SEC's Hester Peirce Urges Zero-Knowledge Proof KYC Overhaul for Bitcoin (BTC)

A Bigger Haystack, Fewer Needles

SEC Commissioner Hester Peirce delivered a sweeping indictment of America's customer-identification regime on September 23, telling attendees at the SIFMA Digital Assets Conference that the current KYC and AML framework collects ever more data while catching ever fewer criminals. In remarks posted on the SEC's official newsroom, the Commission's best-known crypto advocate argued that supervisors have adopted a “Data Go Up” mentality — a mirror of crypto's “Number Go Up” fixation — in which every added reporting requirement is counted as progress regardless of whether it actually curbs financial crime. Her haystack metaphor cut to the logic of the system: regulators keep building a larger pile of civilian data so investigators can eventually find a few criminal needles, yet the bigger the pile grows, the harder those needles become to isolate. Under the Customer Identification Program rules that bind banks and other regulated intermediaries — from lenders to card networks like Visa — every firm must independently gather a customer's name, birthdate, address and identification number, then continuously monitor transactions and file Currency Transaction Reports and Suspicious Activity Reports. Peirce questioned whether the cost of sustaining this surveillance architecture now exceeds its crime-prevention value, noting that ordinary people's files sit in databases exposed to accidents, hacks and deliberate abuse, frequently without the data subject ever knowing the collection occurred. Each duplicate copy, she warned, adds another breachable node, and regulators rarely revisit whether the original justification for a data point still stands. She framed the choice as a fork: keep expanding collection until financial infrastructure becomes a panopticon, or adopt cryptographic tools that shrink the data footprint while improving illicit-finance detection.

Zero-Knowledge Proofs as the Compliance Path

The alternative Peirce outlined rests on cryptography rather than paperwork. Through attribute-based credentials and zero-knowledge proof systems — the technology family pioneered by privacy-focused chains such as Zcash — a customer could prove to a financial institution that they are of legal age, a citizen of a given country, an accredited investor, or absent from sanctions lists, without surrendering the name, income or address behind those conclusions. In her framing, if the only fact a firm truly needs is whether someone passes the accredited-investor threshold that governs private crypto raises under a Simple Agreement for Future Tokens, harvesting full identity documents to derive that answer is no longer technically necessary. She also attacked redundant onboarding: outside narrow exceptions, US rules compel each supervised firm to re-verify customers who already cleared checks elsewhere, meaning one person's sensitive file may sit across dozens of institutions. Letting firms rely on an existing verification from a trusted, regulated counterpart, she argued, would improve privacy and cut compliance budgets at the same time. Peirce further rejected the premise that permissionless systems resist oversight. A genuine permissionless network, as she defined it, runs on automated, immutable code with no intermediary custodying user assets, and its public smart contract layer leaves permanent, auditable records that increasingly capable on-chain forensic tools can analyze — so the absence of a traditional intermediary does not mean the absence of supervisory information. She closed by tying the theme to the SEC's innovation exemption, launched less than a week earlier, saying tokenized securities should trade on crypto networks and automated market makers while durable rules are built — and that tokenization is coming, a shift she wants to happen onshore rather than through overseas markets first. Readers tracking the market in real time can follow live spot and futures prices on Gate.

Remarks, Not Rules — Yet

Read against the primary text on the SEC's newsroom rather than secondhand summaries, the speech is a commissioner's argument, not a rulemaking: it binds no entity and carries no effective date, but it sketches the compliance architecture regulators could codify. For Bitcoin (BTC) and the broader market, the arc runs from an enforcement-first posture toward crypto-native compliance, where cryptography itself satisfies supervisory goals. Peirce's closing claim — that Americans can have both security and privacy — recasts KYC as a technical design choice rather than an inevitability, and COINOTAG's reading is that pressure for a ZKP-aware framework will now move from speeches into the formal rulemaking track the exemption is meant to seed.