Key facts

• World, a biometric identity project backed by Sam Altman, has launched World ID for Zoom globally through the Zoom Marketplace.
• The feature lets Zoom enterprise customers display a “proof of human” badge during video meetings.
• Verification compares an iris scan captured by World’s Orb, a live selfie and the participant’s video feed.
• World first announced the Zoom integration in April and tested it with VanEck Funds before the global rollout.
• Bain Capital, Pantera Capital and other financial firms are initial design partners for World’s broader identity verification technology.
• The launch follows deepfake-enabled fraud incidents, including a $25 million transfer at Arup in 2024 and suspected North Korea-linked malware campaigns using fake Zoom meetings.

Zoom enterprise customers now have a new way to check whether the person on a video call is physically present and human: a “proof of human” badge powered by World ID. The biometric identity project, backed by Sam Altman, announced that its Zoom integration is available globally in the Zoom Marketplace after an earlier beta test. The badge appears to other meeting participants after the system compares an image captured by World’s iris-scanning Orb, a live selfie and the participant’s video feed.

The rollout turns a long-discussed identity problem into a visible feature inside one of the world’s most widely used video conferencing platforms. For enterprises, the appeal is straightforward. Video calls have become a routine venue for high-value decisions, from treasury transfers to vendor onboarding to board discussions. That makes them an attractive target for criminals who can use AI-generated video and audio to impersonate executives, clients or colleagues.

How World ID for Zoom works

World ID is designed to prove that a participant is a real and unique human without revealing unnecessary personal information. In the Zoom integration, the verification process uses three inputs: an iris image captured by the Orb, a live selfie and the participant’s video feed during the meeting. The system checks these signals before displaying a Human Badge that other participants can see.

The Orb is World’s physical verification device. It captures an iris scan and converts it into a digital credential. The live selfie and video feed add a liveness check, helping to ensure that the person using the credential is the same person appearing on the call. World says the badge is meant to protect sensitive, high-stakes conversations by proving that a real and unique human is present.

The feature is available to Zoom enterprise customers, not necessarily to every free or consumer account. That positioning matters. Enterprises are more likely to handle regulated, financial or confidential discussions, and they are more likely to demand auditability and administrative controls. The Zoom Marketplace distribution also means organizations can add the integration through an existing procurement and software management process rather than building a custom verification system.

Why video-call identity is becoming a security priority

Video conferencing was once treated as a convenient substitute for in-person meetings. In many organizations, it is now the default setting for decisions that involve money, sensitive data and legal exposure. That shift has created a gap between the visual trust people place in a video call and the technical ease with which attackers can fabricate faces and voices.

Deepfake technology has improved quickly. What once required a studio, specialized software and hours of editing can now be produced with consumer-grade tools and a modest amount of source material. Attackers can combine cloned voices, lip-synced video and real-time interaction to create convincing impersonations. In a live meeting, participants may rely on visual recognition, tone of voice and conversational cues. All three can be manipulated.

The financial damage can be severe. In 2024, an employee at engineering firm Arup transferred about $25 million after scammers impersonated executives during a video conference. The incident became a widely cited example of how deepfakes can bypass traditional controls when employees believe they are speaking to trusted leaders. It also showed that fraud does not always require breaking into a system. Sometimes it requires convincing a human to authorize a payment.

In February, suspected North Korea-linked hackers used fabricated video feeds in fake Zoom meetings to trick crypto and fintech companies into installing malware. That case highlighted a second risk: deepfakes are not only a tool for financial fraud. They can also be used for social engineering that leads to device compromise, credential theft and network intrusion. A convincing face on a call can lower defenses before any malicious file is opened.

From beta testing to a global enterprise rollout

World first announced its Zoom integration in April, when the feature was in limited beta testing with VanEck Funds. The early test gave World a chance to validate the experience in a financial setting, where identity checks and compliance requirements are demanding. The company has now made the feature available globally to Zoom enterprise customers.

World also named Bain Capital, Pantera Capital and other financial firms as initial design partners for its broader identity verification technology. Those partnerships signal that World is positioning its human-verification tools beyond a single video platform. The goal is to create an identity layer that can be used across meetings, financial services, online platforms and other high-trust interactions.

