Worldcoin (WLD), Grass (GRASS), and Rain (RAIN) are often lumped together as 'data tokens,' but they are three different products with three different privacy models. WLD sells biometric proof-of-personhood, GRASS resells residential internet bandwidth, and RAIN is positioning itself around payments. Each carries distinct regulatory, demand, and risk trade-offs that the marketing tends to hide.
Key takeaways
- WLD, GRASS, and RAIN solve different problems: identity verification, bandwidth resale, and payments respectively, not the same 'data economy' problem.
- The biggest risk for all three is regulatory, not technical, because each touches data protection law in a different way across the EU, US, and Asia.
- Token demand depends on very different sinks: WLD on user growth, GRASS on real bandwidth buyers, and RAIN on payment volume flowing through its rails.
- Retail often buys the 'data is the new oil' narrative as if it were one trade, when in fact the underlying businesses are not directly comparable.
Why these three tokens get compared at all
If you have spent any time in crypto Twitter or YouTube, you have probably seen WLD, GRASS, and RAIN mentioned in the same breath. The thread connecting them is a narrative: 'data is the new oil, and tokens let users capture some of that value.' It is a compelling pitch, and it is also where most of the confusion starts.
The three projects have almost nothing in common at the product level. Worldcoin is building a global identity layer using iris-scanning hardware called the Orb. Grass is a residential bandwidth marketplace that lets people sell unused home internet capacity to AI companies scraping the public web. Rain is a payments and remittance network, and it is the one with the loosest fit to the 'data token' label of the three.
Putting them side by side only makes sense if your real question is: 'I keep hearing about data tokens, which of these, if any, is a real business and what am I actually exposed to if I buy it?' That is the question this article is built around.
The privacy and data-law risk you should read first
Before any talk of upside, here is the part most 'data token' content buries. Each of these three projects handles personal data, and personal data is one of the most heavily regulated categories of asset on the planet. The risk is not theoretical. It has already shaped the industry.
WLD is the most exposed by far. Worldcoin collects iris scans through the Orb device and converts them into a numeric code called an IrisHash. The company says the original image is deleted and only the hash is stored. That claim has not stopped regulators from investigating. In 2024, several jurisdictions including Hong Kong, South Korea, and parts of the European Union opened probes or imposed temporary bans. Spain's data protection authority ordered Worldcoin to stop operations in the country. In late 2024, Tools for Humanity, the main entity behind Worldcoin, said it would limit Orb operations and age verification in some regions. None of this has killed the project, but it has constrained where WLD can actually onboard users.
GRASS is lower-risk on raw personal data, but not zero. Grass sees your IP address and the fact that you are routing traffic. It claims it does not see the content of what you browse, and that data is encrypted. The privacy model is closer to a VPN than to a biometric system. Still, residential IP resale is a category that has drawn fraud and abuse scrutiny in adjacent industries, and a single enforcement action in a major market could change the economics overnight.
RAIN, as a payments product, sits in a different regulatory bucket entirely: money transmission, KYC, AML, and sanctions compliance. The risk is not 'someone gets your iris' but 'you are using a money services business that must be licensed in every jurisdiction it serves.' The failure modes look like frozen bank rails, sudden delistings from partner exchanges, or fine-driven shutdowns. None of those have happened to RAIN at scale yet, partly because the project is younger and smaller than WLD.
What WLD actually does: biometric proof-of-personhood
Worldcoin's pitch is that the internet is full of bots, sybil attackers, and duplicate accounts, and that one important problem is: how do you prove a user is a unique human without revealing who they are? Proof-of-personhood is the term for that solution space.
WLD is the governance and utility token of that system. People get free WLD for signing up at an Orb, and the network uses the IrisHash to issue a World ID credential. Developers can then ask 'is this user a real unique person' without learning anything else about them. That is the product. The token, by design, is mostly a distribution and governance tool rather than a fee token.
For investors, the demand drivers for WLD are: continued Orb rollout in new countries, integration of World ID into third-party apps that need bot resistance, and token unlocks that can also act as supply overhangs. The historical problem is that usage of the identity layer has grown slowly relative to the number of verified humans, and the price has tracked speculation and unlocks more than transaction volume.
What GRASS actually does: a residential bandwidth marketplace
Grass is best understood as a two-sided marketplace. On one side, individuals install a node and sell unused residential bandwidth. On the other side, AI companies and web-scraping firms buy that bandwidth so they can collect public web data without getting blocked by datacenter IP blacklists.
The pitch is that datacenter IPs are heavily rate-limited and banned, while residential IPs blend in. Grass aggregates a pool of home users and routes scraping traffic through them, paying users in GRASS for the data transferred. The token model has a clear sink: sellers earn GRASS, and the network burns a portion of fees, tying demand to actual bandwidth usage.
The risks here are operational and regulatory. On the operational side, residential IP networks have historically been used for ad fraud, ticket scalping, and sneaker bots, and Grass has to police that. On the regulatory side, reselling home bandwidth for third-party scraping can run into computer-misuse laws in some countries, telecom terms of service, and data-protection rules around traffic logs. Grass argues that no user content is exposed, but that argument is still being tested in courtrooms and in telecom policies.
What RAIN actually does: payments positioning
Rain is the hardest of the three to pin to a 'data token' narrative, and that is itself a useful warning. The project started with a card-based crypto spending product and has been iterating toward a broader payments and remittance positioning, including stablecoin-based settlement.
