April 7, 2023

Psudo-anonymity, Bitcoin, and regulation



What's a cryptocurrency anyway?

Cryptocurrency is a categorical term referencing online currency that utilized blockchain technology. In short, a blockchain is a type of database which is distributed and stored across the internet, such that anyone with an internet connection can both see and submit changes to the database. However, this does not mean that the changes are automatically accepted by the blockchain when they are submitted. Instead the chain "verifies" the change, utilizing algebraic cryptography. Once a change has been verified, it is encrypted and amended to the end of the chain. 

But how are changes or transactions actually verified? This is where the first major split in how cryptocurrency works occurs. Private blockchains rely on a trusted corporation, not necessarily a business but rather a group of individuals, to be the arbitrators of transactions. Public blockchains instead rely one of two systems, proof of work, and proof of stake. Bitcoin operates under proof of work, every time a transaction is submitted work must be done to verify the transaction in the form of a cryptographic question. The first wallet that solves the question is rewarded with some amount of tokens, and the transaction is verified. Proof of work is incredibly harmful to the environment, as the system is designed to waste electricity and degrade components to ensure that the cryptography is secure. Proof of stake seeks to answer this concern by instead asking inverters in the coin to deposit their coins into a shared pool in exchange for a chance to earn tokens as a reward. The more coins and the longer they are stored in the shared pool yield greater chances at being chosen to validate a transaction and receive tokens.

Now that our transaction is verified, the wallet addresses of the sender and recipient added to the end of the ledger of transactions, and crypto-graphically secured using the public key so that it can never be altered. This is what gives crypto its transparency, each transaction can be seen by anyone at any time. You don't need to hold any coins to see these transactions either, as long as you are familiar with the code (or utilizing a tool that someone else made) you can see them for yourself. However, only the wallet addresses are visible, meaning that if someone does not have their name attached to the wallet address the trail ends there, giving us anonymity.

Why regulate crypto?

 So now that we know how crypto works, why does it matter if it is decentralized or pseudo-anonymous? In short, the nature of crypto makes its economic landscape rife with crime and scams. These are not limited to bad actors either, major exchanges and "legitimate" investors have been charged with fraud, from exchanges misleading customers, to money laundering busts, if there is one thing crypto has show itself to be useful for its the facilitation of financial crime. The anonymity of crypto means that once the money is gone, it is almost impossible to track down, often sent from wallet to wallet until the degrees of separation between the victim and the perpetrators are insurmountable. Due to the fact that all transactions are final, once you get your mark you don't need to worry about a card charge-back, that money is staying in your wallet until you decide to do something with it. Phishing is also incredibly common with crypto, if you get access to a simple phrase of 13 randomly generated words you can access someones wallet and do what you wish with their currency. When purchasing something online with crypto, you are at the mercy of the vendor when it comes to refunds or warranties. If you send them money and do not receive the services promised there is nothing that the government or your bank can do for you. 

Crypto is also often the currency of choice for hackers and other dark web actors. A transaction through a bank is harder to get access to, after all those are often not public, however, every bank account is under someones name, and even through the use of pseudonyms it is very difficult to fully cover your tracks and ensure that any online transactions do not come back to you. With crypto, your wallet is not attached to your real life person in any way, meaning that when the F.B.I. comes knocking all they have is a user 's wallet number, and unless they somehow access your wallet the user's personal computer and verify that the number they have and the one stored on your computer match, there is effectively no way to trace the user of the wallet.

However, there is a way to link a user to a wallet, and most U.S. exchanges require you to link your real name and social security number to your wallet in order to comply with U.S. regulatory policy. This means that anyone attempting to use crypto as a legitimate investment or currency in the U.S., or with businesses who operate in the US, your purchase history is almost entirely transparent. Anyone could see any transactions I make using my wallet, and because the exchanges have to remain transparent about who they do business with, my name is also linked to this wallet.

How can you regulate crypto?

The fact that all of these checks occur online and are done using public computers, the blockchain is considered decentralized, meaning that no individual could make a change unless they purchased over half the coins. This fact also makes regulation of who can send and receive bitcoin almost impossible, you cannot block a transaction, and you cannot reverse a transaction. However, at the end of the day a bitcoin is only a piece of code that says you owe one bitcoin. To utilize it in the real world you either need to find a vendor that accepts bitcoin, or it needs to be exchanged for fiat (state backed) currency, both of which can be regulated. 

