Worldcoin

🔴 High Risk

Argentina’s Worldcoin case reveals a troubling pattern: a global crypto project exploits crisis‑driven desperation to collect citizens’ most sensitive biometric data in exchange for small token airdrops, all under a thin layer of “privacy” rhetoric. By embedding iris‑based identity into unhosted wallets, Worldcoin builds an infrastructure that is ideal for obscuring illicit flows, yet regulators have so far limited themselves to data‑protection fines and consumer‑law corrections. This reactive, compliance‑focused approach underestimates the project’s systemic risk as a potential money‑laundering enabler, especially when operating at mass scale among vulnerable populations.

Argentina’s Worldcoin case centers on the project’s use of iris‑scanning “Orb” devices to collect sensitive biometric data from hundreds of thousands of Argentines in exchange for WLD‑token airdrops, at a time of acute economic crisis and high inflation. The Agency of Access to Public Information (AAIP) opened an investigation in August 2023 into whether Worldcoin’s biometric‑data practices comply with Argentina’s data‑protection and consumer‑law frameworks, including transparency, consent, and data‑security requirements. Authorities also scrutinized clauses in Worldcoin’s contracts that allegedly favored foreign‑law arbitration and weakened local consumer rights. In 2024, Buenos Aires Province escalated the response by imposing a 194‑million‑peso fine for the “irregular handling” of iris‑scan data and ordered the removal of abusive contract terms, especially those affecting minors. Although no formal money‑laundering conviction has been issued, regulators warned that the combination of biometric‑based identity verification and unhosted World App wallets creates a high‑risk environment for illicit‑finance abuse, including potential placement, layering, and integration of criminal proceeds via pseudonymous WLD transfers. The case so far reflects preventive‑regulatory enforcement against data‑processing and consumer‑law violations, while flagging future AML‑related risks rather than proving a concrete laundering pipeline inside Argentina.

Countries Involved

Argentina (primary jurisdiction), with cross‑border elements involving the Cayman Islands, the US, and Brazil

Argentina is the main jurisdiction where Worldcoin’s on‑the‑ground biometric collection took place: the AAIP and Buenos Aires Province regulators have investigated and sanctioned the Worldcoin Foundation for operating its iris‑scanning “Orb” kiosks in multiple Argentine provinces. At the same time, Worldcoin’s contractual structure and dispute resolution point to foreign jurisdictions: user agreements allegedly impose Cayman Islands law and California‑based arbitration, which Argentine authorities have criticized as predatory clauses that undermine local consumer‑protection rights. There is also evidence that the iris data collected in Argentina is stored in Brazil, raising questions about cross‑border data exports without adequate safeguards. This multi‑jurisdictional framework complicates oversight: if illicit funds were moved via Worldcoin‑linked wallets, tracing would require coordination between Argentina, Brazil, and the corporate entities behind the project, which already operate under foreign legal shields.

 

August 2023 – ongoing regulatory scrutiny and sanctions through 2024–2025

The Worldcoin issue in Argentina became visible in August 2023, when the Agency of Access to Public Information (AAIP) publicly announced an investigation into how the project collects, stores, and uses biometric data obtained via iris scans in exchange for cryptocurrency. This followed earlier spot‑checks of Worldcoin’s operations in Buenos Aires and other provinces, where queues of citizens submitted iris scans for WLD airdrops amid a severe economic crisis and high inflation. By early 2024, Buenos Aires Province escalated from mere inquiry to enforcement, issuing administrative sanctions and consumer‑protection orders against the Worldcoin Foundation. In mid‑2024, the province imposed a 194‑million‑peso fine for the irregular handling of iris‑scan data, and demanded that abusive clauses in Worldcoin’s contracts be removed. These actions remain part of an ongoing regulatory process; authorities have not closed the file, which suggests that the risk of misuse—including possible money‑laundering or illicit‑finance abuse—remains under review even if not yet formally proven.

