1. Home
  2. KYC

KYC

Web3 Security Firm Certik Raises $88 Million in Series B3 Financing Round Led by Tiger Global and Others

Web3 Security Firm Certik Raises  Million in Series B3 Financing Round Led by Tiger Global and OthersCertik, a Web3 and blockchain auditing and security firm, has raised $88 million in its recent B3 funding round. The round, which was led by Tiger Global and included Goldman Sachs as an investor in the firm, gives the company a valuation of $2 billion. This doubles the valuation that Certik reached via its last […]

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

Unhosted is unwelcome: EU’s attack on noncustodial wallets is part of a larger trend

Regulators on both sides of the Atlantic seem to be nervous about people transacting with their wallets.

Last week, the European Parliament’s Committee on Economic and Monetary Affairs (ECON) and the Committee on Civil Liberties, Justice and Home Affairs (LIBE) voted in favor of a regulatory update that could compromise the exchange platforms’ ability to deal with noncustodial crypto wallets. Should the regulatory project make it to the legislation phase in the upcoming months, it would place severe disclosure requirements on transactions between noncustodial wallets and crypto exchanges in the European Union — a process whose signs are visible in other parts of the globe as well.

What happened

On Thursday, March 31, ECON and LIBE members voted on the Anti-Money Laundering (AML) regulatory package, which seeks to revise the current Transfer of Funds Regulation (TFR).

The revised version of the TFR brings several legal threats to “unhosted,” or self-custodied, wallets. It would require crypto service providers to “verify the accuracy of [the] information concerning the originator or beneficiary behind the unhosted wallet” for every transaction made between a service provider (typically, a crypto exchange) and an unhosted wallet.

It can be difficult, if not impossible, for crypto service providers to verify each “unhosted” counterpart. Hence, as crypto advocate Patrick Hansen from blockchain firm Unstoppable DeFi warned, to stay compliant and not compromise their legal position in the European market, some companies might want to block transactions with self-custodied wallets altogether if they face such surveillance and disclosure requirements. Smaller companies might find the potential costs of compliance too high and leave the market to established players, which would lead to further market centralization.

The legislation would also oblige crypto companies to inform “competent AML authorities” ‘of any transfer worth 1,000 euros (about $1,010) or more made to or from an “unhosted” wallet, a surveillance threshold that is even lower than that of fiat banking operations.

The next step for the legislation is the announcement at the plenary session of the EU Parliament, which, according to Hansen, could take place sometime in April. Should it remain unchallenged there, the legislation will make its way to the trialogue negotiations between the European Parliament, the European Commission and the Council of Europe. These negotiations could take months, but their conclusion will mark the draft becoming law. After that, the crypto industry would have from nine to 18 months to come in full compliance with the legislation.

A part of a larger trend

With its increased activity on the crypto regulation front, the European Union isn’t alone in its suspicion of noncustodial wallets. Apart from the local initiatives to impose tighter scrutiny on every crypto transaction, for example, in the Netherlands and Switzerland, U.S. regulators have set their sights on noncustodial wallets in recent years.

In 2020, the U.S. Financial Crimes Enforcement Network (FinCEN) proposed a rule that would synchronize the recording and record-keeping requirements for digital assets to those of fiat transfer funds. In the proposed framework, any transactions to or from “unhosted” wallets exceeding $10,000 would require banks and money service businesses to verify the identity of the customer (including name and physical address) and to file this information with FinCEN.

Following this, in 2021, the international Financial Action Task Force (FATF) drafted guidance with recommendations for virtual asset providers (VASPs) to classify the transfers to and from “unhosted” wallets as higher-risk transactions, with respective scrutiny and limitations to be applied. The new FATF guidance is also aimed at extending the scope of the Travel Rule to VASPs if a virtual asset transfer involves a self-custodied wallet.

