Indonesia: Worldcoin Collected 500,000+ Iris Scans Since 2021 Without Proper Registration
Indonesian authorities questioned Worldcoin's developer Tools for Humanity after discovering it had collected over 500,000 iris scans from users since 2021 without proper electronic system operator registration. The biometric data collection raised concerns about regulatory compliance and the sensitivity of permanent iris biometric data.
What happened
Tools for Humanity has been operating in Indonesia since 2021 and collected more than 500,000 iris scans from Indonesian users, according to Komdigi's investigation.
The company operated under the names PT Terang Bulan Abadi and PT Sandina Abadi Nusantara. The registration status was unclear: PT Terang Bulan Abadi lacked both Electronic System Operator registration (PSE) and Electronic System Operator Registration Certificate (TDPSE), while PT Sandina Abadi Nusantara held a TDPSE but only obtained it in 2025.
Tools for Humanity launched World ID, WorldApp, and Worldcoin in 2025. Komdigi called the company for questioning on May 7, 2025, and officials stated the company appeared to violate requirements under Indonesian electronic system regulations.
Reported impact
Over 500,000 Indonesian users had their iris biometric data collected without adequate regulatory oversight for nearly four years.
Index analysis
The collection of iris biometric data is a permanent biometric identifier that remains sensitive throughout a person's lifetime, according to IT experts cited in reporting.
Under Indonesian Electronic System and Transaction regulations and Ministry of Communication regulations, digital service operators must be properly registered and hold TDPSE certificates, with responsibility for public operations.
Governance controls
Komdigi stated the matter was still under review, including data held by Tools for Humanity.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.