SEC’s Peirce Proposes Zero-Knowledge Proofs For Crypto KYC Without Storing IDs

SEC Commissioner Hester Peirce has proposed a new customer identification model that would leverage verifiable credentials and zero-knowledge proofs to confirm an individual's age, jurisdiction, and sanctions status without requiring platforms to store full identity documents. The proposal centers on three verification attributes: age, jurisdiction, and sanctions status. Under this framework, users would present cryptographic proof that they meet specific requirements rather than submitting passports, driver's licenses, or other sensitive documents directly to digital asset platforms.

Zero-knowledge proofs allow one party to demonstrate to another that a statement is true without revealing the underlying information. A user could prove they are over a certain age, reside in a permitted jurisdiction, or are not on a sanctions list without disclosing their exact birthdate, home address, or other identifying details. A trusted issuer, such as a government agency or regulated financial institution, would digitally sign a set of claims about an individual. The user then holds these credentials in a digital wallet and can generate zero-knowledge proofs derived from them when interacting with a platform.

Current regulations typically require financial institutions and registered platforms to collect and retain identifying information about customers, often including copies of documents. A zero-knowledge proof system would represent a departure from that data-centric approach, shifting the focus to cryptographic verification of specific attributes. For digital asset platforms, adoption could reduce the compliance burden associated with storing sensitive personal information, but it would also require technical infrastructure and legal clarity that does not yet exist.

The crypto industry has responded with interest to Peirce's suggestion, viewing it as a constructive step toward reconciling regulatory compliance with the privacy-preserving ethos of blockchain technology. Compliance professionals, however, have raised practical questions about implementation, including how sanctions-list screening would function when platforms cannot retain the data needed to demonstrate their screening process to auditors.