From KYC to KYA, Is It Time to Give AI Agents Their Own 'ID Cards'?

marsbitОпубликовано 2026-05-10Обновлено 2026-05-10

Введение

Titled "From KYC to KYA: Is It Time to Issue 'Identity Cards' for AI Agents?", this article discusses the emerging concept of Know Your Agent (KYA) as AI agents become increasingly autonomous. In Agent-to-Agent (A2A) scenarios, where agents execute contracts, payments, and trades without human intervention, the lack of a shared identity standard creates risks like unauthorized transactions, fraud, and accountability gaps. KYA acts as a trust layer to verify an agent's origin, authority, and accountability. The need for KYA is most critical outside centralized platforms (like Google or Coinbase), such as in decentralized exchanges (DEX), A2A payments, and merchant payments. Several key players are building KYA infrastructure: - **ERC-8004**: A proposed Ethereum standard that issues a unique AgentID as an NFT, building on-chain identity, reputation, and validation systems. - **Visa TAP**: Visa's solution issues agent identity credentials, with transactions verified via triple signatures (legitimacy, delegator, payment method). - **Trulioo**: Extends its KYC/KYB compliance infrastructure using a Digital Passport for Agents (DAP), issued after verifying both the developer and user, and refreshed per transaction. - **Sumsub**: Focuses on post-issuance real-time verification, detecting agent anomalies during transactions using its existing compliance systems. Regulatory bodies are also acting. The EU AI Act mandates operator identification in logs for high-risk AI systems, the US...

Authored by: Tiger Research

Compiled by: AididiaoJP, Foresight News

The era of AI agents is accelerating, and alongside it, concerns about the uncontrolled creation and behavior of agents are growing. Know Your Agent (KYA) systems, which assign identities to agents and regulate their behavior, are receiving increasing attention. Why is a KYA identity infrastructure needed? Which companies are building it?

Summary

AI agents have entered an era of autonomously executing contracts, payments, and transactions, but there are currently no shared standards to verify "who this agent is." In Agent-to-Agent (A2A) scenarios, KYA is gaining more focus than KYC.
KYA is not needed in all scenarios. Within centralized platforms (Google, OpenAI, Coinbase), existing KYC is sufficient. Where KYA truly becomes important is in scenarios where independently deployed autonomous agents interact with DEXs, A2A payments, and merchant payments.
The KYA standards race has begun:
ERC-8004: Issues AgentIDs on top of NFTs, building an on-chain system for identity, reputation, and verification.
Visa TAP: Visa issues identity credentials for agents, verified through TAP's triple signature (legitimacy, delegator, payment method).
Trulioo: Adopts the SSL CA model, with DPAs issuing DAPs.
Sumsub: Layers a KYA system on top of its own compliance system.

Regulatory action has begun at the national level. The EU's AI Act requires high-risk AI system behavior logs to include operator identity. The US NIST has listed agent identity management as a priority standard area. Singapore has released the world's first national-level AI agent governance framework. Just as the 2019 FATF Travel Rule determined which crypto exchanges survived, whether one possesses KYA infrastructure will determine who enters the next market cycle.

Why is KYA Emerging Now?

KYC: The Layer That Reshaped Finance

Before 1989, global finance lacked a unified identity standard. This gap made it difficult to track drug money and illicit funds.
After the FATF was founded in 1989, KYC became a mandatory requirement in finance, blocking illicit funds at the entry point.

Without Agent Identity, Systems Regress

AI agents execute contracts, payments, and transactions without human involvement, but currently, it's impossible to verify "who it is."
In A2A environments, accountability becomes blurred, dispute risks increase, and users are exposed to fraud patterns like money laundering.

The Role and Response of KYA (Know Your Agent)

KYA (Know Your Agent) is a trust layer that pre-verifies an agent's origin, permissions, and accountability framework.
Unverified agents bring three major risks simultaneously: unauthorized transactions, fraud, and accountability gaps.

The Manifestation of KYA's Necessity

KYA is Needed at Every Level

Within centralized platforms, user KYC + platform accountability is sufficient. In interoperable scenarios outside platforms, KYA becomes crucial for verifying an agent's specific actions and safety.
Within a country (inside a platform), one ID (KYC) is enough to move freely. But once crossing borders (outside a platform), the environment changes, and entry review (KYA) of purpose and trust is needed.

