1. Home
  2. KYC

KYC

AI deepfakes are getting better at spoofing KYC verification: Binance exec

The technology is getting so advanced, deepfakes may soon become undetectable by a human verifier, said Jimmy Su, Binance's Chief Security Officer.

Deepfake technology used by crypto fraudsters to bypass know-your-customer (KYC) verification on crypto exchanges such as Binance is only going to get more advanced, Binance's chief security officer warns.

Deepfakes are made using artificial intelligence tools that use machine learning to create convincing audio, images or videos featuring a person’s likeness. While there are legitimate use cases for the technology, it can also be used for scams and hoaxes.

Speaking to Cointelegraph, Binance chief security officer Jimmy Su said there has been a rise in fraudsters using the tech to try and get past the exchange’s customer verification processes.

“The hacker will look for a normal picture of the victim online somewhere. Based on that, using deep fake tools, they’re able to produce videos to do the bypass.”

Su said the tools have become so advanced that they can even correctly respond to audio instructions designed to check whether the applicant is a human and can do so in real-time.

“Some of the verification requires the user, for example, to blink their left eye or look to the left or to the right, look up or look down. The deep fakes are advanced enough today that they can actually execute those commands,” he explained.

However, Su believes the faked videos are not at the level yet where they can fool a human operator.

“When we look at those videos, there are certain parts of it we can detect with the human eye,” for example, when the user is required to turn their head to the side,” said Su.

“AI will overcome [them] over time. So it's not something that we can always rely on.”

In August 2022, Binance’s chief communications officer Patrick Hillmann warned that a “sophisticated hacking team” was using his previous news interviews and TV appearances to create a “deepfake” version of him.

The deepfake version of Hillmann was then deployed to conduct Zoom meetings with various crypto project teams promising an opportunity to list their assets on Binance — for a price, of course.

“That's a very difficult problem to solve,” said Su, when asked about how to combat such attacks.

“Even if we can control our own videos, there are videos out there that are not owned by us. So one thing, again, is user education.”

Related: Binance off the hook from $8M Tinder ‘pig butchering’ lawsuit

Binance is planning to release a blog post series aimed at educating users about risk management.

In an early version of the blog post featuring a section on cybersecurity, Binance said that it uses AI and machine learning algorithms for its own purposes, including detecting unusual login patterns and transaction patterns and other "abnormal activity on the platform."

AI Eye: ‘Biggest ever’ leap in AI, cool new tools, AIs are the real DAOs

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

Federal Reserve’s FedNow will integrate with Metal Blockchain

The integration will allow users to instantly convert cash to stablecoin for use in DeFi protocols.

The Federal Reserve’s forthcoming instant payment service FedNow will be integrated with Metal Blockchain, according to a May 11 announcement from the Metal Blockchain team. The announcement said that the integration will allow Metal users to instantly convert funds to stablecoin and back again using FedNow’s “send/receive” function.

Metal Blockchain’s listing in the FedNow Service Provider Showcase. Source: FedNow

FedNow is an instant payment system developed by the United States Federal Reserve. It allows for round-the-clock, near-instant payments between banks. Currently, U.S. residents can only make instant payments domestically through third-party apps such as PayPal and Venmo or crypto wallets. The Federal Reserve has stated that the new service will launch in July.

Metal Blockchain is a crypto network developed by Metallicus, based on a fork of Avalanche's code. It was created to offer compliance-friendly options for decentralized finance (DeFi) developers. In the May 11 announcement, Metal developers claimed that the network is “built on the foundation of BSA [Bank Secrecy Act] Compliance,” implying that it has identity verification and anti-money laundering features built in.

According to its documents, the network features a subnet called “X-Chain” that allows developers to enact rules for transferring assets. For example, a token can be issued with the rule that it “can only be sent to US citizens” or “can’t be traded until tomorrow.”

Cointelegraph couldn't verify what criteria FedNow uses for integration with the payment system. However, most blockchain networks use pseudonymous addresses as user identities, which means that they could be seen as not complying with the Bank Secrecy Act. This may explain why Metal is one of the first blockchain networks to be listed as a FedNow service provider.

In a conversation with Cointelegraph, Metallicus co-founder and CEO Marshall Hayner said Metal's integration with FedNow could enable the formation of interconnected “bank chains,” creating a larger blockchain ecosystem that is secure and does not rely on oracles. This will allow banks to communicate with each other to process payments and handle settlements while staying connected to the FedNow system. 

