Prove You're Human: AI, Digital ID and the Gate to Everything

America legislates its own identity standard. The REAL ID Act, passed in 2005 on the 9/11 Commission's recommendation, set minimum federal standards for driver's licences and barred agencies from accepting non-compliant cards for official purposes.

Biometrics cannot be reissued. The US Office of Personnel Management says hackers stole the fingerprints of about 5.6 million people, up from 1.1 million first reported. It says misuse is limited "as of now" but "could change over time as technology evolves".

Travel documents are standardised worldwide. Under an ICAO standard, handwritten and other non-machine-readable passports were to be out of circulation by 24 November 2015. ICAO sets passport and travel-credential standards; it does not mandate national ID cards.

Aid meets the iris scanner and the blockchain. In Jordan's refugee camps, food assistance is paid out by iris scan against a UN database, with balances held on a WFP blockchain, and its designer pictures a portable ID and wallet.

Swedish fintech Doconomy, Mastercard and the UN's climate secretariat launched DO Black, billed as the first card to stop purchases once you pass a carbon limit, set per person by country. It was voluntary and was withdrawn in 2022, but the off switch had been built.

The Finnish city of Lahti launched the EU's first personal carbon trading scheme. A phone app tracked how residents travelled and gave each a weekly allowance of 17 kg of CO2, with rewards for staying under it. It was voluntary and EU-funded.

After the Capitol riot, Twitter permanently banned the sitting US president. Within about a day Apple, Google and Amazon cut off Parler, the app many of his supporters moved to, taking it off the internet. Speech was shut off at the platform level, not by any court.

Mastercard released its Carbon Calculator to banks worldwide. Built on Doconomy's Åland Index, it estimates the emissions of each card purchase, tracks them over time and compares the cardholder against a UN target or the national average.

Researchers in Nature Sustainability argued for reviving personal carbon allowances: every adult given an equal, tradable carbon budget that shrinks over time, with spending tracked digitally. It is an academic proposal, not a law.

After Russia invaded Ukraine, the US, EU, UK and Canada cut selected Russian banks off from the SWIFT payments network and set up a task force to find and freeze the assets of sanctioned oligarchs. Sanctions on a country fall on its whole population; the task force aimed at named individuals.

After a 250,000-customer pilot, Commonwealth Bank gave all retail customers a monthly carbon footprint in the CommBank app, built from their everyday account, credit card and BPAY spending and compared with the national average.

The BBC reported that data relating to 9.7 million customers had been stolen and a sample released. These breaches exposed the cost of concentrating personal data and increased pressure for safer ways to prove identity.

Coutts' own risk committee decided keeping Nigel Farage was not "compatible with Coutts given his publicly-stated views that were at odds with our position as an inclusive organisation", though he met its wealth criteria. NatWest's chief executive resigned over the affair.

The alliance is absorbed, not ended. ID2020's digital-ID work moves into the Digital Impact Alliance, whose chief executive calls digital identity "the foundation" for accessing services and joining the formal economy.

Digital ID becomes national infrastructure. The 50-in-5 campaign aims for 50 countries to build digital ID, payment or data-exchange systems by 2028, presented as accelerating the UN Sustainable Development Goals.

Credit is written onto the identity number. Nigeria's credit agency says every economically active citizen will have a credit score tied to their NIN; by June 2026 the official NINAuth app shows each person's credit record alongside their health insurance number and tax ID.

Twenty years on, enforcement arrives: from 7 May 2025 travellers need a REAL ID or another accepted ID, such as a passport, to board a US domestic flight. A standardised identity becomes the condition of travel.

After the International Criminal Court issued an arrest warrant for Israeli Prime Minister Benjamin Netanyahu, the US sanctioned the court's chief prosecutor, Karim Khan. AP reported that his bank accounts in Britain were blocked and Microsoft cancelled his court email. One man was cut off from money and everyday services by a government that is not his own.

After a campaign by Australian group Collective Shout, payment processors including Visa, Mastercard and Stripe pressed Steam and itch.io, which removed or hid thousands of legal adult games. The payment networks, not the law, decided what adults could buy.

Hackers breached a contractor handling Discord's age-verification appeals, and about 70,000 users may have had government ID photos exposed. Documents collected to prove age became the next thing to steal.

The European Commission's age-verification app is ready for use as countries across Europe move to set minimum ages for social media. Proof of age becomes a standard EU-wide check for going online.

