DESPITE THE ENACTMENT of laws primarily designed to protect Filipinos from digital pirates, the Philippines has remained vulnerable to cybercrimes — including identity theft in the guise of cryptocurrency investment.
In a document obtained by the Insider, the National Privacy Commission (NPC) particularly hinted at the “Tools for Humanity (TFH) which developed the so-called World App.
According to the NPC, a cease-and-desist order against TFH has already been issued for using an “Orb” device to scan a user’s irises for digital identity verification.
In its order dated September 23, 2025, the NPC said TFH violated key provisions of the Data Privacy Act of 2012, citing breaches of the General Data Privacy Principles and the Rights of Data Subjects.
The order prevents TFH from making the app available for download, conducting identity verification, or transferring and sharing any personal data already collected.
WORLD APP, WHAT?
World App serves as a digital wallet for Worldcoin, a cryptocurrency and digital identity project co-founded by Sam Altman, who also leads OpenAI (the company behind ChatGPT).
To register, users must visit a location with an Orb device to scan their eyes to confirm they are real humans, not bots or AI accounts. The image is then converted into a unique digital code that serves as the user’s identity.
TFH claims that images are deleted immediately after scanning to protect users’ privacy, while new users receive a small amount of Worldcoin as an incentive.
However, reports allege that TFH’s representatives have conducted field operations in provincial areas, offering cash in exchange for iris scans.
CASH FOR CONSENT
The NPC began investigating TFH following complaints early this year over supposed data collection in Plaridel, Bulacan, during a “Libreng Cyber Security at Digital Financial Literacy Program” supported by the local government.
Complainants said participants were asked to provide retinal scans, fingerprints, and personal information such as names, ages, and addresses in exchange for a digital ID — data that, if compromised, could lead to identity theft or financial fraud.
A report by the NPC’s Complaints and Investigation Division (CID) in May described several red flags. “There is no privacy policy, not even on their website,” the CID said.
“General statements without specific information on how data is collected and disposed of are insufficient for informed consent.”
DEFIANT TO PH LAWS
The report also questioned the need for extensive biometrics collection – “The collection of retinal and iris scans for mere authentication appears excessive. Most authentication processes only require facial captures, which themselves can already raise privacy issues,” it added.
The NPC emphasized that collecting such sensitive biometric data poses serious privacy risks and could enable identity cloning or deepfake creation.
Further research by the commission also revealed that TFH is not even registered with the Securities and Exchange Commission (SEC).
TFH however insisted that they do not need local registration, even as they claimed that they are not into business and that their activities are limited to providing technology.
IN DEFENSE OF TFH
In a statement, TFH argued that the cease and desist order issued by the NPC would effectively expose millions of Filipinos to cybercrime.
“If not reversed, this could deprive millions of Filipinos of technology designed to protect them from scams, identity theft, and AI-driven fraud,” it said.
TFH also denied engaging in identity theft – “Our system does not identify individuals. It simply verifies that they are unique humans, not bots or AI accounts. We don’t store, sell, or purchase biometric data.”
In view of the order, TFH hinted at the idea of seeking legal remedy in an apparent bid to prove “legitimacy.”
In the meantime, TFH said that they’re inclined to seek reconsideration of the NPC’s decision.
GLOBAL CONTEXT
The Philippines joins a growing list of countries scrutinizing TFH’s practices.
Kenya, Spain, Germany, and Hong Kong have banned Worldcoin outright, while India, South Korea, Colombia, and China have issued warnings or launched separate investigations.