Both proposals faced harsh criticism from the crypto industry stakeholders and were eventually delayed. In January 2022, however, the Department of the Treasury reintroduced the proposal to tighten the grip over noncustodial wallets in its new regulatory plan.

To resist or to adapt?

“Seven years ago, I forecasted that these regulations were coming, it was just a matter of when and under what conditions,” Justin Newton, CEO of compliance solutions provider Netki, commented to Cointelegraph. The firm provides KYC/AML technology and develops remote identity verification solutions for blockchain businesses. Newton pointed out that both the FATF guidance and the legislation in Singapore emphasize both-ends transaction verification.

U.S. President Joe Biden’s executive order on crypto highlights the consolidatory dynamic in crypto regulation, which will likely bring FinCEN’s unfinished business back into the spotlight at some point. “Sooner rather than later,” Newton added. He further commented:

“The Biden Executive order specifically spoke about bringing U.S. regulations in line with global standards, and this EU proposal is in line with FATF guidance. The EU vote should trigger U.S. companies to start embracing KYC compliance to get ahead of impending regulations in the states.”

Considering this, Newton believes that the regulators won’t leave the industry any room to ignore their demands. It might be more productive to seek a compromise on the matter, especially given that the problem has its technological solutions. The main threat to privacy isn’t a counterparty knowing who you are, but the fact that on-chain transaction transparency allows both the institutional third parties and curious individuals to track and de-anonymize your activity:

“Fortunately, newer technologies such as Lightning see this level of on-chain transparency as a bug rather than a feature, and we can hope for better privacy for our crypto transactions than is available on most blockchains today.”

What’s next?

While the new rules around “unhosted” wallets will require crypto services providers to adapt, they might be less of a threat to the industry than some stakeholders currently believe. By integrating existing off-the-shelf compliance solutions that equally value privacy, crypto can relatively seamlessly embrace compliance while preserving financial freedoms. Newton said:

“These new rules highlight the need to select compliance solutions that have the vision to see these new rules coming and have built their platforms to be prepared. Today, that means including noncustodial wallets in your Travel Rule solution. Tomorrow, it will be privacy coins and layer-2 networks such as Lightning. The taxman is coming as well, so any Compliance Communications Protocol should be prepared to support those new rules.”

But behind any optimism, problems that can’t be resolved in a win-win fashion remain. In addition to small market players who may not necessarily be in a position to adopt high-end compliance solutions, the tightening scrutiny could undermine global financial inclusion. After all, what regulators call “unhosted” wallets is an essential tool for the underbanked and the financially underserved globally.

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

EU Parliament can outlaw transacting with ‘unhosted’ wallets, crypto advocate warns

The proposed legislation would require exchanges to verify personal data behind any transaction.

Less than a week after a potential ban on Proof-of-Work (PoW) digital assets was dropped from the EU’s prospective MiCA framework, a new threat to the crypto industry could be emerging in the European Union. This time, it is non-custodial, or unhosted, wallets that are in regulators’ crosshairs.

On Thursday, March 31, the European Parliament Committee on Economic and Monetary Affairs will vote on an anti-money laundering (AML) regulatory package that seeks to revise the current Transfer of Funds Regulation (TFR) in a way that extends the requirement of financial institutions to attach information on the transacting parties to crypto assets. The rapporteurs of the regulation are Ernest Urtasun from the Greens and Assita Kano from the Conservatives and Reformists group.

As crypto advocate Patrick Hansen from blockchain firm Unstoppable DeFi warned, the latest draft of the regulation would require crypto service providers not only to collect personal data related to transfers made to and from unhosted wallets (as they are already obliged to do), but also to “verify the accuracy of information with respect to the originator or beneficiary behind the unhosted wallet.”

The obvious problem with this language is that in many cases it can be difficult, if not impossible, for crypto service providers to verify an “unhosted” counterpart. Thus, in order to stay compliant and safeguard their place in the EU market, these companies would be forced to cut off transactions with unhosted wallets, Hansen fears.