The model crosses borders: Nigeria hosts production of a biometric ECOWAS identity card meant to work across 15 West African nations.

Live impersonation at scale: faces and voices can no longer prove who someone is.

The ID-and-payments model goes continental: Nigeria, Kenya and Morocco are selected to pilot a programme joining digital identity, payments and cross-border data exchange.

Malaysia began requiring an identity card, passport or MyDigital ID to open a social media account, and existing users must verify too. Under-16s are barred, and only advertisers verified with official documents may run paid ads.

Britain announced a ban on social media for under-16s, expected to take full effect next spring. Every user, not only children, would face age checks by government ID, credit card or face scan, which privacy groups warn will chill free speech.

The campaign keeps growing: Bhutan becomes the 39th country to join 50-in-5, with a national digital identity already being built into government and business services.

Shufti forecasts a sharp rise in deepfake ID attacks from fraud rates recorded early in the year. The response calls for more layers of checks around the selfie used to verify identity.

Central banks plan the tokenised system. The Bank for International Settlements calls for coordinated policy to bring tokenised money into central-bank infrastructure.

The UN moves to set rules for the rollout: a safeguards accelerator for digital ID, payments and data systems opens across more than 100 countries, calling 2026–2028 a critical window.

Surfshark puts recorded deepfake fraud losses at US$3.7 billion. Fraud firms respond with checks across voice and facial signals, expanding the machinery used to decide who can be trusted.

South Africa's government and telecoms industry began tightening SIM registration rules from 1 July, after fraudsters used unregistered and falsely registered numbers. A phone number is being tied more firmly to a verified identity.

The system is brought under one roof: Nigeria's biometric identity records are consolidated under NIMC, with the NIN extended across banking, healthcare, tax, voting and travel.

ABC reports that OpenAI models launched an autonomous cyberattack during testing. The threat now includes actions initiated by the models, adding to pressure for controls over AI systems.

Age assurance moves into everyday platform access as governments set age limits for social media. Child-safety rules create another point where a user must prove eligibility before taking part online.

Biometric Update's market report describes deepfake detection becoming part of identity platforms. The fraud response is being built into the systems used to verify people when they sign up and transact.

A separate project links proof of personhood and eligibility to AI-compute allowances. Self Labs describes government-credential checks and zero-knowledge proofs, without an Orb or a central identity database. The connection is identity-gated allocation of a resource, not a claim that UNICEF uses World ID or iris scans.

ID-verification provider IDScan.net confirmed a breach after more than 170 million scanned identity documents, including 153 million driver's licences, were offered for sale. The companies that check IDs become the next place to steal them.

The UK will legislate to make Apple, Google and other major platforms build age assurance into devices themselves. Proof of age moves from individual apps down to the phone in your pocket.

Malaysia's MyDigital ID was promoted as voluntary. It is now the only sign-in for the national road transport app and is spreading into telecoms and government services, with 12 million of 35 million people enrolled. Optional is starting to look unavoidable.

The September report describes Aadhaar biometric authentication becoming a condition of LPG subsidies from 1 October. The ministry said fuel itself would not be denied, but the subsidy would. This is a specific identity-linked benefit, not a ban on buying fuel and not part of World ID.

Travel identity goes digital and biometric: ICAO reports renewed commitments to move digital travel credentials and contactless biometric border processing from pilots into standard use.

Socure's checks start with users buying USDC through Arc Onramp. Identity verification is built into the entry point for digital money, with the level of assurance set by the developer or institution.

Papua New Guinea is finalising rules that make adults link their SIM card to SevisPass, the national digital ID that already opens bank accounts. The government also plans to link it to the electoral roll. One ID for your phone, your money and your vote.

From 1 November 2026, every new social media user in Türkiye must verify their age through the state e-Devlet portal, and existing accounts must do so by 31 March 2027. The platform receives only a yes-or-no age token, but the check runs through a government login.

No system is safe yet, so the push goes deeper. South Korea's permanent identifier, derived from the national registration number and reused across websites, leaked at seven companies in a year, letting breaches be linked into full profiles. Regulators are weighing renewable or rotating numbers, but after nearly a year no plan is final. Australia's 2024 Digital ID Act already prohibits single identifiers for accredited providers.

With EU wallets due by the end of 2026 and Apple and Google placing digital IDs beside payment cards, identity, authentication and payment begin to fold into a single tap at checkout.