Due to the fact that it is impossible to stop a bitcoin from being sent, the bulk of the regulation efforts coming out of the United States lie with intermediaries. By punishing real corporations and exchanges that are known to associate with and facilitate criminals the number of avenues to offload ill-gotten crypto into fiat shrink, and it offloads the responsibility of verification to the exchanges. This strategy has proven to be more effective than trying to regulate the crypto itself, as exchanges can only stay in business as long as they continue to de-anonymize their users enough to verify that their crypto was acquired through legitimate means. 

This means that those who use crypto for illicit purposes, whether that be scams, drug trafficking, or money laundering have a hard time finding anyone willing to turn their currency into any form of fiat, and in turn increase the costs of doing business. Keeping up with the rapidly growing list of wallets connected with illiterate activities, and the list of exchanges found to be associated with them has been difficult, but effective in stemming the the number of fiscal crimes facilitated by crypto.

 But what do I think?

Most of this post has been spent on explaining the specifics of crypto and its regulation. I think the current strategy of letting exchanges regulate themselves under threat of being cut off has been effective, not only has the cumulative revenue from scams been reduced dramatically, but the number of deposits made have similarly dropped. 

On individual privacy, crypto almost seems to be the worst of both worlds. Users who have nothing to hide have the least privacy, while those who seek to act maliciously are able to easily conceal their identity and dealings. While the lack of privacy for those who are following the law could in part be attributed to the regulatory efforts of the U.S. government, many exchanges who do no business in the United States also require you to submit personal information to use them. The fact of the matter is that most finical institutions want to know who they are doing business with, and so the privacy aspect of crypto is moot for most users. 

While I certainly could set up a private wallet, somehow obtain crypto without the use of my credit card (which, of course, has my name on it), and then find an online storefront that will accept the crypto without a name, and get the good delivered to me without using my address. After all this, I still need to trust that this store will not simply take my money and run, because if they do there is nothing I can do about it. For the average user this process is so cumbersome (I have to make another account for each step, remember my wallet, double and triple check that the address I've typed in is the correct one, offer blood sacrifice, wait for the full moon, find 3 gold coins, etc.) and the number of things I could actually buy without giving any personal information are so small that realistically there's no way to use bitcoin in your day to day life while remaining truly anonymous. 

If I use my credit card to buy crypto, it is no longer anonymous. If I have something sent to my house it is no longer anonymous. Even digital goods will not remain anonymous if they are sent to my personal email, as whoever I buy from still knows that the wallet address 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa belongs to Jake Larsen because Jake's email address received the game key that the address paid for.

Unless of course, I scammed 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa and had them pay for my new game.

 

References used

 

Wolff, Josephine. “The Competing Priorities Facing U.S. Crypto Regulations .” Brookings, Brookings, 13 Jan. 2023, https://www.brookings.edu/techstream/the-competing-priorities-facing-u-s-crypto-regulations-bitcoin-ethereum/.

“What Is Blockchain?” McKinsey & Company, 5 Dec. 2022, https://www.mckinsey.com/featured-insights/mckinsey-explainers/what-is-blockchain.

Major, Jordan. “Cryptocurrency Scam Revenue Falls 65% in a Year, New Data Shows.” Finbold, 16 Aug. 2022, https://finbold.com/cryptocurrency-scam-revenue-falls-65-in-a-year-new-data-shows/.


15 comments:

  1. This was a really good overview of Bitcoin. I agree that letting exchanges regulate themselves seems to be working so far. Because Bitcoin is something a person opts into, I am not very concerned about the privacy implications. No one has to use cryptocurrency nor is it majorly tied to quality of life. If you sign up for it, you are taking those privacy risks upon yourself.

    ReplyDelete
  2. Loved reading through this explanation of cryptocurrency and its regulation! I think it's really interesting that crypto can give people either very little privacy or too much privacy. Personally, if I used crypto, I think I would be okay with less privacy if it meant that it would be harder for criminals to use crypto unethically. It seems to me that there is a lot of possibility for shady activity with crypto, and I would trade my privacy for protection from scammers.

    ReplyDelete
    Replies
    1. I agree with your view Andrew, I tend to also favor protection than privacy.

      Delete
  3. I am glad to hear that there are regulations on cryptocurrency that seem to be working. I think having a real name and identity attached to crypto is a good policy. I don't really view it as a privacy violation because any monetary transaction online could be traced back to real people already, whether you're using a crypto wallet or linking a bank account. I also view the environmental and financial dangers of crypto to be more serious than any privacy risks.

