Tiger Research: AI Agents Will Now Need Identity Verification
Tiger Research: AI Agents Now Need "ID Verification"
AI agents are increasingly capable of autonomously executing contracts, making payments, and conducting trades. However, a critical issue remains unresolved: how to verify the identity of the agent on the other side of a transaction. This article examines the emerging competition to establish a KYA (Know Your Agent) standard and the current state of regulatory progress.
**Core Points:**
1. As AI agents operate independently in A2A (agent-to-agent) scenarios, the focus shifts from KYC (Know Your Customer) to KYA for identity verification.
2. KYA is not universally required; it's essential primarily when independently deployed agents interact with open ecosystems like DEXs, engage in A2A payments, or pay merchants, not within centralized platforms.
3. A standards battle is underway, with four key players approaching KYA from different angles:
* **ERC-8004:** A blockchain-native approach, creating agent IDs as NFTs with on-chain registries for identity, reputation, and validation.
* **Visa TAP:** Leverages Visa's payment network to issue verified "Agent Intent" credentials, bundling agent identity into its payment rails.
* **Trulioo:** Adapts the SSL certificate model to issue dynamic "Digital Agent Passports," verifying both developer (KYB) and user (KYC) credentials.
* **Sumsub:** Focuses on real-time risk detection and re-verification of the human behind an agent during suspicious transactions, rather than pre-issuing certificates.
4. Regulatory momentum is building. The EU AI Act, the U.S. NIST, and Singapore's national AI governance framework are prioritizing agent identity management. The rollout of KYA standards is likely to follow a pattern similar to the FATF Travel Rule, becoming a watershed moment for the industry.
The market is unlikely to have a single winner. Different approaches will dominate specific niches: ERC-8004 for on-chain autonomous transactions, Visa TAP for payment-bound commerce, Trulioo for regulated finance, and Sumsub for fraud-prone scenarios. The key differentiator will be which players successfully integrate their identity infrastructure earliest as adoption scales.
marsbit05/09 06:56