Market Players

ERC-8004: NFT-Based Agent Identity

ERC-8004 adds an identity layer on top of ERC-721, minting an NFT as a unique ID for each agent.
It also adds three on-chain registries (Identity, Reputation, Validation), serving as identity, reputation board, and verification record respectively.

Two Markets Built by Ethereum Standards, a Third is Coming

ERC-20 (Token Issuance Standard): Before standardization, every token needed brand-new code. After ERC-20, most major assets were issued on it.
ERC-721 (NFT Standard): CryptoPunks, BAYC, ENS built the NFT market itself upon it. As blockchain integration accelerates in the agent era.
ERC-8004 will play the same standardizing role for Agents.

Visa TAP: Authentication on the Visa Rail

Visa issues identity credentials (Agent Intent) to agents, akin to an identity card. Without a key, transactions cannot occur. Keys are issued only after Visa pre-approval. Every transaction is signed and submitted to the merchant.

The merchant receives three signatures, not one: Visa approval, delegator, payment method, all confirmed simultaneously.

Visa: A Strategy to Pull Every Transaction into the Visa Network

Just as Visa previously captured payment rails, it is now encapsulating the agent era.
Through Visa Intelligent Commerce (VIC), Visa offers a solution bundle that packages KYA with payments.
If agent payments still use the card rail, and this bundle becomes the default option, then Visa's market share can remain stable even through the transition.

Trulioo: Extending KYC-Era Verification Infrastructure

Trulioo is a compliance operator on the global KYC/KYB rail and is expanding its verification stack to KYA.
DPAs play the role of SSL-CAs. Unlike SSL (domain only), DPAs verify developer KYB and user KYC before issuing a DAP.
Banks and fintechs legally require human and business identity. As agents enter finance, Trulioo's KYC/KYB position will be further solidified.

DAP, an Agent's Digital Passport, Refreshed with Each Transaction

DAP is an agent's digital passport. A DPA verifies the developer (KYB) and user (KYC), packages both into a token, and grants it to the agent.
Unlike a paper passport, it is a live token, refreshed and re-verified with every transaction. Once delegation is revoked or anomalies are detected, the DAP is invalidated immediately.
KYA is not a one-time verification. Trust must be reconfirmed with every transaction.

Sumsub (AI Agent Verification): Detecting Agent Anomalies

Sumsub's approach is: whenever an agent attempts an anomalous transaction, re-verify the currently active human identity.
It leverages its verification systems from its compliance business since 2015 to detect agent anomalies more accurately.

Operators with Technology to Address New Threats of the AI Era

Other KYA players focus on one-time pre-transaction identity verification. Sumsub focuses on real-time verification post-issuance.
As agent permissions expand, anomaly detection becomes crucial; as fraud scales with technology, Sumsub's real-time verification stack gains attention.

Proactive Regulatory Positioning, Shaping Entry Rules

The Gap Caused by the FATF Travel Rule May Recur with KYA

After the 2019 FATF Travel Rule, VASPs diverged based on their ability to bear KYC/AML infrastructure costs. Peers like CryptoBridge and Deribit, unable to afford it, either shut down or moved to less regulated regions.

The EU, Singapore, and the US are already vying for leadership. KYA will become a core layer of the agent era.

KYA Will Differentiate by Market Segment, Not a Single Winner

The real variable in the standards race is not technology, but combinations. Mainstream players have entered the collaboration and combination phase. In the future, who pairs with which merchants, payment networks, and KYC customer bases will determine the leader in each segment.

The market will not have a single winner; it will differentiate by market segment.

Связанные с этим вопросы

QWhat is KYA (Know Your Agent), and why is it emerging as an important concept in the AI agent era?

AKYA (Know Your Agent) is a system designed to verify the identity, authority, and accountability of AI agents, especially in scenarios where they operate autonomously without direct human oversight. It is emerging as a crucial trust layer due to the rise of AI agents that autonomously execute contracts, payments, and transactions. In these Agent-to-Agent (A2A) environments, there is currently no shared standard to verify 'who the agent is,' leading to increased risks like unauthorized transactions, fraud, and accountability gaps. KYA addresses these risks by establishing a trust infrastructure for pre-verifying an agent's source, permissions, and purpose.

