TL;DR: The policy question is no longer whether verification exists, but whether identity proofing is embedded tightly enough to control pseudonymous transfer risk without breaking legitimate flow, as SumSub reports that it has added automated Satoshi Test microtransaction verification to its Unhosted Wallet Verification solution, giving VASPs a fourth ownership proof method for Travel Rule workflows while supporting risk-based controls across jurisdictions.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Sumsub Expands Unhosted Wallet Verification with Automated Satoshi Test to Strengthen Crypto Compliance”.
By the numbers:
- SumSub’s State of the Crypto Industry 2026 report finds that 74% of crypto firms now prioritise verification accuracy.
Key questions
Q: How should VASPs handle unhosted wallet verification in Travel Rule workflows?
A: VASPs should treat unhosted wallet verification as a transaction control, not a back-office evidence task.
Q: When does microtransaction wallet verification make more sense than self-declaration?
A: Microtransaction verification makes more sense when the transfer risk is higher, the jurisdiction expects stronger ownership evidence, or the platform needs proof that is harder to fake than user-attested ownership.
Q: What breaks when wallet verification happens outside the transfer flow?
A: The control becomes easy to bypass, hard to audit, and weakly connected to the actual movement of funds.
Practitioner guidance
- Define wallet ownership proof tiers Map Digital Signature, Self Declaration, Screenshots, and Satoshi Test to separate risk levels so policy can choose the right method for each transfer path.
- Embed verification before transfer completion Place unhosted wallet verification inside deposit and withdrawal flows so ownership checks gate release decisions rather than follow them.
- Align controls to jurisdictional expectations Document where each verification method is acceptable under local Travel Rule and sanctions policies, then tie those rules to transaction routing.
Bottom line: Unhosted wallet verification is shifting from a static ownership check to a risk-based control embedded in the transfer flow.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Wallet ownership verification is becoming an identity governance control, not a screening control. The practical issue is not simply whether a wallet can be checked, but whether the check is bound to the transfer decision itself. Once verification sits inside the transaction flow, it starts to function like a policy-enforced access decision for value movement. For practitioners, that shifts the control question from screening to governed authorisation.
A few things that frame the scale:
- 74% of crypto firms now prioritize verification accuracy, according to The 2024 ESG Report: Managing Non-Human Identities.
- 92% of organisations expose NHIs to third parties, raising supply-chain governance concerns, according to Ultimate Guide to NHIs , Key Challenges and Risks.
A question worth separating out:
Q: Who is accountable for unhosted wallet verification decisions?
A: Accountability sits with the VASP and its compliance and identity governance functions, because they define the policy, the approved proof methods, and the transaction gate. Regulators expect firms to show that their verification model is risk-based, documented, and consistently enforced across jurisdictions.
👉 Read our full editorial: Risk-based unhosted wallet verification now includes Satoshi Test
Risk-based wallet ownership verification is becoming a control design problem, not a checkbox exercise. The point is no longer whether a wallet can be verified, but whether the verification method matches the risk of the transfer and the jurisdiction in play. As regulators scrutinise unhosted wallets more closely, practitioners need controls that can vary by policy without creating a fragmented user journey. The operational conclusion is that wallet ownership assurance must be designed as part of the transaction control plane.
A question worth separating out:
Q: How do organisations decide which unhosted wallet verification method to use?
A: Organisations should decide by combining regulatory requirement, transfer risk, and user experience impact. Digital signatures may be enough in lower-risk cases, while microtransaction verification can fit stronger assurance needs. The right method is the one that gives enough evidence to satisfy policy without making legitimate transfers unnecessarily hard.
👉 Read our full editorial: Risk-based unhosted wallet verification now includes Satoshi Test