a16z says institutions can move onchain without being trapped by legacy KYC models
a16z crypto argues that the real compliance challenge for banks, brokers and other regulated firms moving onchain is not whether KYC should exist, but how to avoid repeating it across every new venue, wallet and protocol. In a long-form policy piece, the firm says customer identification duties under the Bank Secrecy Act are tied to an institution’s own customers rather than every participant in the underlying settlement network. That distinction, it says, opens room for tokenized products, permissioned pools and reusable identity systems to operate on public blockchains without forcing institutions to replicate legacy compliance architecture in full. The article walks through the legal and operational conditions for reusable KYC, the difference between outsourcing and formal reliance, and how travel rule obligations apply in crypto. It also reviews tools such as verifiable credentials, zero-knowledge proofs, soulbound tokens, wallet screening, asset-level controls, transaction monitoring and cross-chain compliance messaging. Examples cited include Fireblocks OTL, Privado ID, SpruceID, TRUST, LayerZero, Chainlink ACE, Securitize, Ondo, Superstate, Morpho and World ID. The piece also points to recent U.S. policy developments, including the GENIUS Act and FinCEN statements on digital identity, machine learning, generative AI and blockchain analytics. It closes by extending the discussion to AI agents, arguing that reusable identity systems for humans will need a parallel “Know Your Agent” framework to verify who authorized an agent and what it is allowed to do.