QWhat are some key standards and solutions being developed for KYA?

ASeveral standards and solutions are being developed for KYA. Notable examples include: 1) **ERC-8004**: An Ethereum-based standard that uses NFTs (ERC-721) as unique AgentIDs and adds on-chain registries for identity, reputation, and validation. 2) **Visa TAP (Triple Authorization Protocol)**: Visa's solution that issues identity credentials (Agent Intent) to agents and requires triple signatures (from Visa, the delegator, and the payment method) for transaction approval. 3) **Trulioo's DAP**: Extends their KYC/KYB infrastructure to issue a dynamic Digital Agent Passport (DAP) that is re-validated per transaction. 4) **Sumsub (AI Agent Verification)**: Focuses on post-issuance, real-time verification of agents to detect and prevent abnormal behavior using their existing compliance stack.

QIn what scenarios is KYA most necessary, according to the article?

AAccording to the article, KYA is most necessary outside of centralized, walled-garden platforms (like Google, OpenAI, or Coinbase), where traditional user KYC and platform accountability are sufficient. KYA becomes critical in scenarios involving independent, autonomously deployed agents interacting across platforms, particularly in: 1) **Agent-to-Agent (A2A) transactions** (e.g., payments between agents). 2) **Accessing decentralized exchanges (DEXs)**. 3) **Making payments to merchants**. These represent interoperable environments where a lack of agent identity verification creates significant operational and financial risks.

QHow are governments and regulatory bodies responding to the need for AI agent identity management?

AGovernments and regulatory bodies are beginning to act on AI agent governance, effectively pushing the need for KYA infrastructure. Key actions include: 1) **The EU AI Act**: Requires operators of high-risk AI systems to be identifiable in activity logs. 2) **US NIST**: Has prioritized AI agent identity management as a key standard-setting area. 3) **Singapore**: Released the world's first national-level AI governance framework specifically for agents. The article draws a parallel to the 2019 FATF Travel Rule, suggesting that the ability to implement compliant KYA systems will be a determining factor for which entities can participate in the next phase of the AI agent market.

QWhy does the article suggest the KYA market will be segmented, with no single winner?

AThe article suggests the KYA market will be segmented because the key variable for success is not just technology, but the combination and integration of solutions with existing business ecosystems. Major players are entering a 'cooperation-combination' phase. The future market leader in each segment will be determined by which KYA provider successfully partners with which merchants, payment networks (like Visa's approach), and existing KYC customer bases. Therefore, different KYA standards and solutions (e.g., ERC-8004 for the crypto-native ecosystem, Visa TAP for card-based commerce) are likely to dominate different application areas, leading to a fragmented market rather than a single universal winner.

Похожее

Seeking Alpha's Hot Article: Why Might the U.S. Stock Market Crash in June?

In a recent Seeking Alpha article, financial professor and analyst Damir Tokic argues that the US stock market may be poised for a significant crash in June 2026. The core thesis centers on a "mega-bubble" in equities, particularly within the technology sector, which has driven the S&P 500 to near-record valuations, with a Shiller P/E ratio exceeding 40—a level comparable to the 2000 dot-com bubble. Tokic identifies two primary catalysts for a potential collapse. First, he points to unsustainable market exuberance fueled by what he terms the "Trump Stimulus"—massive AI capital expenditure by tech giants, which he believes is politically driven and cannot last. Second, and more urgently, he highlights the escalating Iran war as a critical threat. The ongoing closure of the Strait of Hormuz has created a severe global energy supply crunch. Strategic petroleum reserves are projected to hit critically low operational levels by June, potentially causing oil prices to spike above $200 per barrel and triggering a severe, supply-driven inflationary shock. This scenario, Tokic warns, would force the Federal Reserve's hand. Despite currently maintaining a dovish bias, the Fed would likely be compelled to officially pivot to a hawkish stance at its June FOMC meeting to combat soaring inflation and bond yields. He contends that such a shift—or even a failure to act, which would destroy Fed credibility—could be the trigger that punctures the market bubble. The resulting downturn, he concludes, could rival the bear markets of 2000 and 2008, advising investors to prepare for a major correction.