    ReplyDelete
    Replies
    1. I also agree Alex, I have seen more reports upset about the environmental and financial effects than privacy, atleast on twitter where I see a lot of these discussions occur. I think because it is such a new concept to many people that different ages and groups worry about specific aspects of crypto, and I think our generation is less interested in the privacy aspect.

      Delete
  4. After the whole FTX debacle, I do think it is interesting how regulations on cryptocurrencies are working. I think moving forward, as long as the proper regulation are maintained it can be useful as a monetary transaction. Furthermore, similar to Alex, i think have personal information attatched to cryptocurrency is not a good idea. For example, it can be traced back to you, and can be even used without your consent. This is a serious privacy risk, and I think that discretion should be advised before signing up for any form of cryptocurrency.

    ReplyDelete
  5. Thanks for writing a great blog post Jacob! I appreciated learning about cryptocurrency, it's something I've been meaning to learn more about. I agree with others that having some personal information attached would be alright. Similar to Lindsay, because you don't have to use cryptocurrency, I view privacy as less of a concern compared to overall security/protection.

    ReplyDelete
  6. This was a very interesting look into the inner machinations of blockchain technology. I agree with your point that it brings the worst worlds in regards to privacy, although I believe that it is important for there to an exist an anonymous way of transferring funds electronically.

    ReplyDelete
  7. I love reading about Crypto in this post and I like your thought on how Crypto is not good in both cases. However, I wanted to ask could there maybe be an option where there is not a worse of both cases and maybe it is good or at least better than either outcome?

    ReplyDelete
  8. Great post! I didn’t know much about cryptocurrency and was happy to learn more about them. I agree with the majority of the comments in saying that there isn’t too much of a privacy concern because it is an optional service. I also think that having real names adds to the security of the transactions and further protects people from scamming and hackers.

    ReplyDelete
  9. I have to say I have seen a lot of news relating to crypto currency in the last couple of years, and its interesting to see its public opinion continually sway in either support and hype versus public disapproval and memes about the mishaps that occur. I remember bitcoin coming into more popularity and seeing my coworkers go from wanting to invest in the stock market to crypto exclusively. Due to the massive boom in popularity, I think many forgot how vulnerable and new these currencies are, and an exclusively online branch of banking is bound to have problems in privacy and data collection and protection. I think if crypto companies had a smaller rollouts and built more extensive privacy protections (maybe by requiring verifcation of identity), these concerns could be targeted and resolved. However, I think Nate Bean brings up the interesting point of crypto filling the void for annoymous transferring of funds, and does make me question what the appropriate balance is for anonymity and protection

    ReplyDelete
    Replies
    1. banking was not the right word for the middle of my paragraph - rephrase to invest haha.

      Delete
  10. Jake, thank you for your in-depth analysis on cryptocurrency and its different regulations. I found it really enlightening to read more about it as I hadn’t really know the specifics before. I agree, along with many of the others, that there definitely should be more privacy regulations surrounding it. Even though I respect the freedom and flexibility this gives, there is just way too much corruption in the finance world, especially combined with tech.

    ReplyDelete
    Replies
    1. I think your point about crypto related to finance and tech is super true. With technology continually progressing, the banking and finance world continues to change and evolve (probably more quickly than the general public can understand). I honestly think Social Media plays a lot into the finance world, and with the recent Silicon Valley Bank crash caused by social panic and technology capabilities (people being able to do banking online and instant transfers). Social media and hype play a lot into crypto in my opinion (how it got big and meme currencies like dogecoin actualy taking off), so I think the interaction between tech,finance, and crypto will be interesting to continue to watch, especially with growing privacy concerns and less rush to jump on the new "hype".

      Delete
  11. Great post, you did a good job explaining a very hard to explain topic without obsessing over the technical details. I seriously doubt that crypto will ever overtake state backed currency. When people have crypto what they really want in the end is fiat currency. crypto's most practical application is making transactions anonymously, people don't want to keep their money as crypto they want to use crypto to pay someone or receive payment then exchange it for dollars as soon as they can, by removing anonymity from the exchange of crypto to USD you essentially kill one its main purposes.

    ReplyDelete

Week 12 Takeaways

 Week 12 focused on the three levels of internet protection: Strong Protection Password hygiene Best practices for Authentication (2FA, Bett...