World ID Comes to Zoom: What Is Its Status in Indonesia?

World ID for Zoom became available through the Zoom Marketplace on October 18, 2026. The integration is designed to display a Human Badge after the system checks that the person appearing on camera matches the holder of an Orb-verified World ID.

The product addresses a genuine security problem. Synthetic video and audio are becoming harder to distinguish from real people, while virtual meetings are routinely used to approve fund transfers, discuss confidential information, recruit employees, and make corporate decisions.

A Human Badge adds a signal that the participant is a verified human. It does not prove that everything the participant says is true, replace transaction authorization, or guarantee that the account holder is acting freely and has not lost control of a device.

For users in Indonesia, the central issue is not limited to how the technology works. Indonesia’s Ministry of Communication and Digital Affairs previously suspended World’s services over electronic-system registration and biometric-data processing concerns. Global availability through the Zoom Marketplace does not automatically change that local regulatory status.

How World ID for Zoom Works

World’s documentation says the user needs an Orb-verified World ID, the World ID mobile application, and an Enterprise Zoom account. The integration currently operates through the Zoom desktop application on macOS and Windows, while a mobile device is used to complete authentication.

The workflow has several layers:

• An Orb captures and processes images of the user’s face and eyes to establish that the user is a unique human.

• The resulting World ID verification is maintained through the user’s mobile application.

• The user connects that World ID to one Zoom account.

• When authentication is required, the integration captures the participant’s face from the meeting and asks the user to complete a selfie check through the mobile application.

• The system compares information associated with the Orb verification, the new selfie, and the face shown in the meeting.

• A Human Badge appears after the match succeeds.

World states that the biometric match runs on the user’s phone and that biometric data is not shared directly with Zoom. Its documentation says the information shared consists of the user’s World ID app username and verification status.

These privacy descriptions are claims made by the product provider. A launch announcement is not an independent security assessment and does not expose the code, penetration-testing results, complete system architecture, or every supporting metadata flow. Organizations should conduct their own technical and legal review.

Launch of World ID for Zoom through the Zoom Marketplace. Source: World, October 18, 2026. 

What Does the Human Badge Actually Prove?

Proof of human, identity verification, and know your customer are sometimes treated as interchangeable concepts. They answer different questions.

A. Is the Participant Human?

World ID is intended to provide evidence that the user is a human rather than an automated system. Orb verification also aims to reduce the possibility of one person creating multiple unique identities.

This can help distinguish a verified person from a bot or a fully synthetic video. The assurance still depends on false-acceptance rates, false rejections, resistance to spoofing, account-recovery procedures, and the system’s ability to respond to new attacks.

B. Does the Person on Screen Match the World ID Holder?

World ID for Zoom uses a match involving Orb-related verification data, a recent selfie, and the participant’s face in the meeting. The Human Badge indicates that this authentication sequence succeeded according to the system.

The badge does not, on its own, prove the participant’s legal name, job title, or employer. Unless those facts are checked against documents or authoritative company records, the badge only communicates the result of World ID’s authentication process.

C. Is the Human Badge Equivalent to KYC?

The Human Badge is not an automatic replacement for know-your-customer procedures. KYC may require checks of a legal name, identity documents, address, beneficial ownership, source of funds, sanctions lists, and transaction risks.

World says its proof-of-human system can operate without requiring a name or unnecessary personal information. That approach may reduce disclosure, but it also means the badge does not always communicate the user’s legal identity.

Banks, securities companies, digital-asset platforms, and other regulated organizations must still complete any KYC process required by the rules applying to them.

D. Does It Make a Meeting Fully Secure?

A Human Badge cannot verify the truth of what a participant says. A verified human may still provide fraudulent instructions, conduct social engineering, cooperate with another attacker, or act under coercion.

The system does not replace dual approval, callbacks through known contact details, transaction limits, hardware security keys, or confirmation through a second channel. High-value meetings still need independent operational controls.

World ID for Zoom Is Separate from the WLD Token

Users should not treat the Zoom integration as a token transaction. World’s setup requirements list the World ID application, Orb verification, an Enterprise Zoom account, the Zoom desktop application, and a mobile device. Holding WLD is not listed as a condition for authentication.

World ID operates as an identity or proof-of-human layer. WLD is a cryptoasset within the broader World ecosystem. A change in the price of WLD does not determine whether a Human Badge can appear during a meeting.

This distinction also limits what can be inferred about the token. The Zoom launch does not by itself establish additional transaction demand for WLD. Any effect on network activity or token use would need separate data, such as growth in verified users, authentication frequency, active integrations, and onchain transactions.

Why Biometric Data Requires Special Treatment

A face or iris pattern cannot be changed as easily as a password. A compromised password can be replaced. A biometric representation that is exposed or linked back to a person may create much longer-lasting consequences.

Indonesia’s Law Number 27 of 2022 on Personal Data Protection classifies biometric data as specific personal data. Processing it requires lawful and transparent purposes, appropriate safeguards, use limitations, and protection against unauthorized access.

A data-protection impact assessment becomes especially relevant when an organization deploys new technology or processes specific personal data at scale. That assessment should answer practical questions:

• What data is captured by the Orb, the mobile device, World’s application, Zoom, and cloud services?

• Which entities act as data controllers and processors?

• In which countries are data or encrypted fragments stored?

• How long are authentication records and metadata retained?

• How can a user delete data and disconnect an account?

• What happens if the device is lost or the account is recovered?

• Who is responsible after a breach or incorrect match?

• Is there an alternative for employees who cannot or do not wish to use biometric verification?