marsbit13 мин. назад

Seeking Alpha's Hot Article: Why Might the U.S. Stock Market Crash in June?

marsbit13 мин. назад

AI PC Battle: Bet on the Toll Booth, Not the Camp

**Title:** The AI PC Battle: Don't Bet on Sides, Bet on the Tollbooth **Summary:** The AI PC competition is moving beyond simple "x86 vs. Arm" narratives. The core investment thesis should focus on identifying which players can sustain margins, cash flow, and pricing power throughout the upgrade cycle, rather than backing a particular architecture. The opportunity is analyzed in three layers: 1. **The Advanced Foundry Tollbooth:** TSMC is positioned to collect "tolls" regardless of which chip designer wins, due to its dominant ~70% share in advanced semiconductor manufacturing, which is essential for high-end AI PC chips. 2. **Compute & Platform Spillover:** AMD represents an offensive in the x86 CPU+GPU space, while NVIDIA leverages its GPU and CUDA software stack dominance. Both benefit from the demand for increased local AI compute. 3. **Architecture Diffusion & Turnaround Plays:** ARM and Intel offer potential for significant upside (elasticity), but investments here require stricter discipline due to higher execution risks and competitive challenges. The industry is transitioning from concept to shipment validation. While short-term forecasts for AI PC adoption have been revised down slightly due to tariffs and procurement delays, the long-term trend towards AI becoming a standard PC feature remains intact. The key driver for upgrade cycles will be whether compelling enterprise applications (e.g., privacy-sensitive computing, low-latency inference) emerge beyond consumer-focused features like meeting summarization. Investment strategy should prioritize companies with platform-level advantages and recurring revenue streams. TSMC offers high certainty as the foundational tollbooth. AMD presents a strong offensive play within the established ecosystem. ARM and Intel are higher-risk, higher-potential-reward turnaround bets. The report cautions against chasing short-term hype and emphasizes a disciplined, long-term approach focused on buying ecosystem strength and cash-flow certainty after market enthusiasm subsides. **Key Risks:** Underwhelming AI PC applications slowing upgrade cycles; slow improvement in Windows on Arm compatibility; macro/tariff impacts on PC demand; potential advanced node supply-demand mismatches affecting TSMC; high overall AI sector valuations making stocks vulnerable to a risk-off shift in markets.

marsbit27 мин. назад

AI PC Battle: Bet on the Toll Booth, Not the Camp

marsbit27 мин. назад

Which Companies Has NVIDIA's "Three-Track Investment Architecture" Invested In?

NVIDIA's investment strategy operates through a "three-track architecture," not just its NVentures venture arm. Corporate Development handles massive strategic bets (e.g., $30B in OpenAI, $10B in Anthropic, $20B in Synopsys). NVentures, a small team, focuses on early-stage, financial investments across sectors like quantum computing (Alice & Bob, PsiQuantum), AI infrastructure (OpenRouter, Tensormesh), and biotech. The NVIDIA Inception accelerator provides non-monetary support. This system allows NVIDIA to nurture startups and lock in strategic partners, creating a vast AI ecosystem. This aggressive capital deployment has drawn scrutiny. Critics like Michael Burry and EU regulators question potential "circular financing," where NVIDIA's equity investments in companies (e.g., CoreWeave, OpenAI) facilitate those companies' purchases of NVIDIA hardware, potentially inflating revenue. Supporters view it as a necessary "virtuous cycle" to secure supply and demand in a compute-scarce market. While NVentures' smaller deals appear like traditional VC, its role within the larger, controversial investment framework remains a point of debate.

marsbit55 мин. назад

Which Companies Has NVIDIA's "Three-Track Investment Architecture" Invested In?

marsbit55 мин. назад

Ten-Thousand-Word Analysis: From $10 to $290, MRVL Wins the Entire AI Era by 'Not Making GPUs'