He stated that the integration will also allow banks to prepare for an eventual central bank digital currency (CBDC), as well as for “bank issued stablecoins that can interact within a basket of stablecoin currencies.”

Related: US wholesale CBDC has ‘promise,’ Fed governor says

FedNow has been criticized by some U.S. politicians, including Florida Governor Ron DeSantis and U.S. Presidential candidate Robert Kennedy, Jr., who have alleged that it is a first step towards a blockchain-based CBDC that they say will infringe privacy. The Federal Reserve has denied that FedNow is related to a CBDC.

When asked his opinion of the controversy, Hayner dismissed these criticisms of CBDCs.

“I believe this controversy is unfounded [...] As the same rigor that is applied to the banking system will be applied to CBDC,” he said.

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

New White House standards strategy could have implications for crypto industry KYC

The Biden administration has released a strategy document focusing on setting standards for “critical and emerging” technologies such as blockchain and digital ID.

The administration of United States President Joe Biden released a national standards strategy for critical and emerging technologies on May 4. The strategy stated that the U.S. would prioritize standards development in eight areas. Among the prioritized areas are “digital identity infrastructure and distributed ledger technologies, which increasingly affect a range of key economic sectors.” 

“Distributed ledger” is a synonym for blockchain. Digital identity is “the unique representation of a subject engaged in an online transaction,” according to a National Institute of Standards and Technology (NIST) document now under review. Digital identity is “unique in the context of a digital service, but does not necessarily need to uniquely identify the subject in all contexts,” the document added.

NIST is the federal agency that coordinates government standards activity.

One obvious use of digital identity in economic sectors is Know Your Customer (KYC) and Anti-Money Laundering (AML), where blockchain solutions are being actively developed as regulators and enforcement agencies demand greater AML compliance in the U.S. and around the world in the crypto industry.

Related: Europe’s digital ID wallet — Easy for users or a data privacy nightmare?

Innovations such as zero-knowledge KYC verification, based on the blockchain’s consensus mechanism, have been proposed to carry AML verification, credit scoring and similar information. Passporting techniques using soulbound nonfungible tokens (NFTs) have been deployed to make off-chain identity accessible.

Privacy issues are deeply intertwined with digital identity and are areas where the government and crypto industry have yet to reach accord.

The goal of the strategy is to protect U.S. consumers and the country’s role in developing international standards, the White House said. The strategy will bolster investment in “pre-standardization research” in the key areas identified, encourage private-sector and academic participation in that research, invest in training, and ensure integrity and inclusivity.

The Treasury Department’s Office of Financial Research leads the government’s work on digital identity, digital assets and distributed ledger technology in federal and international agencies.

Magazine: Unstablecoins: Depegging, bank runs and other risks loom

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

Neobank introduces soulbound NFTs for wallet holders’ KYC information

The small New York-based neobank is seeking to improve crypto users’ experience by melding Web3 features and digital banking.

The neobank Cogni has announced that it is rolling out soulbound nonfungible tokens containing Know Your Customer (KYC) information to holders of its crypto wallet. The Polygon-based NFT will transfer customers’ “Web2” KYC verification done by the bank at account opening into a Web3 environment.

Cogni, which has United States Federal Deposit Insurance Corporation coverage through a traditional New York bank, introduced its noncustodial multichain crypto wallet in January. Users can send, receive and hold cryptocurrencies and NFTs in the wallet. Users can optionally mint the nontransferable soulbound NFT, which decentralized apps (DApps) can then decrypt with the owner’s permission.

The bank’s intention is to create an improved user experience. Cogni founder and CEO Archie Ravishankar told Cointelegraph:

“The reason why the crypto-curious have not really been able to jump on the decentralization bandwagon is, one, obviously, the user experience. The second is trust in the ecosystem.”

“Everybody knows how to use digital banking,” however, Ravishankar added. The crypto wallet is available “in the course of the normal banking experience.”

Related: Vitalik Buterin suggests making NFTs ‘soulbound’ like World of Warcraft items

The “bank-level” KYC information contained on the NFT satisfies KYC requirements in the United States and will be available to partnering DApps with no further action necessary. Cogni foresees creating a marketplace of DApps that can be connected to, including KYC verification, with only a few clicks.