The honest description is: RAIN is a payments company that issues a token, not a data company. If you are evaluating it alongside WLD and GRASS because someone called all three 'data tokens,' that framing is misleading and you should mentally separate them before doing any comparison.
Demand for the RAIN token, if it materializes, will come from real payment volume and any fee-share or staking model the team adopts. The risk is that payments is a brutally competitive category, dominated by both crypto-native players like Stripe- and Circle-adjacent firms and by traditional fintechs that already have licensing, banking partners, and brand trust. A young token has to convert product usage into token demand, and that conversion is rarely automatic.
Business models: data resale vs verification
These projects sit on a spectrum between two very different business models, and conflating them is the most common retail mistake.
WLD sits in the verification bucket. It does not resell your data. It sells the ability for someone else to verify that you are a unique human, and it sells that capability primarily to other developers, not to advertisers. The 'data' in the system is biometric in nature, and the project's legal argument is that the IrisHash is not personal data under most definitions. Critics disagree. Either way, the revenue model is closer to selling identity infrastructure than to selling data itself.
GRASS sits in the resale bucket. It literally takes a resource you have (unused bandwidth) and resells it to a third party. That is data-adjacent because what travels over that bandwidth is data, and the buyer of bandwidth is usually buying access to data sources. The economics are straightforward: more buyers, more demand for nodes, more GRASS earned, more fees burned. The risk is that the data being scraped is the seller's exposure, not the buyer's, and that distinction is not always clear to regulators.
RAIN is neither. It is a transaction-fee business in a market where margins are thin and competitors are well-funded. The 'data' angle is a marketing overlay, not a structural feature.
Token sinks, demand drivers, and what actually moves price
For a token to hold value long term, there has to be a reason for someone to buy it other than the hope that the next person pays more. That reason is usually called a sink: a place where tokens are removed from circulation, or a use case where tokens must be held.
WLD's sink story is the weakest of the three. There is no fee mechanism that requires holding WLD, no required staking to use the network, and no burn tied to verification volume. Demand is mostly indirect: people want WLD because it is the unit of airdrops, governance, and speculation around the growth of the identity network. That makes the price sensitive to unlock schedules and to the cadence of new Orb launches.
GRASS has the cleanest token sink of the three. Sellers earn GRASS, and a portion of network fees is burned. If real demand for residential bandwidth grows, the burn rate grows with it. The risk is that the data on burn and earnings is mostly self-reported by the project, and a future audit could change the picture.
RAIN's sink story depends on which version of the tokenomics the team ships. Payment tokens can either be sink-heavy, where every transaction burns a small amount of fee, or sink-light, where the token is mostly a governance vote. The honest answer for RAIN at the time of writing is that the model is still evolving, and that uncertainty is itself a risk to factor in.
Regulatory risk, by jurisdiction
There is no global 'crypto regulator.' Each of these tokens faces a different legal map, and that map is shifting.
In the European Union, the GDPR and the incoming AI Act put WLD's biometric model under the harshest spotlight. The Spanish data authority's action against Worldcoin is the precedent most often cited. GRASS faces fewer biometric questions but still has to comply with telecom and traffic-data rules. RAIN, if it operates as a payments business, has to deal with MiCA-style licensing and anti-money-laundering rules.
In the United States, the picture is fragmented by state. WLD has so far avoided a federal biometric enforcement, but state-level actions and FTC scrutiny remain possible. GRASS is exposed to state computer-misuse statutes and to ISP terms of service enforcement. RAIN has to navigate state money transmitter licensing, which is a long, expensive process that has tripped up several crypto firms.
In Asia, regulators have been more aggressive on biometric data (Hong Kong, South Korea on WLD) and on payment licensing (Singapore, Japan). Each of these three tokens will live or die in part by which jurisdictions say yes, which say nothing, and which say no.
How to think about WLD, GRASS, and RAIN as a portfolio decision
If you are a retail reader trying to decide whether to allocate to any of these, the most useful framing is to stop treating them as one theme. They are three different bets on three different businesses, and they should be evaluated on their own merits.
For WLD, the bull case rests on proof-of-personhood becoming a default requirement for AI agents, airdrops, and bot-resistant apps. The bear case is regulatory drag in major markets and a slow conversion of verified humans into real network usage. The token is largely a sentiment trade on that narrative.
For GRASS, the bull case is that AI training data collection continues to be a bottleneck and residential IPs remain the path of least resistance. The bear case is regulatory action against bandwidth resale and competition from other node networks offering similar services. The token has the most direct link between real usage and demand of the three.
For RAIN, the bull case is that payments is a winner-take-most market and a young, well-positioned player can take share. The bear case is that the company has to do this without the licensing, banking relationships, and brand trust that incumbents already have. The token's value depends on a product story that is still being written.
None of this is financial advice. It is a way to ask the right questions before you click buy.
Track data tokens with real context, not just hype
WLD, GRASS, RAIN, and the wider 'data token' category move fast and so does the news around them. Headlines about an Orb launch, a bandwidth network upgrade, or a payments license can each swing sentiment in hours, and tracking those signals manually is a losing game. Zippfeed surfaces these headlines with sentiment scoring (bullish, neutral, or bearish) and an importance rating, so you can separate the news that matters from the noise that does not.