A look at Worldcoin from a privacy-skeptical point of view, including likely risks and how the project doesn't link users' transaction data with its ID database
Matthew Green / A Few Thoughts on Cryptographic Engineering :
Context & Ripple Effects
Worldcoin’s launch debate had already centered on whether a biometric-based proof-of-personhood system could protect people without creating a durable identity infrastructure. Earlier coverage examined the project’s public-key approach to proof of personhood and the privacy safeguards around its Orb system.
This analysis narrows that debate to a key architectural distinction: separating transaction records from the ID database may limit one form of linkage, but it does not resolve the broader risks attached to biometric enrollment, governance, and system use. Those concerns were also reflected in criticism of Worldcoin’s ethical and decentralization model.
First-order effects
- The analysis gives users and watchdogs a clearer basis for evaluating Worldcoin’s privacy claim: non-linkage between transaction data and its ID database is a meaningful constraint, not a blanket guarantee of privacy.
- Worldcoin faces more pressure to explain which data are collected and retained across enrollment, identity verification, and transactions, rather than relying on a single technical separation as its privacy case.
Second-order effects
- Projects pursuing proof of personhood will need to distinguish data minimization, unlinkability, and biometric-data handling in product design and public disclosures; treating them as interchangeable invites the same skepticism.
- Government and privacy-advocate scrutiny of iris scanning and data processing is likely to focus on the full identity lifecycle, a concern later visible in coverage of World ID’s response to official and privacy concerns.
Third-order effects
- If biometric identity systems become a common gateway to digital services, trust will depend less on crypto branding and more on auditable limits on data use, retention, and cross-context linkage.
- The unresolved tension is structural: proving uniqueness can reduce some fraud, but concentrating biometric enrollment can create new power and accountability risks unless the system’s safeguards are independently verifiable.
The trend: Worldcoin is part of a broader push to make proof of personhood usable at scale, where technical privacy claims face increasing scrutiny over biometric governance and real-world deployment.