Worldcoin (WLD) token

Primarily: illegal data‑processing and consumer‑law violations; secondary risk of money‑laundering‑facilitating infrastructure

Worldcoin’s established breaches in Argentina are framed as data‑protection and consumer‑law infractions, not as charged money‑laundering conspiracies. The AAIP and Buenos Aires Province have mainly focused on four areas:

  • Unlawful or irregular collection and processing of biometric data (iris scans) without sufficient transparency or lawful safeguards;

  • Predatory contract clauses that let Worldcoin suspend service without refunds, waive collective claims, and impose foreign law and arbitration;

  • Failure to forbid minors from registering, despite collecting sensitive biometric information; and

  • Inadequate data‑security and data‑protection‑impact assessments.

However, regulators and commentators have separately highlighted that this model also creates a high‑risk environment for money‑laundering. By combining biometric‑based identity verification with unhosted wallets, Worldcoin could, in principle, be used to layer or integrate illicit funds through a global network of pseudonymous accounts. If bad actors in Argentina or other countries exploit these wallets to move drug proceeds, hack‑related gains, or corrupt‑official‑related flows, the same infrastructure that is now being punished for data‑protection breaches could later be implicated in AML‑related enforcement.

Worldcoin Foundation / Worldcoin Inc., AAIP, Buenos Aires Province regulators, and third‑party contractors

The main entity accused in Argentina is the Worldcoin Foundation (or its operating entity, Worldcoin Inc.), the organization behind the Orb devices, World ID, and WLD token distribution. This entity set up dozens of physical kiosks in Buenos Aires and inside several Argentine provinces, where citizens queued for iris scans in return for WLD tokens. On the Argentine side, the key regulatory bodies are the Agency for Access to Public Information (AAIP), which oversees data‑protection compliance, and the Buenos Aires Province Ministry of Production, Science and Technological Innovation, which issued the administrative fine and contract‑reform orders.

Additionally, third‑party operators and contractors may be involved in on‑the‑ground enrollment, data‑handling, and technical support, although the precise list has not been fully disclosed in public documents. These actors could, in theory, become relevant if any attempt was made to route illicit funds through operators or local cash‑out channels, but so far Argentine authorities have concentrated on Worldcoin’s corporate‑level conduct rather than on individual money‑movers.

No public evidence of specific PEP involvement in Argentina’s Worldcoin case (yet)

To date, there is no publicly documented allegation or court finding that a politically exposed person (PEP) in Argentina has used Worldcoin to hide or launder funds. The reported investigations and sanctions relate to general data‑protection and consumer‑law violations, not to a named PEP benefiting personally from the project. Nonetheless, the design of the system inherently raises PEP‑risk concerns: if a high‑ranking official or politically connected person in Argentina used an unhosted Worldcoin wallet, they could potentially receive or route opaque funds while being difficult to trace, especially if the underlying biometric “World ID” is not directly linked to a public bank‑account identity. Argentine regulators have not yet framed this as a PEP‑specific case, but they are aware that any large‑scale pseudonymous‑wallet system can be exploited to obscure politically sensitive financial flows without explicit proof of current PEP‑related abuse.

Potential for “placement‑layering‑integration” via unhosted wallets; no formal proof yet in Argentina

From a AML risk‑analysis viewpoint, Worldcoin’s architecture in Argentina could be abused through several standard laundering techniques, even if none have been formally proven in court. First, placement: bad actors could convert illicit cash into WLD tokens through local, informal exchanges or by using the Worldcoin kiosks to create multiple wallets, effectively converting “dirty” cash into digital value. Second, layering: those wallets could send WLD across multiple hops on the blockchain, mixing with legitimate users’ transfers, which obscures the origin of the funds. The unhosted, self‑custody nature of the World App wallets makes it hard for Argentine authorities to know who controls each address or what source funds came from.

Third, integration: cleaned funds could be converted back into local Argentine currency or other assets via third‑party services, such as over‑the‑counter (OTC) dealers or crypto gift‑card schemes, again exploiting the anonymity‑enhancing properties of the system. Because iris data is allegedly not directly tied to a name on the blockchain, a laundering actor could, in theory, maintain a biometric‑verified identity for “legitimacy” while routing illicit funds through several wallets. However, Argentine authorities have not yet presented forensic transaction traces or case files tying specific drug‑ or corruption‑related flows to Worldcoin; their current actions are therefore preventive‑regulatory rather than criminal‑conviction‑based.

