StarkWare Introduces Private KYC on Starknet

StarkWare Launches Private KYC on Starknet – Zero Knowledge Proofs Aim to Reduce Personal Data Exposure

Key Takeaways

• StarkWare has introduced a Private KYC system on Starknet as a demo.
• The system uses zero knowledge STARK proofs and STRK20 privacy features to verify specific attributes without revealing full identity data.
• Users scan their passport via smartphone, encrypt the data to their Starknet wallet, and register attributes onchain.
• The rollout comes amid rising data breaches, with 3,322 reported compromises in the US in 2025.
• Verifiers can confirm eligibility through onchain proofs without accessing underlying personal documents.

StarkWare Introduces Private KYC on Starknet

StarkWare has unveiled a Private KYC system on its Starknet network, presenting it as a demo that allows users to complete know your customer checks without disclosing their full personal information. The system relies on zero knowledge STARK proofs and STRK20 privacy features to confirm specific eligibility criteria while limiting the exposure of sensitive data.

According to the company, the approach enables users to prove individual attributes such as being over 18, holding a valid credential, or meeting other eligibility requirements. Instead of sharing an entire passport or detailed personal record, users can submit a cryptographic proof that confirms only the required fact.

StarkWare stated that identity verification processes often request complete documents when only a single data point is necessary. The Private KYC model is designed to reduce the amount of information collected and stored by institutions, which can become security liabilities once accumulated in centralized databases.

How the Private KYC Process Works

The process begins with users scanning their passport using a smartphone. The system uses the device camera and NFC chip to read the passport and confirm that the document is genuine and digitally signed by the issuing authority.

Once verified, users encrypt their identity data directly to their Starknet wallet. Rather than uploading full identity documents to a centralized server, the encrypted information remains under the user’s control. Relevant attributes are then registered in a public onchain registry.

When verification is required, users submit zero knowledge proofs derived from their encrypted data. Smart contracts validate these proofs. Verifiers can read the public registry to confirm that the necessary condition has been met, but they do not gain access to the underlying identity information. As StarkWare describes it, contracts check the proofs, not the passports.

This design aims to separate verification from data custody. Institutions confirm compliance requirements without creating additional copies of identity documents that would need to be stored and protected.

Data Breaches Provide Context for Privacy Focus

The launch comes at a time when data breaches continue to increase across industries. In 2025, the United States recorded 3,322 data compromises, representing a 79 percent increase over five years, according to StationX. The global average cost of a data breach stands at 4.4 million dollars.

Healthcare data has been particularly affected. Axis Intelligence reports that more than 1 billion healthcare records have been breached as of 2026, with an average breach cost of 7.42 million dollars. In 2025 alone, 772 large healthcare data breaches were confirmed in the United States, marking the highest annual total on record.

The crypto industry has also experienced significant incidents. In 2020, hardware wallet provider Ledger suffered a major database breach that exposed more than 270,000 customer records. The leaked data led to extensive phishing campaigns that persisted long after the initial incident.

Against this backdrop, StarkWare positions Private KYC as an alternative to traditional models that require companies to collect and store full identity datasets.

Comparison With Other Zero Knowledge Identity Models

StarkWare’s Private KYC system has drawn comparisons to World ID, a project associated with Sam Altman’s Worldcoin initiative. World ID uses zero knowledge proofs to verify that a user is human, based on biometric iris scans collected through dedicated hardware devices.

However, World ID has faced criticism over centralized custody of biometric data. StarkWare’s model differs in that it emphasizes self custody. Users encrypt their identity information directly into their own Starknet wallets rather than relying on a central database of biometric identifiers.

Both systems rely on zero knowledge cryptography to separate verification from raw data exposure. The key distinction lies in how and where sensitive information is stored and controlled.

Relevance for Crypto Platforms Requiring KYC

For crypto platforms, including exchanges, payment services, and other regulated applications, KYC compliance remains a standard requirement. Typically, this involves collecting copies of passports, proof of address, and other personal documents, which are then stored in company databases.

Private KYC introduces a model in which compliance checks can be completed through cryptographic proofs rather than direct document transfers. Verifiers confirm that a user meets predefined criteria without retaining full identity files.

For users of crypto based financial or gaming services, the model addresses a central tension in digital compliance: meeting regulatory standards while limiting personal data exposure. The demo illustrates how onchain registries and zero knowledge proofs can be combined to achieve selective disclosure.

Our Assessment

StarkWare’s Private KYC demo on Starknet presents a verification framework that uses zero knowledge STARK proofs to confirm specific eligibility criteria without revealing full identity data. The system relies on passport scanning, encrypted self custody storage, and onchain attribute registration.

The rollout takes place amid rising global data breaches and increasing costs associated with centralized identity storage. By separating verification from data custody, the model aims to reduce the volume of personal information held by institutions while maintaining compliance checks through cryptographic validation.