The use of non-custodial wallets has been rising after the bankruptcies of major crypto firms during the crypto winter trapped customers’ money in their custodial wallets. The Cogni soulbound NFT will initially be available to select users and is expected to be open to the public in the summer.

Magazine: Best and worst countries for crypto taxes — Plus crypto tax tips

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

Bybit to introduce mandatory KYC requirements starting May 8

Users without Know Your Customer verification had a daily withdrawal limit of 20,000 USDT on Bybit prior to the announcement.

Starting May 8, Know Your Customer (KYC) identity verification will be mandatory for all products and services offered by cryptocurrency exchange Bybit.

According to an Apr. 24 update, Bybit users who have not completed KYC by May 8 can only "close existing open positions or orders, return loans, or withdraw. Any new trading activities will be restricted." Before the update, non-KYC Bybit users had a daily withdrawal limit of 20,000 Tether (USDT) and a monthly withdrawal limit of 100,000 USDT. 

Bybit's withdrawal limits prior to the announcement 

Users who completed level one KYC on Bybit could have a withdrawal limit between 1 million USDT and 12 million USDT, depending on their level of VIP status. As written by Bybit:

"Bybit ensures that your personal information will be encrypted and protected for privacy and security, and will be used for the sole purpose of verifying your identity to better serve you. It is neither shared nor repurposed for any marketing."

The exchange says that the new KYC measures will take anywhere from 15 minutes to 48 hours to be implemented. In supporting the decision, Bybit outlined the need for security and compliance, prevention of illicit activities, and providing enhanced services and convenience in case of lost credentials.

Bybit was founded by Chinese entrepreneur Ben Zhou in 2018 and is currently headquartered in Dubai. Earlier this month, the company was flagged by Japan's Financial Services Agency for allegedly conducting business inside the country without proper registraton. Last month, the exchange introduced a Mastercard-powered debit card allowing users to pay in crypto. The move came just days after Bybit halted U.S. dollar transfers after the collapse of Silvergate Bank. 

Magazine: Can you trust crypto exchanges after the collapse of FTX?

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

T. Rowe Price, WisdomTree join Avalanche subnet for forex testing

If initial tests are successful, the firms will expand their activities into tokenized credit issuance and equities.

Financial market firms T. Rowe Price Associates, WisdomTree, Wellington Management, and Cumberland have joined an Avalanche (AVAX) subnet to test the idea of blockchain-based foreign exchange, according to an announcement from the Avalanche team. The new subnet is called “Spruce,” and is part of Avalanche’s Evergreen Subnet ecosystem.

According to the announcement, institutions will initially use “valueless tokens” on Spruce to ensure they can conduct foreign exchange, or forex, transactions without losing capital. Interest-rate swaps will also be tested early on. Over the long run, successful tests will allow these firms to experiment with further attempts at blockchain settlement, including “the exploration of tokenized equity and credit issuance, trading, and fund management.”

The announcement said that Spruce offers compliance features to help keep institutions within the parameters of the law. Firms that want to use it must first pass Know Your Customer (KYC) verifications, and once they complete this process, they receive non-transferable tokens, or NTTs, identifying them on the network. Their wallet addresses are also whitelisted “at the chain-level” after verification.

Will Peck, head of digital assets at WisdomTree, said that he believes Spruce will be an important step in bringing greater efficiency to traditional financial transactions:

We believe tokenization and blockchain will play an important role in financial services going forward. Avalanche Spruce provides an opportunity to further explore the potential efficiencies and benefits of on-chain trading and settlement with other financial institutions. We are looking forward to experimenting in this EVM-based testing environment.

On April 6, Avalanche announced the launch of the “Evergreen” subnet protocol, which allows institutions to create customized blockchains with compliance features. At the time, a representative from Ava Labs said these subnets were needed because previous solutions, such as Corda and Hyperledger, were not interoperable enough for the needs of large institutions.

Related: Deutsche Boerse, Swisscom Settle Securities with Corda and Hyperledger

Spruce is one of two Avalanche Evergreen subnets launched since the protocol was released and listed on the Avalanche website. Intain, an Evergreen subnet focused on structured finance, is the other.

A January joint study from Uniswap and Circle argued that the cost of forex could be reduced by as much as 80% by putting transactions on a blockchain network. Experts such as Ralf Kubli of the Casper Foundation have argued that tokenization may help to prevent a future financial crisis.

