cross-border finance and crypto paymentswallets, U cards and new products

First ask what is being hidden and from whom

A company may wish to keep supplier lists, order amounts or wallet associations from public view, and this is a legitimate commercial need. Product review should specify which information is not visible to the public, which information remains held by customers or appropriate institutions, and whether it can be verified upon a lawful request. Privacy protection need not be equivalent to complete anonymity; likewise, a claim of being "traceable" cannot replace the information actually available and the lawful access mechanisms.

Certain restrictions target specific assets or businesses, not all privacy technologies

Article 76 of the EU's MiCA sets conditions for trading platforms admitting assets with built-in anonymity features, concerning whether holders and transaction histories can be identified. This provision targets the trading platform scenarios it specifies and cannot be directly expanded into a prohibition on all self-hosted wallets, all encrypted communications or all privacy technologies.

The FATF virtual asset risk indicators list anonymity-enhancing technologies, mixing services and the like as risk factors. A risk factor means that analysis in light of the business and transactions is required; it does not mean that "the presence of a privacy feature proves a crime." Whether something is specifically permitted, what verification must be adopted and whether reporting is required should each be referred back to the applicable local regime, rather than looking only at the label of a particular on-chain analytics company.

Banks are more concerned with whether the real business can still be explained

Suppose Product A merely does not show the purpose of corporate payments to the public, but service institutions can still lawfully obtain information on customers, orders and sources of funds; Product B, by contrast, promises that institutions can never know who the customer is and cannot explain the fund path. The impact of the two on bank due diligence is clearly different. Product A is not necessarily accepted by banks either, but it can demonstrate an auditable business arrangement; Product B must first confront the problem that it may itself be unable to perform its obligations.

When seeking banks or channels, it is advisable to provide design explanations that can be verified, including data retention, customer identification, anomaly investigation and access approval. Do not merely present a technical paper or the phrase "zero-knowledge compliance"; demonstrate what actual personnel can obtain when compliance requires it, how quickly they can obtain it, and who approves it.

Avoid trading unlimited tracing commitments for cooperation

Compliance access should likewise have permission boundaries; the need to investigate does not justify opening all customer transaction information to all partners. Purposes, scope and security measures should be controlled in accordance with applicable data protection rules, and three scenarios should be tested: normal services, suspicious transactions and lawful investigations. In publicity, neither promise absolute anonymity or untraceability, nor claim identity-identification or asset-freezing capabilities that do not actually exist.

Recommended actions

  1. Specify what information is visible to the public, customers, operators and investigating authorities respectively.
  2. Assess direct local restrictions by reference to the actual assets and services, without expanding them into a comprehensive technology ban.
  3. Use exercises to verify the availability of materials and access permissions during abnormal investigations.
  4. Explain the privacy and compliance design to the bank in advance, and review anonymity and traceability claims.

References

  1. MiCA Article 76: Operation of a trading platform for crypto-assets — EU regulations / ESMA official rulebook
  2. Virtual Assets Red Flag Indicators — Financial Action Task Force (FATF)

Related Q&A