SEC Commissioner Hester Peirce is calling for an end to the centralized identity-verification databases that crypto firms now operate, warning that pending stablecoin legislation will accelerate the build-out of new data honeypots unless Washington changes course.

CryptoSlate reported on the intervention, which targets the structural problem Peirce says has emerged from years of enforcement-driven KYC (Know Your Customer) collection. The commissioner argues that the commission's case-by-case actions against unregistered intermediaries have produced a side effect the agency did not intend: a small number of large venues holding passport scans, address histories, and biometric markers for tens of millions of users.

What is a KYC honeypot?

The phrase describes a single repository that aggregates personal data from many users, raising the value of any single breach. Peirce's concern is operational, not philosophical. Consolidated identity databases become high-value targets for criminals and attractive datasets for government access requests.

Breaches at third-party KYC vendors and major exchanges have already exposed personal data tied to crypto accounts. Peirce's position is that the regulatory design itself, not merely perimeter security, determines the blast radius.

Why stablecoin rules sharpen the risk

The stablecoin bill moving through Congress would extend those obligations to issuers of payment stablecoins, including a requirement to verify customer identity at issuance and redemption. Peirce's worry is that this pulls a much larger share of on-chain dollar activity into the same custodial pattern, just as the underlying blockchain technology was designed to remove the intermediary from the transaction.

A secondary point sits in cross-border data flow. International stablecoin issuers must reconcile U.S. customer-identification rules with the European Union's GDPR data-minimization requirements and the varying regimes in Singapore, the United Kingdom, and the Gulf states. The commissioner has previously noted that the SEC has not mapped those conflicts before issuing new collection demands.

The alternative Peirce wants on the table

Peirce's framing aligns with a policy debate already underway in Washington about verifiable credentials and zero-knowledge proofs. Those architectures allow a user to demonstrate sanctions status, residency, or accreditation without handing over the underlying identity document to the platform.

The Department of Justice and FinCEN have both signaled interest in the technology. No current rule yet requires agencies to consider the alternative, and that gap is what Peirce wants to close.

The enforcement record behind the critique

The commissioner's larger target is the agency's enforcement record. The SEC has spent the past three years bringing actions against unregistered crypto intermediaries, several of which turned on customer-verification failures rather than allegations of fraud. In her reading, that record creates a powerful incentive for platforms to over-collect.

What changes next

The timing carries weight. The House version of the stablecoin framework cleared committee last quarter and awaits a floor vote; the Senate companion is expected to surface in the current session. Treasury's custodial-wallet anti-money-laundering rule, finalized in late 2024, also remains under judicial review, and the outcome could narrow or expand the existing KYC perimeter.

The open question is whether the SEC will fold Peirce's structural critique into any forthcoming rule or formal guidance. The commission's custody rule for digital-asset broker-dealers, re-proposed in 2024, is the most likely vehicle for an alternative identity-verification standard.

Peirce's argument is not that crypto should operate without identity checks. It is that the commission should not write rules that force the industry to concentrate sensitive personal data in a handful of custodial venues, just as the technology exists to disperse that function across cryptographic proofs held by users themselves.