World ID for Agents: who authorized the AI-driven transaction?
World brings cryptographic human proofs to banking and AI agents. How delegated Proofs work, what is available and what banks still need to verify.
On October 18, World introduced World ID for banking and finance. It aims to help financial institutions verify that a real person is behind sensitive interactions, including those performed by AI agents. AgentKit, currently in beta, can delegate selected cryptographic Proofs from a human to an agent. That does not establish that every individual transaction is authorized or widely supported by banks.
A service could identify an account or agent making a request, but that did not inherently prove that a unique person stood behind a particular high-stakes action or approved it at the relevant time.
World combines Proof of Human, Proof of Presence and Proof of Attributes with delegation to AI agents. Its developer-facing AgentKit remains in beta.
Three Proofs answer three different questions
World distinguishes Proof of Human, Proof of Presence and Proof of Attributes. Proof of Human is intended to establish that someone is a real, unique person after a one-time visit to the Orb device. Proof of Presence offers a current liveness check on a phone. Proof of Attributes is designed to confirm a limited fact, such as an age threshold or nationality, without sharing an entire identity document. An institution still needs to decide which claim matters for a particular transaction.
A human proof can add assurance before a large wire transfer or account recovery. It does not, by itself, prove that the verified person authorized this specific amount, counterparty and timestamp. High-stakes workflows should tie any approval to the actual action and maintain a separate audit trail. That is an AgentenCode implementation recommendation, not an independently established guarantee in World's announcement.
Delegating a human credential to an AI agent
World ID for Agents uses AgentKit. According to World, a person can delegate selected Proofs to an autonomous agent; the agent can then demonstrate that a verified person stands behind its action while avoiding unnecessary disclosure of personal information. World describes the developer toolkit as a beta. A delegated identity Proof is not a banking license, a universal right to transact or a replacement for authorization checks inside the receiving institution.
The underlying agent concept is not entirely new. World introduced AgentKit building blocks for delegation, human approvals and agentic commerce in April. The October announcement packages that approach specifically for banking and finance. World names Bain Capital, OpenExchange, Outtake, Pantera Capital and VanEck Funds as initial design partners. That designation does not prove that all their customers or transactions already use World ID in production.
Biometrics, user access and the limits of a verification badge
World's higher-assurance Proof of Human depends on a one-time Orb verification, while Proof of Presence can require a live phone selfie. World emphasizes selective disclosure and cryptographic verification. Still, initial biometric enrollment, regional device access, accessibility and user consent are real governance questions. A bank should examine how these factors interact with privacy requirements rather than assume that using a cryptographic Proof removes all personal-data concerns.
The suite also includes World ID for Zoom, intended to show a Human Badge when meeting participants are verified. A badge can provide evidence about who is present, but it does not certify that every spoken instruction is genuine or that a transfer has been approved. A sensible pilot would test action-bound delegation, revocation and a fallback path for legitimate customers who cannot visit an Orb. These checks matter as much as the elegance of the identity protocol.
AgentenCode assessment
The interesting idea is not a new label for a bot: it is cryptographically linking an agent's work to a real person without disclosing more personal information than necessary. But proof of humanity, consent to a particular transaction and regulatory identity checks are distinct questions. Financial institutions must validate each of them separately.
Sources and verification
Reviewed against World's October 18 banking-and-finance announcement and the earlier April AgentKit release. Availability and privacy assurances are vendor statements; no independent Orb, AgentKit or bank integration testing was conducted.