Venture capital giant Andreessen Horowitz (a16z) has formally submitted a comment to the U.S. Department of the Treasury, advocating for the adoption of modern, privacy-preserving digital identity systems as a primary method for combating illicit finance in the cryptocurrency sector.
The letter, a response to the Treasury’s Request for Comment on Innovative Methods To Detect Illicit Activity, argues that current Anti-Money Laundering (AML) and Bank Secrecy Act (BSA) regulations are outdated. It claims they force a reliance on inefficient, data-hoarding identity checks that are both poor at stopping crime and dangerous to consumer privacy.
Replacing Centralized Data Honeypots
In its submission to FinCEN, the Treasury’s Financial Crimes Enforcement Network, a16z proposed a fundamental shift away from the traditional model where every financial service provider must collect and report detailed personal identifiable information. This old model, the firm argues, creates massive, centralized honeypots of data (like names, addresses, and social security numbers) that are prime targets for hackers.
The firm’s proposed solution centers on Decentralized Identifiers (DIDs) and Verifiable Digital Credentials (VDCs). This user-centric model separates the act of identity verification from the act of identity use.
Under this framework, a user would be verified once by a trusted entity, such as their bank or a government agency. That entity would then issue a cryptographically-secured VDC, a digital passport or driver’s license, which the user would store in their personal digital wallet.
When a crypto exchange or DeFi protocol needs to comply with AML rules, the user wouldn’t hand over their personal data. Instead, using zero-knowledge proofs (ZKPs), their wallet would cryptographically prove a specific fact without revealing the data itself.
For example, a user’s wallet could provide a yes/no answer to an exchange’s query: Is this user over 18? Is this user a U.S. citizen? Is this user not on the OFAC sanctions list? The exchange would receive a verifiable, trustworthy yes without ever learning the user’s name or date of birth, thus satisfying regulatory obligations without compromising privacy.
Industry Momentum Behind Decentralized Identity
Andreessen Horowitz, which has invested heavily in this space, including in digital identity startups like Spruce Systems, argued that this technology is not theoretical and is already being built. The firm’s letter urges FinCEN to make clear that digital identity can satisfy the non-documentary methods provisions in existing Customer Identification Program (CIP) rules.
This push represents a significant effort to get U.S. regulators to create a safe harbor for these new technologies, positioning them as a win-win: a more effective way for law enforcement to fulfill its mission and a much-needed privacy upgrade for the digital-first economy. The proposal aligns with broader industry momentum toward privacy-preserving identity systems, with implementations already underway in government digital ID frameworks and blockchain-based credential systems.
Sources: U.S. Treasury/FinCEN RFC, Federal Register Notice, W3C Decentralized Identifiers (DID) v1.0, W3C Verifiable Credentials Data Model v2.0.
—
By the ID Tech Editorial Team
