São Paulo Prosecutors Sue Worldcoin and AWS Over Iris Data Collection
São Paulo prosecutors sued Tools for Humanity Corporation and Amazon AWS for allegedly collecting iris biometric data from over 400,000 people, mostly in economically vulnerable communities, in exchange for Worldcoin cryptocurrency rewards. The suit claims abusive practices including misleading marketing about the project's humanitarian nature and charges seek R$240 million in damages plus cessation of the data collection.
What happened
The 4th Consumer Protection Public Ministry of São Paulo Capital sued Tools for Humanity Corporation and Amazon AWS Serviços Brasil for allegedly engaging in abusive practices in collecting iris biometric data from economically vulnerable people in exchange for payments in Worldcoin cryptocurrency.
According to a prior investigation by the Câmara Municipal de São Paulo (São Paulo City Council), over 400,000 people had their iris scanned in exchange for financial rewards ranging from R$300 to R$700, with collection concentrated in peripheral regions and high-traffic areas such as metro stations and Poupatempo units.
Reported impact
The lawsuit alleges that representatives at collection points were directed to emphasize the financial reward as the primary element of participation, and that the project was presented as a humanitarian initiative without explaining its economic objectives related to developing its own cryptocurrency.
The public ministry claims the operation targeted people in socioeconomic vulnerability without clarity about the risks inherent in providing iris biometric data.
Index analysis
A municipal parliamentary inquiry (CPI da Íris) found evidence of misleading advertising by omission, as the project's commercial and cryptocurrency development objectives were not disclosed, and identified targeting of vulnerable consumers in peripheral areas.
The prosecutors identified allegations of abusive conduct in the collection practices and seek prohibition of data collection linked to financial compensation, deletion of already-obtained information, and collective moral damages.
Governance controls
AWS stated it has clear terms of service requiring customers to use its services in compliance with applicable laws and that it acts when it receives reports of violations.
The prosecutor requested emergency measures including suspension of new iris biometric collection involving any payment or benefit pending judicial expertise, preservation of all records and metadata, and identification of the Amazon group company responsible for data hosting.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.