Marvell Technology's stock price surged from under $10 in 2016 to a record $290 in June 2026, fueled not by making GPUs, but by dominating AI infrastructure connectivity. This analysis argues the market misvalues MRVL as merely a smaller Broadcom in custom AI chips, overlooking its true, unique position. Marvell's core strength lies in enabling high-speed data flow for AI clusters through three interconnected businesses. First, it holds a commanding ~70% market share in high-speed optical DSPs (essential for data center light modules), a deep-moat business with accelerating growth. Second, its custom AI chip design business serves hyperscalers like AWS, Microsoft, and Google, with a significant revenue pipeline despite lower margins. Third, stable cash flows come from Ethernet switch chips and enterprise storage controllers. Together, they form a full-stack "AI data movement" platform. CEO Matt Murphy's transformative leadership since 2016, involving strategic divestments, key acquisitions (like Inphi for optical DSPs), and securing long-term agreements with major cloud providers, repositioned the company. A pivotal $2 billion strategic investment from NVIDIA in 2026 underscored Marvell's critical role in the AI ecosystem, particularly through collaborations like NVLink Fusion. While Marvell faces risks—including client concentration (losing the Amazon Trainium3 design), lower-margin business mix, competitive threats, insider selling, and complex supply chains—its fundamentals remain strong. The optical interconnect moat is widening with the acquisition of Celestial AI (photonics fabric), and financial metrics show accelerating revenue growth and operating leverage. With a PEG ratio suggesting undervaluation relative to its growth, the thesis is that the market undervalues Marvell's monopolistic position in AI "plumbing" while overemphasizing its competitive custom chip segment. The story transcends investing, symbolizing how in any complex system—from the internet to AI—the value of "connection" ultimately surpasses that of individual "nodes."

marsbit57 мин. назад

Ten-Thousand-Word Analysis: From $10 to $290, MRVL Wins the Entire AI Era by 'Not Making GPUs'

marsbit57 мин. назад

AI Relay Stations Spark Heated Debate on Zhihu: Behind Cheap Tokens, What Are Users Really Worried About?

A discussion on Zhihu about "AI relay stations" shifted the niche developer topic of "cheap tokens" into broader user awareness. Users moved beyond simply questioning the legitimacy of these services to focus on practical concerns: Where do cheap tokens truly come from? Is the model being accessed the real one? Can relay stations see prompts, code, and API keys? For occasional users, are the risks worth it? The core debate centered less on price and more on trust. A primary worry is model authenticity—the risk of "model swapping," where users paying for a premium model might be routed to a cheaper one, creating an information asymmetry. Others argued that cost comparisons matter; while cheaper than official pay-as-you-go APIs, relay stations may not be the lowest-cost option versus subscriptions, domestic models, or free tiers, making user needs assessment crucial. Speculation about token sources ranged from legitimate bulk discounts to gray-area methods like account sharing or exploiting regional pricing. This opacity makes risk assessment difficult for users. Data security emerged as a critical concern, especially for enterprise use. When processing sensitive information like code, contracts, or client data, the inability to verify a relay station's data handling, retention, or access policies poses significant compliance and confidentiality risks. The evolving consensus suggests relay stations can be used cautiously for low-sensitivity, disposable tasks (e.g., summarizing public info, simple translation). However, they should not be the default for sensitive, professional, or production workflows involving proprietary data, Agents, or automated systems. Recommendations include avoiding large prepayments, not relying on a single service, using test prompts to monitor quality, anonymizing data where possible, and keeping official channels as backups. Ultimately, the discussion framed tokens not just as a billing unit but as a measure of real cost encompassing price, model integrity, data security, and service stability. The popularity of relay stations highlights user demand for affordable access, but the debate underscores a key trade-off: the savings from cheap tokens may come at the price of trust, transparency, and control over one's data and AI experience.

marsbit1 ч. назад

AI Relay Stations Spark Heated Debate on Zhihu: Behind Cheap Tokens, What Are Users Really Worried About?

marsbit1 ч. назад

Торговля

Спот

Фьючерсы

Обсуждения

Добро пожаловать в Сообщество HTX. Здесь вы сможете быть в курсе последних новостей о развитии платформы и получить доступ к профессиональной аналитической информации о рынке. Мнения пользователей о цене на ID (ID) представлены ниже.