Definition
On-chain KYC/AML (Know Your Customer / Anti-Money Laundering) refers to identity verification and compliance screening systems that store verified investor credentials on a blockchain, making compliance data accessible to smart contracts in a privacy-preserving format. In traditional financial services, KYC is a centralized, platform-specific process: each financial institution independently verifies the identity of its customers and maintains its own records of that verification. An investor who has been KYC-verified by Platform A must repeat the full KYC process when they open an account at Platform B — even if both platforms use the same verification provider. This duplication is costly for investors (time spent re-submitting documents), expensive for platforms (cost of KYC verification services), and inefficient for the compliance system as a whole.
On-chain KYC solves this duplication problem by making verified identity claims portable across platforms. Instead of storing KYC data in a centralized database controlled by a single platform, on-chain KYC systems store cryptographic attestations of identity claims in wallet-linked smart contracts on a public blockchain. An investor who has been verified by a regulated KYC provider (Jumio, Onfido, Persona) receives an on-chain identity attestation — a signed statement from the KYC provider confirming that the investor has met specific eligibility criteria. This attestation is stored in the investor’s ONCHAINID smart contract (or equivalent), where it can be read by any authorized smart contract on the blockchain. When the investor attempts to purchase or transfer security tokens, the token’s compliance module reads the investor’s ONCHAINID, finds the relevant attestation, and determines whether the investor is eligible — without requiring any additional KYC verification.
Key Facts
- ONCHAINID, the identity system built into the ERC-3643 token standard, stores identity claims as a mapping from claim topics (e.g., “is accredited investor,” “passed KYC,” “is not OFAC-sanctioned”) to signed attestations issued by trusted identity issuers registered on a Claim Issuers Registry.
- Circle’s Verite is an open-source on-chain identity standard developed to enable interoperable credential issuance across multiple blockchain ecosystems, supporting W3C Verifiable Credentials as the underlying data format.
- Quadrata is a Passport protocol that issues “KYB” (Know Your Business) and “KYC” on-chain credentials linked to blockchain addresses, allowing DeFi protocols to require identity verification before permitting access to lending, trading, or stablecoin issuance functions.
- W3C Verifiable Credentials (VCs) and Decentralized Identifiers (DIDs) are international standards for self-sovereign identity that form the technical basis for most advanced on-chain KYC implementations, enabling credential issuers and verifiers to be any party rather than a centralized authority.
- Institutional blockchain networks including Hyperledger Fabric and R3 Corda have implemented enterprise-grade KYC on-chain identity systems for their permissioned networks, where identity is verified at the network access level rather than the individual token level.
- FinCEN’s Customer Identification Program (CIP) rules require financial institutions to obtain and verify specific customer information (name, date of birth, address, identification number) — on-chain KYC implementations must demonstrate that this information has been obtained and verified even if only a cryptographic hash is stored on-chain.
- Privacy-preserving on-chain KYC using zero-knowledge proofs (ZKPs) — where an investor proves they are KYC-verified without revealing any personal data — is technically feasible but not yet deployed at institutional scale, with Polygon ID and Aztec Protocol being the leading implementations.
Relevance to Tokenization
On-chain KYC/AML infrastructure is the enabling technology for the full realization of tokenized securities’ efficiency promise. Without a portable, interoperable on-chain identity system, every new tokenized securities platform that a sophisticated investor wants to access requires a full, separate KYC process — recreating exactly the siloed, duplicative compliance infrastructure of traditional financial markets in a blockchain wrapper. With on-chain KYC, an investor who has completed a single comprehensive identity verification process can participate in any tokenized securities offering, on any compliant platform, that accepts the same on-chain identity credentials — dramatically reducing friction and cost for both investors and issuers.
The development of interoperable on-chain KYC standards is therefore one of the most commercially significant infrastructure challenges in the tokenization industry. Currently, the market is fragmented: Tokeny’s ONCHAINID, Circle’s Verite, Quadrata, and various proprietary implementations are not interoperable, meaning that an investor’s ONCHAINID from one platform cannot be read by another platform’s compliance module without custom integration. This fragmentation is analogous to the early internet’s lack of a common email protocol — functional within each ecosystem but creating friction at the boundaries. Industry standardization around W3C Verifiable Credentials and Decentralized Identifiers provides the most promising path toward interoperability, but requires active coordination among competing platforms with no obvious commercial incentive to share their identity infrastructure.
Regulatory acceptance of on-chain KYC as a valid method of satisfying BSA/AML Customer Identification Program requirements remains uncertain. FinCEN has not issued formal guidance on whether blockchain-stored identity attestations satisfy the CIP requirement to obtain and verify specific customer information, nor on whether cryptographic proofs of identity adequately substitute for the document review and identity verification that traditional CIP programs require. Pending that guidance, most on-chain KYC implementations maintain parallel off-chain records of the underlying identity documents, using the on-chain attestations as an efficiency layer for automated compliance checks rather than as the sole basis for regulatory compliance. This hybrid approach reduces efficiency gains but avoids regulatory risk — a pragmatic compromise as regulators develop their understanding of blockchain-based identity systems.
Related entries: Programmable Compliance, ERC-3643, Bank Secrecy Act