← the record
AIAAIC-2215

Thailand suspends Worldcoin iris-scanning operations

Thailand's government ordered the permanent suspension of Worldcoin’s operations and the deletion of over 1.2 million biometric records, following investigations into illegal data collection and unauthorised cryptocurrency trading. What happened Thailand’s data-protection authorities, including the Personal Data Protection Committee (PDPC) and the Ministry of Digital Economy and Society (MDES) , ordered the s uspension of all iris-scan verification services by TIDC Worldverse (World’s local operator) in Thailand. Authorities also ordered deletion of biometric data collected from more than 1.2 million Thai users, citing breaches of the country's Personal Data Protection Act. A cancelled MOU and ongoing probes were reported amid broader concerns, including legal and anti-money-laundering issues tied to the iris-scan project. Why it happened Thai authorities concluded that exchanging iris biometric data for cryptocurrency rewards constituted a violation of Thailand’s data-protection regime — particularly rules governing consent, purpose limitation, and sensitive data handling. World’s approach to highlighting how biometric data would be used and safeguarded was judged insufficient under Thai law, which places strict limits on processing sensitive personal data. Similar concerns had been raised globally in jurisdictions like Spain, Kenya, and Indonesia about biometric data practices, reflecting broader gaps in how such systems are regulated and overseen. What it means For society: The case highlights the high stakes of "Proof of Personhood" projects. Because biometric data like iris scans cannot be changed, a leak or misuse represents a permanent compromise of an individual's identity. It serves as a warning against trading immutable biological data for volatile digital assets, especially when the long-term storage and ownership of that data remain opaque. For policymakers: It sets a global precedent that financial incentives cannot bypass strict biometric privacy protections. It underscores the need for regulators to monitor "multi-layered" tech projects where data privacy, digital assets, and national security intersect. System 🤖 World ID Developer: Tools for Humanity Country: Thailand Sector: Banking/financial services Purpose: Verify identi ty Technology: Iris biometrics Issue: Accountability; Privacy/surveillance; Transparency Timeline ⏰ Early 2024. Worldcoin begins expanding in Thailand, eventually reaching over 100 scanning locations. August 2025. Provincial authorities begin issuing local suspensions over security concerns. October 24, 2025. Thai SEC and Cyber Crime Bureau raid a Bangkok iris scanning site, arresting suspects for operating an unlicensed crypto exchange. November 24, 2025. The PDPC officially orders World to cease all iris scanning and delete 1.2 million biometric records. January 2026. The Thai SEC files criminal complaints against five individuals for unlicensed trading of WLD tokens. February 2026. The DSI elevates the case to a "special investigation," questioning former government officials regarding the project’s initial entry into the country.

Date it happened
2025-11-01
Organisation involved
Tools for Humanity
Product, system or model
World ID
Where this came from
Share this incident
XLinkedInFacebookWhatsAppEmail
Attribution

This incident was imported from AIAAIC and is used under CC BY-SA 4.0. Our additions to it — the structured fields, the translation, the checks against other reports — are published under the same licence.

This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.