Even if legislators put some guidelines for verification procedures in place, the potential operational costs of compliance would likely scare off smaller players and lead to further market concentration.

The draft also includes the obligation to inform the “competent AML authorities'' of any transfer worth 1,000 EUR or more to/from an unhosted wallet. Moreover, in one year after the bill’s enactment, the EU Commission would be required to assess whether any “additional specific measures to mitigate the risks” from such transactions are needed.

It’s not quite clear what additional measures could be implied, but, as Hansen warned, this could mean anything down to the outright ban on non-custodial wallets.

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

Privacy coins are surging. Will regulatory pressure stall their stellar run?

Many privacy coin developers are convinced that all the necessary mechanisms to regulate AECs are already in place.

Recent weeks saw a massive surge of the so-called privacy coins’ prices — namely Monero (XMR), Dash (DASH), Zcash (ZEC) and Haven Protocol (XHV). As many other cryptocurrencies and the industry at large faced immense regulatory pressure amid the war in Ukraine, one narrative that began taking hold in the crypto space was the potential of such privacy-enhancing assets to provide investors a greater level of financial anonymity. But, can privacy coins deliver on Bitcoin’s (BTC) original promise? 

A good month for privacy-focused assets

Over the past month, Monero has almost doubled its tally. With some minor oscillations, it rose from $134 on Feb. 24 to over $200 on March 26. ZEC showed even more impressive dynamics that hiked from $88 to $202 over the same period. DASH also pulled off a rally, if a bit more modest, from $83 to $128. One of the biggest winners appeared to be XHV, which has almost tripled its price from $1.60 to $4.20.

Two main macro-level factors could underpin this sudden rise of privacy coins. The first one is the regulatory pressure building up around more “mainstream” cryptocurrencies due to the war in Ukraine and the resulting suspicion — as unsound as it is — that Russian elites can use crypto to circumvent the financial sanctions imposed on them. Another one is the executive order by United States President Joe Biden, which, in fact, doesn’t bring any outright harm to the industry with its roadmap or reports that should eventually lead to a clear regulatory framework for digital assets in the U.S.

Speaking to Cointelegraph, Justin Ehrenhofer from the Monero community suggested that the recent price surge has come from more family funds and individuals holding Monero as a hedge and was spurred by recent market and political turmoil. A member of the Haven Protocol community, Ahawk, tied XHV’s price spike to an upcoming integration on THORChain, which he called one of the most cutting-edge decentralized exchanges (DEXs) in all of crypto. Jack Gavigan, executive director of the Zcash Foundation, said that the surge of privacy coins’ prices could be the result of Bitcoin price’s strong dynamics.

Privacy without compromises

At the outset of the cryptocurrency movement, anonymity was one of the core promises of Bitcoin and crypto at large. But, alongside industry maturing and gradually merging with the traditional financial markets, digital currencies have faced a demand from both institutional investors and regulatory bodies everywhere to comply with the Know Your Customer (KYC) and Anti-Money Laundering (AML) standards. This strips users of anonymity, at least at the point of withdrawal/exchange operations on compliant platforms.

As a series of high-profile enforcement actions in the U.S. demonstrated, blockchain traceability also doesn’t help those who wish to hide their financial operations.

Privacy coins came about as a reaction to these compromises. “Bitcoin has never been private. Ether has never been private. Tether has never been private,” Ahawk noted to Cointelegraph, explaining crypto developers’ persistent drive to create “truly private,” fungible cryptocurrencies. Given the tendencies toward corporate and government overreach, it’s no surprise that such currencies have enjoyed heightened demand in recent years. Ahawk added:

“Why do you need a password for your bank account? For the same reason crypto users increasingly need privacy options: You don’t want anyone to be able to see your entire financial history with the click of a few buttons. Just because you want your money and financial decisions to be private doesn’t mean you’re doing anything wrong.”

