KYC Blockchain: Identity Checks for Wallets and Tokenized Money

J.P. Morgan describes the problem on its page on institutional DeFi: open DeFi pools "typically do not enforce KYC of users". Its Kinexys unit built a verifiable credential solution so that participants transact only with authorized, known parties on a public blockchain, without "having to reinvent existing KYC processes". The same page describes a trade in which tokenized Singapore dollar deposits were exchanged for tokenized yen through a liquidity pool.

That trade was part of Project Guardian. On 2 November 2022 the Monetary Authority of Singapore announced the first trades: DBS Bank, J.P. Morgan and SBI Digital Asset Holdings traded against liquidity pools of tokenized government bonds, yen and Singapore dollars. MAS describes an access model built on trust anchors, which it defines as "regulated financial institutions that screen, verify and issue verifiable credentials".

The Chainlink explainer on blockchain KYC describes the usual design. A trusted entity checks the documents off chain. The ledger records a credential or a cryptographic hash, while the personal data stays off chain or on the customer's device. A smart contract compares the credential with the record and checks that the issuer is trusted, and other institutions can rely on the same check instead of repeating it.

Tokenized securities build the check into the token. Under ERC-3643 an identity registry links each investor wallet to an identity contract with signed claims, and the token reads those claims before it allows a transfer. A zero knowledge proof can show that a wallet passed a check without revealing who owns it.

A 2023 systematic review of blockchain e-KYC systems in the journal Computing screened 17,476 papers and kept 19. Most targeted banks and financial institutions, and Ethereum and Hyperledger Fabric were the usual platforms. Only about half of the studies considered privacy and none defined a threat model; the authors write that "privacy and transparency are conflicting objectives".

Data protection law adds its own problem: a public ledger cannot erase an entry, which Chainlink names as the conflict with the GDPR right to be forgotten. The page on blockchain privacy and GDPR covers it. The AML duties themselves do not change on chain: the EU AML package and the travel rule for crypto transfers apply to crypto-asset service providers whatever the KYC technique.

Finance Loop covers identity and AML duties around digital assets on its pages on crypto AML, stablecoin AML and perpetual KYC. Finance Loop events take place in Frankfurt, the seat of the EU anti-money laundering authority AMLA, and bring compliance teams of banks and crypto firms together.

A setup in which a smart contract checks a credential tied to a wallet before it accepts a transaction. A regulated institution performs the identity check off chain and issues the credential.

Not in the common designs. The ledger holds a credential or a hash, and the documents stay with the institution or on the customer's device, out of a record that cannot be erased.

A variant in which the wallet holder proves with a zero knowledge proof that a check was passed, without showing the underlying data to the application.

No. In the model MAS describes, regulated institutions act as trust anchors and issue the credentials, and J.P. Morgan built its solution on existing KYC processes. The chain carries the result of the check.