Outtake Teams with World ID to Add Cryptographic Proof to Email and Fight Business Email Compromise

Outtake has launched “Verify for Email,” a browser extension that applies cryptographic identity to enterprise email in an effort to curb one of the most persistent cyber threats: business email compromise. The tool binds each verified send to a human and a device using either World ID credentials or a FIDO passkey, producing what Outtake describes as deterministic proof of who pressed send.

At launch, Verify supports Gmail and Superhuman, with Outlook integration expected by the end of 2025. Enterprise administrators can deploy the extension through Chrome’s management console, integrate with existing SSO and HRIS systems, and enable a “Send Verified” action without altering MX records. Recipients see a badge marking the email as authenticated, with underlying details accessible for inspection. Outtake says message content is hashed locally and logged via Merkle-tree records, meaning it does not retain raw message data.

The company positions the product as a complement to existing domain-level defenses such as SPF, DKIM, DMARC, and secure email gateways. Rather than focusing on probabilistic filters, it offers person-level assurance designed to counter impersonation and fraud. Tools for Humanity, operator of the World ID proof-of-human network, has already rolled out Verify to more than 100 employees, with power users authenticating the majority of sensitive outbound communications.

Ajay Patel, Head of World ID at Tools for Humanity, discussed the collaboration on the latest episode of ID Talk. “When we were thinking like, ‘Hey, you know, it’d be really cool if we can verify emails that you send as coming from a unique human and badging them somehow.’ And so when I met Outtake and I saw that their ‘Verify for Email’ product, it just seemed like this natural fit,” he said. Patel described the extension’s value in practical terms: “For Outtake Verify, you basically verify your enterprise account using World ID. When you hit send, the receiver will get an email that says that email was verified by Outtake Verify using World ID.”

The scale of the problem is well established. The FBI’s Internet Crime Complaint Center attributed $2.8 billion in losses to business email compromise in 2024, while IBM has tracked phishing-related breaches at costs approaching $5 million per incident. Patel underlined why stronger sender authentication matters: “It just adds that layer of authentication and trust. It’s really important to know that the email that you’re receiving actually came from the sender that you expected it to come from. And that gives you that added layer of authentication.”

Patel also framed the partnership in the broader context of AI-driven communication. “If you think about the future where there’s going to be AI, legitimate bots online, and humans, all of the systems that we use weren’t built contemplating AI,” he said. For World, the long-term mission is to provide a digital primitive for distinguishing humans from machines, allowing people to demonstrate uniqueness without sacrificing anonymity.

Outtake’s roadmap suggests Verify will expand beyond email to other forms of workplace communication and, eventually, trusted AI agent authentication. For now, the launch demonstrates how proof-of-human credentials and cryptographic device binding can reinforce one of the most widely exploited points of enterprise vulnerability.

To hear all of Ajay Patel’s insights, listen to his full interview on the ID Talk podcast through the media player below, or wherever you get your podcasts:

–

By the ID Tech Editorial Team