Ehrenhofer said that without privacy, each address and output have unique histories associated with them, losing digital money’s key feature: fungibility. He commented:

“This opens the door to mass surveillance and the assignment of proprietary risk scores to everyone’s money, which in turn makes transparent assets nonfungible in practice.”

Gavigan, who himself wrote the Regulatory & Compliance Brief for Zcash, doesn’t see any major difference between privacy coins and traditional bank accounts in terms of KYC/AML compliance:

“While the bank may not be able to see where you got the cash from or what you spend it on after you withdraw it, they still know who you are, and they can assess whether your deposits/withdrawals are normal for the type of customer you are.”

Will regulators push back?

This appetite for anonymity, however, doesn’t find many supporters among regulators and law enforcement. South Korea was the first country to outlaw anonymity-enhanced currencies (AEC) straight away in November 2020. A month later, the U.S. Financial Crimes Enforcement Network (FinCEN) mentioned that “several types of AEC are increasing in popularity and employ various technologies that inhibit investigators’ ability both to identify transaction activity using blockchain data.” Someexchange platforms such as BitBay and Bittrex have been delisting privacy coins in the past several years.

Despite that, it’s not only investors but developers, too, who see the bright future for AECs in the years to come. Ehrenhofer believes there’s nothing impossible about combining enhanced privacy for users with compliance with regulators. It’s not accidental that privacy coin developers mention cash as AECs’ closest equivalent. As KYC/AML requirements become more common in the cryptocurrency space, Monero’s importance will only increase, Ehrenhofer assured:

“No one is reasonably asking Monero or Bitcoin to ‘comply’ with AML regulations — that makes no sense. Instead, the push is for regulated entities such as exchanges to follow these AML regulations. They unquestionably can already do this.”

Ahawk also doesn’t see reasons to cater to regulators’ demands on AEC developers. “Any so-called tension is due to the fact that some regulators want to be able to track every transaction you make with your crypto,” he claims, adding that it is a number one mission for developers to provide privacy for its users. “Private cryptocurrencies actually make it easy for you to comply with regulations in their jurisdiction. But, more important is what they ‘don’t do:’ provide a public ledger for anyone in the world to track your every financial transaction, down to the penny.”

Gavigan also observed that in some respects, privacy coins make it easier for their owners to comply. For one, regulated entities can attach the required “Travel Rule” information to a shielded Zcash transaction by using the encrypted memo field, which is not possible with Bitcoin.

What’s next

Privacy protocols should continue what they are already doing, Ahawk opined, which is to create secure protections for everyday users and make sure they can comply with regulations in their respective jurisdictions. He stated that “it’s the job of law enforcement to track down criminals, not cryptocurrency developers.”

The mechanisms for that already exist, Ehrenhofer noted. Regulated exchanges already collect information about user trades, deposits and withdrawals. He added:

“The United States should encourage cooperative, regulated exchanges to list Monero so that investigators can receive more information about suspicious transactions through Suspicious Activity Reports and Currency Transaction Records.”

The question is whether these exchanges would collaborate with both regulators and developers.

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

DEXs and KYC: A match made in hell or a real possibility?

Decentralized exchanges must figure out how to up their Know Your Customer compliance before the regulation wave hits.

In his monthly crypto tech column, Israeli serial entrepreneur Ariel Shapira covers emerging technologies within the crypto, decentralized finance and blockchain space, as well as their roles in shaping the economy of the 21st century.

The White House came out with an executive order on regulating crypto recently. Across the sea, European legislators defeated a legislative push that could have spelled major trouble for proof-of-work networks. These developments should be ringing a bell that most crypto aficionados have long grown used to: Regulation is still very much on the agenda, and even though the blockchain community is now way more welcoming to compliance than it once was, this cannot go without at least a few ruffled feathers.

