Why KYC and AML Exist
If you’ve ever used a cryptocurrency exchange or bought an NFT, it’s likely that you will have had to perform a know-your-customer (KYC) check to verify your identity. KYC checks are a key part of the global financial system’s infrastructure and enable cryptocurrency businesses to remain compliant with anti-money laundering (AML) regulations. These requirements are crucial in preventing crypto from being used for crimes such as human trafficking, money laundering, and terrorist financing.
However, many cryptocurrency advocates believe that centralized entities having oversight of crypto transactions goes against the founding principles of the space. Despite this, KYC and AML policies are not going away any time soon, and cryptocurrency exchanges are no exception.
Understanding KYC and AML
Know-your-customer (KYC) procedures aim to prevent fraudulent account creation and use by confirming a customer’s identity. It involves multiple steps to understand the nature of customers’ activities, verify the legitimacy of their funds, and assess associated money laundering risks.
KYC policies were first introduced in the United States in the 1990s to combat money laundering. They can range from basic information like name and email address to more detailed requirements such as address and photo identification. The goal is to protect consumers from identity theft, money laundering, and fraud.
Anti-money laundering (AML) policies have been around since the Bank Secrecy Act of 1970. These policies deter criminals from using banks or exchanges for money or cryptocurrency laundering. They require businesses to keep records and file reports that help identify and prosecute money laundering by criminal organizations, terrorists, and tax evaders.
Did you know?
Know-your-customer policies in the United States became mandatory under the USA Patriot Act of 2001. By October 2002, the Secretary of the Treasury finalized regulations making KYC compulsory for all U.S. banks.
KYC and Cryptocurrency
Cryptocurrency exchanges like Coinbase, Binance.US, Gemini, and Kraken, although not fully regulated yet, use identity verification to comply with KYC regulations. These exchanges require customers to verify their identity by providing basic information like name, email address, and date of birth. To access full functionality, customers must provide additional information such as government-issued identification and a face scan.
While KYC and AML aim to protect consumers and the financial system, privacy and crypto advocates see these policies as an invasion of privacy that can attract cybercriminals and identity thieves. There are also concerns when bankrupt crypto companies’ documents become public, potentially revealing users’ identities and transactions.
KYC and Web3
The threat of doxxing is a genuine concern for many individuals who value their privacy. Some propose a newer version of KYC built around reputation and limited identity verification processes that align with Web3 principles.
Companies like Civic offer online identity solutions for Web3, including uniqueness verification through Civic Pass and managing online identity, NFTs, wallet addresses, and reputation on the blockchain through Civic.me. Other projects such as Polygon ID, Astra Protocol, and Parallel Markets aim to provide seamless customer identification and compliance processes in the Web3 space.
KYC’s Future in Crypto
KYC remains a contentious subject in an industry built on privacy and permissionless transactions. However, as governments show increasing interest in crypto and Web3 activities, and the legacy financial system integrates further with the crypto space, KYC is here to stay. Developers can strive to make the process as painless as possible.
Hot Take: The Future of KYC in Crypto
KYC and AML policies have become integral to the global financial system and are unlikely to disappear anytime soon. While they may contradict some of the founding principles of the cryptocurrency space, their implementation is crucial for preventing financial crimes. However, privacy concerns and the risk of doxxing remain valid points of contention for many individuals. As the crypto industry evolves, there is a need for innovative approaches that balance regulatory requirements with privacy and security. Projects like Civic and others are exploring Web3-friendly versions of KYC that prioritize reputation and limited identity verification processes. Ultimately, finding a middle ground between compliance and privacy will be essential for the future of KYC in crypto.