Proof of Personhood (PoP)

Proof of personhood (PoP) is a method for establishing that an account or wallet is controlled by a real human being, and that each human holds only one such account, ideally without disclosing their name or other personal details. It addresses a basic weakness of the internet and of public blockchains: creating new accounts is cheap, so one person or one program can pretend to be thousands of users.

The problem is often called a Sybil attack, after a famous case study of a person with multiple personalities. Proof-of-personhood systems try to make such attacks expensive or impossible, which matters for one-person-one-vote governance, fair airdrops, universal basic income schemes and, increasingly, for telling people apart from AI-driven bots. Approaches range from scanning biometrics to building webs of mutual trust, and each involves trade-offs between privacy, accessibility and reliability.

Imagine a village vote where anyone can post a ballot through a slot in the door. Without some check, one person could post a hundred ballots. The usual fix is to check identity papers, but that tells the organisers exactly who everyone is. Proof of personhood looks for a middle path: a way to stamp each person's hand once, so they can vote only once, without writing their name in a book.

Online, the "stamp" might be a scan of a unique body feature, a set of friends who vouch for each other, or a test only humans can pass. Each method works differently, and none is perfect.

• Biometric verification. A device or app checks a unique physical trait, such as the iris or face, and records a code derived from it so the same person cannot register twice. This can be strong against duplicates but raises questions about collecting biometric data.
• Social graph analysis. Users vouch for people they know, and algorithms look for clusters that suggest fake accounts. This avoids biometrics but depends on genuine social connections.
• Video and vouching registries. Applicants submit a video and a deposit, an existing member vouches for them, and others can challenge suspicious entries.
• Synchronous tests. Everyone in the network solves puzzles at the same moment, making it hard for one person to operate many accounts.
• Aggregated credentials. Some tools combine signals, such as verified social accounts, phone numbers and on-chain history, into a score rather than a yes-or-no proof.

Many systems use zero-knowledge proofs so that a user can prove they are a verified unique human without revealing which registration is theirs.

• Worldcoin. Worldcoin, developed by Tools for Humanity and launched in 2023, uses a spherical device called the Orb to scan irises and issue a digital credential called World ID, and distributes its WLD token to verified users. The project rebranded as World in 2024. It has signed up large numbers of users in many countries and has also faced investigations, suspensions or orders from data protection authorities in several of them.
• BrightID. A social identity network in which users connect with people they know, and graph analysis is used to estimate whether each account is a unique person.
• Proof of Humanity. A registry launched in 2021 on Ethereum in which applicants submit a video and a deposit, are vouched for by existing members, and can be challenged, with disputes settled by a decentralised court.

Proof of personhood is used or proposed for distributing tokens fairly, running decentralised governance with one vote per person, funding public goods through matching schemes that would otherwise be gamed by fake accounts, filtering bots on social platforms, and supporting basic income experiments. Outside crypto, similar questions arise in digital identity programmes run by governments and in online services that need to limit spam and fraud.

Supporters argue that proof of personhood will become essential as AI makes it harder to tell people from software online, and that privacy-preserving designs can avoid the need to share legal identity. Critics raise several concerns. Biometric approaches depend on users trusting how data is captured, processed and stored, and regulators in several jurisdictions have questioned whether consent was informed, especially where token incentives were offered. Social and video-based systems can exclude people with few online contacts or limited internet access, and may be vulnerable to collusion. No method fully prevents people from selling or renting their verified accounts. There are also questions about who controls the registries and what happens if a credential is compromised. Proof of personhood is distinct from KYC, which identifies a specific person for legal purposes, although the two can be combined.