N/A

High‑risk unhosted‑wallet ecosystem; no public blockchain‑forensics‑based laundering case in Argentina yet

Open‑source and media‑based analyses describe Worldcoin’s Argentine activity as a high‑volume, pseudonymous‑wallet ecosystem rather than a documented laundering pipeline. The World App generates unhosted wallets that can transfer WLD across the network without recurring KYC checks, similar to other self‑custody tools that AML watchdogs criticize for weak traceability. With over half a million Argentines enrolled and hundreds of thousands of wallets created, the on‑chain footprint of WLD in Argentina is substantial; this means that if any criminal actors there start using these wallets, their activity could be hard to distinguish from legitimate users without off‑chain intelligence or cooperation from Worldcoin.

However, no Argentine or international regulator has published a transaction‑analysis report that links specific drug‑, corruption‑, or fraud‑related flows to Worldcoin‑linked wallets in Argentina. AML‑oriented think‑tanks and crypto‑analysis platforms have flagged the structural risk of unhosted wallets in general, but have not yet tied Worldcoin to a named illicit‑finance case in Argentina. In other words, the transaction‑analysis summary so far is: a high‑risk, traceability‑challenged environment exists, but it has not yet been concretely proven to be a major laundering channel in Argentina.

 

AAIP investigation, Buenos Aires Province sanction, and consumer‑rights corrective orders

Argentina has taken several regulatory and administrative actions against Worldcoin, focusing on data‑protection and consumer‑law compliance rather than on criminal money‑laundering charges. The AAIP opened an investigation in August 2023 to verify whether Worldcoin’s biometric‑data collection, storage, and use comply with the Protection of Personal Data law, including requirements for security measures, retention periods, and impact assessments. AAIP demanded detailed information about the types of data collected, confidentiality measures, and the legal basis for processing iris scans in exchange for WLD tokens.

Separately, the Buenos Aires Province government issued an administrative sanction in 2024, imposing a 194‑million‑peso fine on the Worldcoin Foundation for the irregular handling of biometric data obtained via iris scanning. The authorities also ordered the removal of abusive clauses from Worldcoin’s contracts, including those that allegedly allowed service suspension without refunds, barred collective claims, and imposed foreign‑law arbitration against Argentine consumers. They further required that Worldcoin protect minors’ data and provide clearer information about data‑handling practices. These measures are preventive and corrective, aimed at deterring the misuse of Worldcoin’s infrastructure for both privacy violations and, by extension, potential money‑laundering–facilitating behavior.

Worldcoin
Case Title / Operation Name:
Worldcoin
Country(s) Involved:
Argentina, Brazil, United States
Platform / Exchange Used:
Worldcoin “World App” (self‑custody wallet), Orb‑based enrollment system
Cryptocurrency Involved:

Worldcoin (WLD) token

Volume Laundered (USD est.):
No reliable public estimate; highlighted as high‑risk potential rather than confirmed value
Wallet Addresses / TxIDs :
N/A
Method of Laundering:

Potential placement of illicit cash into WLD via unhosted wallets; layering through multiple pseudonymous wallet‑to‑wallet transfers; integration via OTC or third‑party services. Biometric‑based identity obscures source of funds.

Source of Funds:

Potential darknet‑related payments, ransom, petty‑crime proceeds, or informal‑cash flows; currently speculative, not formally proven in Argentina.

Associated Shell Companies:

Worldcoin‑related entities in Cayman Islands and US; localized kiosk‑operating contractors in Argentina (details not fully public).

PEPs or Individuals Involved:

N/A

Law Enforcement / Regulatory Action:
AAIP investigation into biometric‑data compliance; Buenos Aires Province sanction and 194‑million‑peso fine for irregular handling of iris‑scan data and abusive contract terms; orders to remove abusive clauses and strengthen minors’ protections.
Year of Occurrence:
2023–2024 (operations observed and reported; enforcement actions issued)
Ongoing Case:
Ongoing
🔴 High Risk