The United States Treasury Department is considering integrating identity verification directly into the code of decentralized finance (DeFi) smart contracts. This potential policy shift has sparked debate, with some warning it could fundamentally alter the open nature of decentralized finance.

Recently, the Treasury Department initiated a public feedback period related to the Guiding and Establishing National Innovation for US Stablecoins Act (GENIUS Act), which became law in July. This legislation mandates the Treasury to investigate new methods for ensuring regulatory compliance and combating illegal activity within the cryptocurrency market.

One concept under consideration involves embedding identity information directly within smart contracts. In practice, this could mean that a DeFi system would automatically confirm a user’s official identification, biometric data, or digital wallet certification before authorizing a transaction.

Advocates for this approach suggest that incorporating Know Your Customer (KYC) and Anti-Money Laundering (AML) measures into the core of blockchain technology could make regulatory adherence more efficient and deter illicit actors from using DeFi platforms.

Treasury considers digital ID verification in DeFi. Source: Laz

Fraser Mitchell, the Chief Product Officer at SmartSearch, a firm specializing in AML solutions, told Cointelegraph that these types of tools could “expose the anonymous transactions that make these networks particularly attractive to those involved in criminal activity.”

“Real-time monitoring designed to identify suspicious activities can simplify the risk mitigation process for platforms, allowing them to identify and ultimately prevent money launderers from using their networks to conceal the proceeds of some of the world’s most serious offenses,” Mitchell stated.

Related: GENIUS Act to Spark Innovation in Payment Services: Sygnum Analysis

DeFi Identity Verification: Data Protection or Surveillance Risks?

Mitchell recognized the potential impact on privacy but suggested there are ways to address it. “Only the data essential for monitoring or regulatory compliance audits needs to be stored, and all other data should be removed. Any data that is kept should be strongly encrypted at the individual record level, reducing the possibility of a large-scale data breach.”

However, critics argue this proposal could weaken the fundamental principles of DeFi. Mamadou Kwidjim Toure, CEO of Ubuntu Tribe, likened the plan to “installing surveillance cameras in every home.”

“While it might seem like a convenient way to ensure compliance on paper, it transforms a neutral, permissionless system into one where access is dictated by government-approved identification. This fundamentally alters the intended purpose of DeFi,” Toure explained to Cointelegraph.

He cautioned that if biometric data or government-issued IDs are associated with blockchain wallets, “every transaction could become permanently traceable to an identifiable individual. This eliminates pseudonymity and, consequently, the ability to transact without being monitored.”

For Toure, the implications extend beyond regulatory compliance. “Financial independence relies on the right to conduct economic activities in private. Integrating identification at the protocol level undermines this right and establishes a dangerous precedent. Governments could potentially censor transactions, blacklist specific wallets, or even automate tax collection directly through smart contracts.”

Related: GENIUS Act’s Impact on Tokenized Assets: Expert Analysis

Who Might Be Excluded?

Another concern revolves around potential exclusion. A significant portion of the global population still lacks formal identification. If DeFi systems require government-issued credentials, entire segments of society, including migrants, refugees, and those without bank accounts, risk being excluded.

“It could limit access for users who value anonymity or are unable to satisfy ID requirements, thereby diminishing DeFi’s democratizing effect,” Toure commented.

Data security is another point of contention. Combining biometric databases with financial activity could make hacks more severe, potentially exposing both financial assets and personal identities in a single security compromise.

Critics emphasize that there are alternatives to choosing between unregulated environments and mass surveillance. Privacy-enhancing technologies such as zero-knowledge proofs (ZKPs) and decentralized identity (DID) frameworks offer methods to confirm eligibility without exposing personally identifiable information.