One of the things that will inevitably come up on the regulators’ target lists is Know Your Customer (KYC) protocols. As far as today’s ecosystem goes, these protocols are pretty much all over the place. Some platforms, usually the more centralized ones, handle KYC more or less the same way a traditional financial institution would, including at least an ID check-up. Others, however, work pretty much on a plug-and-play basis, meaning that as long as you have a crypto wallet, you are in business.

Related: European ‘MiCA’ regulation on digital assets: Where do we stand?

Decentralized exchanges, or DEXs, are pretty much the poster children for the latter approach. When using one, such as PancakeSwap on BNB Smart Chain or WingRiders on Cardano, you interact with the smart contracts powering their liquidity pools. In most cases, anyone can stake their tokens into the pool to earn a share from its accumulated transaction fees, and anyone can tap the pool to swap their tokens without much in terms of KYC. It’s a handy, fast and reliable way to move value between different token ecosystems that also allows liquidity providers to make a profit from enabling the service to keep running.

Compliance demand will be increasing

When delving into the blockchain space, regulators may find this approach a bit too laissez-faire. They may demand more KYC from such protocols, and such demands would probably draw the regular response: How on Earth do you expect an on-chain piece of code to be doing KYC?

At the very base level, this is indeed a tough question. “Code is law,” goes a popular crypto saying, so the capabilities of any decentralized application are inherently limited by its underlying code. Bringing KYC into those capabilities is a difficult challenge, both from technical and ideological perspectives. From the former, it means having to build an all-around digital KYC platform that would be able to handle the task on its own, without human involvement. From the latter, it means a step away from some of the core values and beliefs of the crypto world, which loves and cherishes its anonymity and privacy.

Some companies in the crypto space, such as Everest, are already implementing eKYC through traditional means. The company is also able to pseudonymously confirm the uniqueness and humanness of every user, which is important in our bot-ridden times. In the future, pseudonymity could very much become the rallying cry of KYC for blockchain. A system where a trusted third party can verify the client’s identity for compliance and issue a cryptographically-secured confirmation of the successful check-up that won’t reveal the client’s data itself could become a common ground for crypto purists and regulators. This token would enable exchanges, both centralized and decentralized alike, to verify the identity of the user without knowing anything about them.

Related: Want to weed out ransomware? Regulate crypto exchanges

Importantly, such a solution would also eliminate the need for exchanges to actually store their users’ private data. A centralized database with users’ personal details does not even have to include their banking information or private keys to be valuable for hackers, but if an exchange wants its proper KYC, it would have to create such a database. This creates a vicious cycle that exposes users to a tangible threat while also giving exchanges themselves the extra headache of having to manage and maintain these records.

Decentralized KYC compliance?

Another interesting way to handle the decentralized KYC conundrum is by letting AI take a stab at it. This would likely require a multi-layered solution, where the first model would process a scan of a document and pass on the output to one or more other models to complete the job. While complicated, it is not exactly unimaginable — at least as long as we don’t envision something like that deployed as part of a smart contract. An off-chain implementation, though, could still act as a trusted third-party KYC provider enabling exchanges to function in compliance with all the right rules.

In essence, like many other processes, KYC always follows a protocol. It includes an input — the documents, financial statements, and other information the counterparty may need to go through — and an output, an approval or a rejection. Many processes like this are prone to digitalization as they follow the same logic most computer algorithms do. Sure, it will be challenging to build a system versatile enough to attune itself to different KYC rules in different jurisdictions, but it is very much possible. And it’s not hard to imagine the traditional finance world, where KYC is a major liability, to see value in such a system as well, making for a potential market worth billions.

Related: Implementing the double-edged sword of KYC is a must for crypto exchanges

Improved KYC procedures could also spark a user-interface renaissance, where DEXs become much easier to use for average investors. One of the biggest pain points throughout the cryptosphere, but especially on the decentralized platforms that market themselves more toward crypto aficionados than newbies, is the complexity of use. Until the debut of Kirobo’s undo button, for example, crypto users had no way to even confirm they sent their crypto to the right address. With proper regulatory adherence comes an influx of more mainstream users, and they tend to require smoother mechanisms for buying and selling crypto.

