I sent an annoyed email to EBA (European Banking Authority) telling them that they need to remove the #SatoshiTest from their Travel Rules guidance in EBA/GL/2024/11 (item 83c on page 31).

And that they need to immediately ban the practice. Companies are doing this because they're lazy. On-chain privacy harm is irreversible. The other methods are bad too, but they at least don't put stuff on the chain.

I expect them to ignore my email of course, but who knows.

https://www.eba.europa.eu/activities/single-rulebook/regulatory-activities/anti-money-laundering-and-countering-financing-terrorism/guidelines-information-requirements-relation-transfers-funds-and-certain-crypto-assets-transfers

Reply to this note

Please Login to reply.

Discussion

I also got to use the term reverse-ransomware again, i.e. the practice of holding money ransom and demanding information.

Thanks Sjors, coffee's on me today ☕

Send the text, so that others can email too.

I'd rather have people write something themselves. If they receive a bunch of identical text they might ignore it. I also haven't figured out yet who specifically to send it to, I just used the general contact form.

I would also suggest that if anyone actually gets told to perform this test, they file a complaint with their national privacy regulator.