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

Jane Street, Tower Research and Radix are Binance’s ‘VIP’ clients in CFTC suit: Report

The firms were cited anonymously in the CFTC’s complaint describing Binance’s alleged facilitation of U.S. clients.

Trading firms Jane Street Group, Tower Research Capital and Radix Trading have been reportedly identified as Binance’s three “VIP” clients that were anonymously cited in the recent lawsuit filed against Binance by the United States commodities regulator.

According to an April 5 Bloomberg report citing “people familiar with the matter,” Radix Trading is “Trading Firm A” as described in the Commodities Futures Trading Commission’s (CFTC) suit, while Jane Street was “Trading Firm B” and Tower Research was “Trading Firm C.”

The firms on the CFTC’s list were examples of U.S. clients allegedly able to access Binance.

The Wall Street Journal (WSJ) first reported on March 28 that Radix Trading was “Trading Firm A.”

Radix co-founder Benjamin Blander told the WSJ in a March 30 report that he believed the firm acted legally even when trading with Binance’s offshore entity.

The claimed “VIP” treatment from Binance included lower transaction fees and faster trading services, the CFTC said in the filing. The firms provided Binance with liquidity on the exchange, and Binance gained the corresponding trading fee revenues.

It was part of a strategy that “actively facilitated violations of U.S. law” by helping U.S. trading firms evade Know Your Customer compliance standards, among other things, the CFTC alleged.

Binance allegedly enabled Radix to sidestep compliance controls by providing them information on accessing Binance.com through a virtual private network to obscure its IP address.

Related: Dubai regulator demands Binance provide info on ownership, governance: Report

The CFTC claimed the trading violations to have come about as Binance prioritized “commercial success over compliance with U.S. law.”

However, Binance CEO Changpeng “CZ” Zhao vehemently denied the claims of compliance and market manipulation violations in a follow-up post on March 28.

Magazine: US enforcement agencies are turning up the heat on crypto-related crime

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

‘Over-Collateralization Can Help Mitigate the Risk of Stablecoin Depegging’ — Pendulum CTO

‘Over-Collateralization Can Help Mitigate the Risk of Stablecoin Depegging’ — Pendulum CTODespite being touted as a game-changing innovation, the decentralized finance (defi) ecosystem is still not connected to fiat rails largely because of regulatory and compliance issues, Torsten Stuber, the CTO at Pendulum says. According to Stuber, the defi ecosystem will succeed in getting more traditional financial institutions on board once “a substantial amount of liquidity […]

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe

Masa announces soulbound ID tokens for Coinbase’s Base Network

The token protocol can be used for a wide variety of applications, including membership badges, loyalty programs, decentralized captcha bots, and credit underwriting.

Masa Finance’s soulbound tokens will soon be available on Coinbase’s Base network, according to an April 4 announcement from Masa Finance. The new tokens will allow users to link identifying and reputational characteristics to their wallet addresses, making credit underwriting possible on the blockchain, the company said.

Masa had previously released its Soulbound Token protocol for Ethereum and Celer.

In its announcement, Masa stated that the protocol can be used for a wide variety of applications, including human-readable domain names, membership badges, loyalty programs, achievement badges, decentralized captcha bots, and more.

It will release a Base SBT Developer Toolkit within the coming weeks that “will support the seamless deployment and interaction with SBTs on Base,” which will include a quickstart guide, Masa command line interface, software development kit, REACT developer tools, and examples of how to build applications using Masa soulbound tokens.

Related: Coinbase wants devs to build inflation-pegged ‘flatcoins’ for ‘Base’ network

Coinbase is the largest centralized crypto exchange in North America. It launched its Base Network testnet on Feb. 23, planning to implement it as an optimistic rollup layer 2 for Ethereum. On March 23, Coinbase issued a Request for Builders asking developers to create several protocol types for Base, including an on-chain reputation system.

In response to this request, Masa began developing a Base version of its soulbound protocol, the company said in its announcement.

The announcement of Base Network’s creation has contributed to bullish sentiment within the Ethereum community, with some users expressing hope that it will lead to greater onboarding of Coinbase users to Ethereum. In an interview with Bloomberg Radio, Coinbase CEO Brian Armstrong claimed that “centralized players” on Base will need to implement some form of identity verification for users.

Top Ethereum Challenger Could Skyrocket by Over 2x, According to Crypto Analyst Michaël van de Poppe