The expansion comes as enterprises are reassessing how they verify identity in remote and hybrid work. Password-based authentication can confirm access to an account, but it cannot confirm who is sitting behind the screen. Multi-factor authentication can reduce account takeover risk, but it does not stop an attacker who joins a meeting from a compromised or legitimate account. A human-presence badge adds a different signal: it attempts to verify the person, not just the login.

Privacy, biometrics and the trust trade-off

Biometric verification raises familiar privacy questions. Iris scans and selfies are sensitive data. Employees may be uncomfortable enrolling in a system that requires physical verification, especially if participation is presented as voluntary but becomes effectively mandatory for client-facing or high-value meetings. Enterprises will need clear policies on consent, retention, access and deletion.

World’s approach is built around proof of personhood. The system is intended to confirm that a participant is a unique human without exposing the underlying biometric data to every meeting participant. The badge itself is a simple visual signal. The complexity sits in the verification process, the storage of credentials and the governance of who can issue, revoke or audit them.

Privacy advocates are likely to focus on the Orb. Physical iris scanning is more invasive than a password or a one-time code. Even if the biometric data is converted into a credential, the enrollment step still requires users to trust the operator’s security practices and data handling. Enterprises will also need to consider local laws and workplace rules. Biometric privacy regulations vary widely, and some jurisdictions require explicit consent or impose strict limits on private-sector use.

There is also the question of accessibility and inclusion. Not every employee will have access to an Orb, and not every organization will want to deploy physical verification hardware. A global rollout does not mean uniform adoption. Companies may choose to use the badge for specific roles, meetings or transactions rather than across the entire workforce.

What the badge does—and does not—prove

A “proof of human” badge is a useful signal, but it is not a complete security solution. It can help show that a participant has completed a biometric verification process and is present on the call. It does not automatically prove that the person is authorized to approve a payment, that their account has not been compromised or that the device they are using is secure.

Attackers may adapt. They could try to coerce a verified employee into joining a call under duress, reuse a verified account or combine a real human participant with fraudulent instructions from another channel. Security teams will need to pair human verification with payment controls, out-of-band confirmation, device trust and employee training. A badge can raise the cost of impersonation, but it cannot replace layered defenses.

The badge may also create a false sense of security if users treat it as absolute. A verified human can still be a malicious insider. A real participant can still be manipulated. A legitimate meeting can still be used to distribute malware if a participant’s device is compromised. The value of the badge depends on how clearly organizations explain what it verifies and where its limits lie.

Enterprise adoption and the identity verification market

The launch places World in a crowded and evolving identity verification market. Companies are investing in tools that can confirm identity for remote onboarding, financial transactions, customer support and workforce access. Video platforms are becoming one front in that broader battle. If a meeting can be verified, it becomes a more trusted channel for decisions that might otherwise require in-person confirmation.

Zoom’s enterprise customer base gives World a distribution channel that reaches large organizations across sectors. But adoption will depend on more than availability. IT administrators will ask about integration complexity, user support and compliance. Security teams will ask about data flows and incident response. Employees will ask about convenience and privacy. The badge must be easy enough to use that people actually enable it, and robust enough that it meaningfully changes risk.

Financial firms are a natural early market. They face strict know-your-customer and anti-fraud obligations, and they handle transactions that are attractive to criminals. Bain Capital and Pantera Capital’s involvement as design partners suggests that World is testing the feature in environments where identity errors are costly. If the integration proves workable in those settings, it could spread to other industries with similar trust requirements.

What to watch next

The next phase will be defined by adoption data and real-world incident response. Enterprises will want to know how often badges are used, whether they reduce fraudulent attempts and how quickly suspicious participants can be flagged. They will also want clarity on how verification credentials are managed when an employee leaves, changes roles or loses a device.

Regulators and privacy advocates will watch how biometric enrollment is handled, especially across borders. The success of World ID for Zoom may depend less on the technical novelty of the badge and more on whether organizations can deploy it without creating new privacy risks or employee backlash. For now, the feature gives enterprises a visible tool for a growing problem: proving that the face on the screen belongs to a real person, not a synthetic impersonation.

Source: Cointelegraph News