024, when an employee at the engineering firm Arup was tricked into transferring $25.6 million. The employee had joined a video call where every other participant, including the chief financial officer, was an AI-generated fake.[4]

Traditional deepfake detection relies on predictive software that analyzes video frames to spot synthetic anomalies. However, as generative models improve, this creates a continuous arms race where detection algorithms struggle to keep pace with increasingly convincing synthesis.[5]

World argues that its hardware-anchored approach bypasses this arms race entirely. By requiring a cryptographic proof of human presence tied to a physical iris scan, the system shifts the security burden from detecting fake pixels to verifying real biology.[5]

Sandro Herbig, president of Tools for Humanity, the main developer behind World, noted that enterprises are actively requesting that individuals provide cryptographic proofs about themselves. He stated that these verifiable credentials are now necessary to mitigate sophisticated fraud and restore trust in digital communications.[4]

Scaling Enterprise Adoption

The rollout makes the Zoom integration generally available following a limited beta testing period that began in April. To support broader enterprise adoption, Tools for Humanity has officially joined Zoom's independent software vendor exchange program, opening the tool to hundreds of thousands of business customers.[4][5]

Under this partnership, corporate customers can host Orb devices directly in their offices, allowing employees to register their biometric data on-site. World reports that its network has already verified millions of individuals globally, establishing a ready-made user base for the enterprise rollout.[5]

The platform also offers two lower tiers of verification for less sensitive operations. "Proof of Attributes" relies on scanned government documents, while "Proof of Presence" requires only a standard selfie, allowing companies to scale their security requirements based on the specific risk profile of a meeting.[3]

World Chief Product Officer Tiago Sada emphasized that the underlying protocol is open source and available for independent auditing. Sada compared the initial public skepticism surrounding iris scanning to the early privacy concerns that accompanied the introduction of facial recognition on smartphones.[3]

Delegating Proof to AI Agents

The enterprise suite also includes a feature called World ID for Agents, which allows verified users to delegate their credentials to artificial intelligence programs. These agents can then present the human-backed proofs to third-party platforms when executing automated tasks or financial trades on the user's behalf.[4]

While the design partners represent significant institutional interest, World has not yet named a specific bank that has deployed the product for live customer transactions. The company also declined to disclose pricing details for the enterprise suite during the initial announcement.[4]

The adoption of biometric verification in corporate settings still faces hurdles, particularly regarding employee privacy and the normalization of hardware-based scanning. However, as the cost of executing a successful deepfake attack drops, financial firms are increasingly weighing those privacy concerns against the existential threat of unchecked wire fraud.[3][4]

Until now, World's identity wallet existed primarily as a consumer application, but this launch marks its first targeted push into a specific corporate sector. By bundling the Zoom check with its agent delegation tools, the company is betting that financial compliance teams will view cryptographic human verification as a mandatory safeguard.[1][4]