AZRAQ, Jordan: At a grocery store checkout in the Jordanian refugee camp of Azraq, Sameera Sabbouh stares wide-eyed into a scanner to pay for her shopping — her iris scan unlocking payment from a digital aid account with the help of block- chain technology.

Many of the nearly 40,000 Syrians who live in the camp recognize the convenience of the cashless, card-free payment method, which verifies recipients’ identity by referencing a UN database, but few said they like it.

“It’s really tiring. It doesn’t take the eye scan in the first try — it is two or three times before it takes the scan,” said Sabbouh, a mother of two from Aleppo who fled the city in 2015. “I would rather have my fingerprint scanned.”

Introduced in 2017, the World Food Programme’s Building Blocks initiative was one of the first to harness blockchain technology in humanitarian aid delivery, and it now reaches more than 1 million refugees in Jordan and Bangladesh.

The system enables the tracking, coordination and delivery of multiple types of assistance, including cash, food, water and medicine, and has saved about $2.5 million in bank fees on millions of transactions, according to the WFP.

But digital rights groups question the use of such new technology among vulnerable groups such as refugees, and the need for them to surrender sensitive biometric data in order to receive vital food aid.

“The refugees are guinea pigs,” said Petra Molnar, a fellow at Harvard University’s Berkman Klein Center for Internet and Society, adding that she was troubled that such “experiments” were being conducted on marginalized groups.

“Imagine what would happen at your local grocery store if all of a sudden iris scanning became a thing; people would be up in arms. But somehow it is OK to do it in a refugee camp,” she said.

Others question whether refugees reliant on aid are in a position to give informed consent.

“The issue of consent has a question mark on it,” said Dima Samaro, an independent human rights researcher based in Tunisia. “Did they give consent because they are content, or because they are being forced?”

Responding to such criticism, Roland Schoenbauer, a spokesperson for UNHCR, the UN refugee agency, said refugees were informed about the objectives of gathering their data when they were asked to give permission.

“UNHCR doesn’t share biometric data with anybody under the sun,” he said in an interview at the Azraq camp, adding that if refugees chose to opt out of the program they would still receive the same level of assistance.

As the number of people fleeing war, poverty, persecution and environmental disaster reaches record levels worldwide, states have turned to a range of digital technologies to monitor the flow of people and control their access to services.

These include smart IDs, GPS monitors and blockchain, the decentralized database technology that underpins cryptocurrency.

But while states and aid agencies say these technologies have increased efficiency and reduced waste, the systems have sometimes exposed vulnerable refugees to surveillance and commercial exploitation of their data, critics say.

“Imagine if this were to fall in the hands of bad faith actors,” said Marwa Fatafta, Middle East and North Africa policy manager at digital rights group Access Now, warning that refugees also had fewer legal protections and safeguards in countries without strong data protection laws.

“Collecting biometric data to identify someone is a very invasive form of identification. It is not necessary, it is not proportionate, and it violates international standards on privacy which UN agencies should subscribe to,” she said.

UNHCR has already faced criticism over its collection of Rohingya refugees’ data at the vast refugee camps where they live in Bangladesh.

Human Rights Watch said in a report last year that the agency had not conducted a full data impact assessment, and had in some cases failed to obtain refugees’ informed consent for their data to be shared with Myanmar, the country they had fled.

Similarly, when the Taliban took over Afghanistan in 2021, there were fears that biometric databases and sensitive data gathered by aid agencies and the government would fall into their hands and used to hunt down activists and dissidents.