Theses›Software & applications›Proof of humanhood

Proof of humanhood

Proof of humanhood has the forcing function agent identity lacks, and still is not a hardware market

  • Bear
  • Shut
  • $1.8B by 2035

The callDeepfakes broke liveness checks and EU wallets force spending by end-2026, but Apple and Google own the attestation root, so the money goes to bundlers and platforms.

D1D2R1R2R3C1foragainst D1D2R1R2R3C1foragainst
Fig. 1The balance. Drivers and catalysts against restraints, each block sized by its weight; catalysts hang dashed because they have not happened yet, sized by their odds. It tips toward the restraints.
  1. D1Generative AI breaks the assumption that a face on camera is a person, and only one of 12 passive liveness systems tested met the attack-rejection threshold.
  2. D2Every bank, marketplace, government service and AI agent acting for someone has to know a unique live human is behind the account.
  3. R1The durable position is capture-time attestation, which Apple and Google own and can turn into a free platform feature.
  4. R2Every standard and accredited lab covers only face, fingerprint and iris, so a new sensing method has no certification path.
  5. R3The detection software that grows accrues to bundling identity-verification incumbents; Onfido went to Entrust for about $650M.
  6. C1Every EU member state must offer a certified digital identity wallet under eIDAS 2.0, forcing spend on remote proofing tested against injected video.31 Dec 2026
Rests onthe beliefs underneath
Supported by · confidence
What would prove itdated tests, open and resolved
2027202820292030today1234567predictionswatch 2027202820292030today1234567predictionswatch
Fig. 2Each ring is a dated test: dashed while open, struck through when overdue, ticked or crossed once resolved.
  1. 1EU wallet deadline passes; ISO/IEC 25456 publication follows around June 2027.Dec 2026 · open
  2. 2By 31 Jan 2027 the European Commission's EUDI wallet tracker shows at least ten member states with a wallet available to citizens.Jan 2027 · open
  3. 3World's enterprise revenue from the Zoom, Tinder, DocuSign and Okta deals shows whether anyone pays.Jun 2027 · open
  4. 4No biometric modality outside face, fingerprint, iris and voice obtains a published conformance test protocol or is accepted inside an ETSI EN 119 461-compliant remote identity proofing flow, before end-2028.Dec 2028 · open
  5. 5Apple or Google ships device-attested capture exposed to third-party identity verification applications by end-2028, moving the durable position from detection to attestation.Dec 2028 · open
  6. 6Apple or Google ships device-attested capture to third-party identity apps, or a method outside face, fingerprint, iris and voice gets a published test protocol.Dec 2028 · open
  7. 7No standalone liveness or deepfake-detection company reaches a $1B independent outcome by end-2029; the category resolves through tucks into identity-verification platforms and as free features of the platform attestation stack.Dec 2029 · open
Expressionslisted, private, technologies
Private · 5 private companies, 3 of them in the US.

Incode · Veriff · Reality Defender · Tools for Humanity (World) · Billions (formerly Privado ID / Polygon ID)

2 more private companies tracked, not shown

Technologies
Who has already bet on itprivate rounds, from public sources

$628M raised by 5 companies, $251M of it in the last three years. Wave under way: Large rounds in the last three years; the category is funded and getting crowded.

Backed by a top-tier venture firm: Veriff, Tools for Humanity (World), Reality Defender.

What changedthe record, newest first
  • 28 Jul 2026Proving you are a real human is the one part of digital identity that generative AI genuinely broke, and there is now a dated European deadline forcing people to buy a fix. So I went looking for the hardware angle. There is not one. The fakes stopped being held up to the camera and started being injected into the software behind it, which is why a whole separate standard had to be written in 2024, and why a product can be certified against fake faces while being defenceless against deepfakes. Worse for anyone with a clever new sensor: every test standard and certification lab in the world covers faces, fingerprints and irises, so a genuinely novel sensor cannot be certified into the regulated market at all. The layer itself is also far smaller than the headlines suggest, a few hundred million dollars rather than the fourteen billion people quote by reaching for the wrong market. Fast growth on a small base, captured by software and by whoever owns the phone.
  • 28 Jul 2026I went looking for the crypto answer to proving you are human, because that is where the noise is. The best-funded version of it has scanned eighteen million irises, signed Tinder, Zoom and DocuSign, raised at two and a half billion, and spent this June laying people off because almost nobody pays. The company second-largest in the category quietly renamed its way out of the category in February. Meanwhile Google published the privacy cryptography for free and the European Commission shipped its own open-source version, so the clever maths in the middle is worth nothing to sell. The lesson I keep relearning in identity: a real problem, a real deadline, and no willingness to pay are perfectly compatible, and the forecasts that say otherwise disagree with each other by six times.
Reading
Show the reading