A claim that the primary match runs on the device can reduce the movement of raw biometric information. It does not answer every question about metadata, authentication logs, technical support, backups, account recovery, or diagnostic reports.

What Is World’s Official Status in Indonesia?

Komdigi temporarily froze the electronic-system registration for Worldcoin and World ID services on May 4, 2025. The ministry cited issues involving PSE registration and the use of an electronic-system registration belonging to another legal entity.

During a clarification process in May 2025, Tools for Humanity told Komdigi that more than 500,000 retina records and retina codes had been collected from users in Indonesia. That number came from the company’s explanation to the government and was not presented as an independent audit of active users.

The latest World-specific release located through Komdigi’s public portal as of October 20, 2026 remains the statement dated June 16, 2025. It said the temporary suspension would remain in place because the processing of iris biometric data had not fully complied with national requirements.

The ministry listed obligations including stopping iris scanning and processing for Indonesians, permanently deleting iris codes and other encrypted codes originating from Indonesian users, improving data-protection systems, and demonstrating compliance before activity could resume.

Komdigi maintained the temporary suspension of World and listed obligations related to Indonesian biometric data. Source: Indonesia’s Ministry of Communication and Digital Affairs, June 16, 2025. 

A global Zoom launch therefore cannot support a claim that World ID has officially resumed Indonesian operations. Such a conclusion would require an updated Komdigi statement, a verifiable PSE status, and evidence that the earlier conditions had been satisfied.

Does a Zoom Marketplace Listing Authorize Use in Indonesia?

Not automatically. The Zoom Marketplace distributes applications, while operating permission and personal-data processing remain subject to each jurisdiction’s laws.

An Indonesian organization may be able to see the application in a global catalog. That does not resolve whether Orb verification or World’s biometric-processing workflow may lawfully operate in Indonesia under the current status.

The division of responsibility also requires examination. Zoom provides the meeting platform and marketplace. World operates the proof-of-human system and application. The customer organization decides whether employees must use the integration. Each party may hold a different legal role in the data-processing chain.

An enterprise contract should clarify:

• Which legal entity provides the service to Indonesian users.

• Where each category of data is processed and stored.

• The purpose and legal basis for biometric processing.

• Audit rights and access to security reports.

• Incident-response procedures.

• Each party’s liability limits.

• Data retention and deletion after termination.

• An alternative for participants who do not have or do not want to use World ID.

Four Risks Organizations Should Evaluate

A. Biometrics Cannot Be Easily Replaced

A compromised password can be reset. Biometrics have no equivalent replacement mechanism. The system must demonstrate that stored templates or encrypted fragments cannot be reused for impersonation or persistent tracking.

B. A Badge May Create Excessive Trust

Meeting participants may treat the Human Badge as proof that every instruction is legitimate. That becomes dangerous if the organization weakens callback procedures, multi-person approval, or beneficiary-account verification.

The badge should be treated as one authentication signal. Fund transfers, vendor-account changes, and disclosures of sensitive documents still require additional controls.

C. Employee Consent May Not Be Freely Given

An employment relationship creates a power imbalance. Consent given because an employee fears losing meeting access or employment may not carry the same quality as a genuinely voluntary choice.

Employers should provide a workable alternative for people who cannot or do not wish to undergo Orb verification. Biometric processing should also remain proportionate to the risk being addressed.

D. Vendor Disruption Can Block Access

Authentication depends on the World ID application, the user’s device, network connectivity, supporting services, and Zoom configuration. A failure in any component may prevent the badge from appearing.

Organizations need a secure fallback procedure so critical meetings do not depend on one identity provider. The fallback must be designed carefully so that it does not become an easier route for attackers.

Checks for Indonesian Organizations

Before adding World ID for Zoom to an official workflow, an Indonesian organization should consider:

• Obtaining written confirmation of World’s current operating status in Indonesia.

• Verifying the applicable PSE registration and responsible legal entity.

• Completing a data-protection impact assessment.

• Mapping data flows across the Orb, mobile device, Zoom, and cloud services.

• Reviewing security audits, penetration tests, and vulnerability-handling procedures.

• Defining retention and deletion periods.

• Providing an alternative authentication method.

• Keeping dual approval and second-channel verification for important transactions.

• Establishing a procedure for failed or incorrect badge results.

• Preventing the processing of children’s data without additional safeguards.

Individual users should also examine what remains on their device, how account recovery works, and what information is sent in a diagnostic report. World’s documentation states that reporting an issue may send diagnostic and related verification data after the user provides consent.

Conclusion

World ID for Zoom attempts to solve an increasingly important problem: confirming that a video participant is a human linked to an Orb-verified World ID. The combination of Orb verification, a selfie check, and the face shown in the meeting can add a layer of authentication absent from ordinary video calls.

That layer has clear limits. A Human Badge is not a legal identity, a complete KYC process, proof that a statement is true, or a replacement for corporate transaction controls.

Indonesia requires separate attention. Komdigi’s June 16, 2025 release maintained the temporary suspension and required the cessation of iris processing and deletion of Indonesian users’ codes. The global Zoom Marketplace launch in October 2026 does not itself cancel that position.

The next useful signals are an updated Komdigi confirmation, current PSE status, evidence that deletion and compliance obligations were fulfilled, a complete data-flow explanation, and independent security assessments of the production integration. Until those are available, Indonesian organizations should not equate global application availability with local regulatory clearance.

Disclaimer: This article is for informational purposes and does not constitute legal, cybersecurity, investment, or data-protection advice. Regulatory status and service availability may change. Organizations and users should verify the latest Komdigi announcements, PSE status, Indonesian personal-data law, World documentation, and Zoom policies before using a service that processes biometric data.