Home
/
News updates
/
Latest news
/

Kyc provider persona accused of sharing crypto user data

OpenAI's KYC Provider Under Fire | Allegations of Data Sharing with Federal Agencies

By

Sophie Lin

Feb 20, 2026, 08:39 AM

Edited By

David Kim

3 minutes reading time

Illustration of a digital lock representing user privacy with crypto coins in the background and a silhouette of a government building, indicating federal agencies.

A recent investigation raises serious questions about the practices of Persona, the KYC provider for OpenAI. Security researchers claim that Persona possibly shares usersโ€™ crypto addresses with federal authorities like FinCEN, the financial crime watchdog.

The Investigation

On February 18, security analysts known as vmfunc, MDL, and Dziurwa released findings that indicate Persona may have publicly available code forwarding user data to government agencies. This discovery has alarmed many in the crypto community amid growing concerns over surveillance and privacy issues.

"Why are people giving OpenAI their crypto addresses?" one comment read, highlighting skepticism within the forums. This sentiment reflects a wider worry; users fear their personal information may be misused.

Personaโ€™s Response

Rick Song, CEO of Persona, publicly criticized the investigation via X, claiming, "I am genuinely disappointed in how all of this has been handled." He argued that the researchers never contacted him for clarification prior to their report.

Despite denying any current relationships with federal authorities, Song has not addressed the specific findings of the investigation directly. "What has really been frustrating for me is that I also admire vmfuncโ€™s work," he stated, acknowledging the credibility of the researchers involved.

Growing Concerns in the Crypto Community

The timing of the allegations coincides with increased scrutiny on privacy standards in the crypto space. As one commenter succinctly put it, "This sets a dangerous precedent." Users express frustration over a lack of transparency in how their data is handled.

Key Points from the Investigation

  • โ–ณ Code suggesting data forwarding has been active since November 2023.

  • โ–ฝ Personaโ€™s CEO insists they do not collaborate with any federal entity.

  • ๐Ÿ“Š Concerns about data retention policies remain unaddressed.

The investigation sheds light on potential weaknesses in user data protections, fostering a climate of mistrust among crypto enthusiasts.

As the situation unfolds, the implications for both Persona and OpenAI could be significant, especially if further evidence supports these claims. Will this lead to a larger discussion about user privacy in crypto?

End

The findings of this investigation highlight pressing issues related to data privacy and ethical practices in the crypto sector. As both individuals and authorities grapple with these topics, users may need to be more vigilant than ever regarding the platforms they engage with.

Future Benefits at Stake

Thereโ€™s a strong chance that this investigation will prompt a thorough review of data privacy practices in the crypto world. If the claims about Persona's data-sharing with federal entities prove true, it could lead to stricter regulations, estimated around an 80% likelihood. Such changes might not only hold Persona accountable but also influence OpenAIโ€™s practices moving forward. The looming possibility of user backlash could further push crypto platforms to enhance transparency, with experts predicting that as many as 70% of such platforms may soon adopt stronger user privacy policies in response to pressure from both regulators and the community.

Historical Echoes in Data Exchange

This situation recalls the lesser-known episode in the late 1960s when the U.S. government contracted tech firms to develop software for national security while secretly collecting citizen data. Much like todayโ€™s outcry over potential violations of privacy, the backlash during that era prompted a nationwide dialogue on privacy rights and digital ethics, resulting in framework changes that still resonate today. Just as the past paved the way for improved regulation and user awareness, the current challenge may serve as a catalyst for a similar shift in how data privacy is perceived and managed in the digital landscape.