The more innovative DEXs’ developer teams, who build their projects with KYC compliance in mind while still staying true to the values of decentralization, will surely come out on top — so they might as well start innovating now to prepare for the coming change of tides.

This article does not contain investment advice or recommendations. Every investment and trading move involves risk, and readers should conduct their own research when making a decision.

The views, thoughts and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph.

Ariel Shapira is a father, entrepreneur, speaker, cyclist and serves as founder and CEO of Social-Wisdom, a consulting agency working with Israeli startups and helping them to establish connections with international markets.

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

Animoca Brands, Yuga Labs Tease Bored Ape Secret Project ‘Powered by Apecoin’  

Animoca Brands, Yuga Labs Tease Bored Ape Secret Project ‘Powered by Apecoin’  Since the token was launched roughly three days ago, the digital currency apecoin (APE) has been a topical conversation within the cryptocurrency community on forums and social media. So far, just over 82% of the claimable APE has been claimed and 13,672 unique addresses have received APE from the airdrop. Meanwhile, the Bored Ape Yacht […]

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

Yuga Labs faces user backlash for under wraps KYC-restricted project

Since Yuga Labs partnered with Animoca brands, other plans for a blockchain game expected to release in Q2 of 2022 have been revealed.

Yuga Labs, the creator of the Bored Ape Yacht Club, or BAYC, teased a new collaboration with blockchain game publisher Animoca Brands on Twitter on Thursday. The catch is that no details about the project have been revealed yet, and users who signed up for it via a Know Your Customer, or KYC, verification process have expressed their concerns on social media.

BAYC simply tweeted out a link to a website where interested fans can apply in the hope of being approved to participate in whatever "is brewing." To apply, users must connect to an Ethereum wallet, provide a photo of their license, passport or other ID as well as proof of their home address, and take a headshot on the camera of the device on which they sign up.

Both BAYC and Animoca Brands clarified on Twitter that they are not referring to the play-to-earn game featuring Bored Ape NFTs they had announced in December. The only other information offered is that "this has been building over the last seven months," according to BAYC. Animoca Brands will reportedly reveal "the first phase." 

Members of the crypto community are wary about consenting to KYC requirements without knowing exactly what they're signing up for. One user posting under the handle @cr0ssETH tweeted, "Devs, if the IRS has taken you hostage, please blink twice," suggesting the possibility that any personal information could end up in the hands of third parties.

In addition to sensitivity around KYC, a Terms & Conditions document has been criticized for making users consent to an "unrestricted" use to "all or any portion of your User Content."

Another user under the handle @maz_nf warned that crypto will soon turn into a "government regulated corporateverse," recognizing the inevitability of an NFT community to adhere to regulation and legalities to truly go mainstream. 

Related: Harmony launches Bored Ape Yacht Club NFT Passport

These views sparked the debate about whether NFTs should be regulated and if KYC should be integrated into NFT marketplaces. Recently, OpenSea has been subject to phishing attacks and hacks that have left NFT owners very vulnerable. In December 2021, an art gallery owner's Bored Apes collection, worth $2.2 million dollars, was stolen from his hot wallet. 

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom

Binance Launches Bitfinity, a Payments Company Targeting the Web3 Economy

Binance Launches Bitfinity, a Payments Company Targeting the Web3 EconomyLeading cryptocurrency exchange Binance has announced the launch of its own payments processing company, Bitfinity. Bitfinity will act as the default fiat-to-crypto payments ramp for the exchange, as well as for other blockchains. With this launch, Binance also targets the expanding Web3 economy, partnering with Paysafe and Checkout.com. Bitfinity Launches to Help Merchants Accept Crypto […]

Coinbase Explores Blockchain Partnership With Kenya’s Safaricom