Public ledgers, exchange KYC and the limits of privacy

People scream for crypto privacy and oppose regulation, but read on...

Every week, the same narrative comes back: crypto is about privacy, freedom, no to regulation and escaping control.

Yet when you look at real user behavior instead of slogans, a very different picture appears.

Most people are not using crypto in a private or sovereign way. They are using it like online banking.

This gap between ideology and behavior is exactly why regulation keeps expanding.

Just like L2s were turned into a casino, it’s the user who ultimately decides where this goes.

🔺 Most crypto is held on centralized exchanges:

➡️ CoinGecko research shows ~70% of users store crypto on centralized exchanges, while only ~30% use cold wallets.

This data comes from CoinGecko’s global user surveys and reflects storage behavior, not just account ownership. Convenience and liquidity are the main reasons cited.

➡️ A separate CoinGecko Bitcoin exposure survey found 41.2% of Bitcoin holders keep most of their BTC on centralized exchanges.
Despite Bitcoin being designed for self custody, nearly half of holders still rely on custodians.

➡️ Industry data indicates 62% of crypto investors still store funds on CEXs despite repeated hacks and collapses.

This includes post-FTX data, meaning trust in custodians remains structurally high even after systemic failures.

➡️ Only around 29% of users rely on hardware wallets for long-term storage.

Hardware wallets require personal responsibility, backups, and operational discipline, which many users avoid.

➡️ Wallet adoption statistics still show ~26.97% explicitly trusting exchange wallets.

This number understates the issue because many users use both wallets and CEXs but keep most value custodially.
This shows that the majority of crypto value is still custodied, not sovereign.

🔺 KYC and centralized custody kill privacy in practice:

➡️ Most centralized exchanges require full identity verification.

Government ID, selfies, proof of address, and sometimes source of funds are mandatory.

➡️ Your real-world identity becomes permanently linked to your trading and transfer history.

This linkage exists off-chain and cannot be undone, even if you later self custody.

➡️ Every deposit, withdrawal, and trade is logged off-chain.

These internal records are often more detailed than on-chain data and persist indefinitely.

➡️ These databases are accessible to regulators and tax authorities.

Through laws like AML, DAC8, and data-sharing agreements, exchanges are legally required to provide this data.

➡️ Frameworks like DAC8 and the OECD’s CARF are designed to harvest exactly this data at scale.

They do not target self custody directly. They target intermediaries because that’s where users concentrate.

If your funds sit on a CEX, privacy is already gone by architecture, not by accident.

Your choice.

🔺 Self custody is the only real privacy layer, yet few choose it

➡️ Self custody means you control the private keys and the assets.

No intermediary can move funds without your consent.

➡️ It removes custodial surveillance and third-party control.

There is no internal database mapping your identity to balances.

➡️ Despite this, most users avoid self custody due to fear of responsibility or loss.

Studies consistently cite fear of mistakes and lost keys as the main barriers.

➡️ Many prefer convenience, liquidity, and customer support over sovereignty.

This is a behavioral pattern, not a technical limitation.

➡️ The same people then complain about surveillance and regulation.

Yet regulation logically follows where users concentrate value.

The contradiction is behavioral, not political.

🔺 Where privacy actually disappears

➡️ Your identity is known and verified.

Once KYC is completed, anonymity is permanently broken.

➡️ Your activity is tracked off-chain.

This data is often richer than blockchain analytics.

➡️ Your crypto usage becomes reportable under regulations.

These frameworks formalize what exchanges already collect.

➡️ Accounts can be restricted, frozen, or audited.

This has happened repeatedly across jurisdictions.

➡️ Exit liquidity and compliance matter more than decentralization.

At that point, crypto functions like regulated fintech.

Calling this “private crypto usage” is self-deception.

🔺 The hard truth:

➡️ Convenience beats sovereignty for most users.

This is confirmed by every custody and wallet adoption study.

➡️ Ideology collapses under friction.

Self custody demands effort, and most users opt out.

➡️ Regulation follows user behavior, not ideals.

Lawmakers regulate where assets actually sit.

➡️ Centralization persists because users keep feeding it.

Because decentralization discipline failed.

If privacy truly matters:
➡️ Self custody is not optional.
➡️ Reliance on CEXs must be minimized.
➡️ Privacy requires responsibility, not slogans.

Not your keys.
Not your crypto.
Not your privacy.