Skip to content

InvestNot yet confirmed elsewhere1 publisher2 min readPublished

Hong Kong regulators test blockchain IDs that tie AI agents' payments to verified customers

HKT Payment is testing, in a Hong Kong regulator's sandbox, a blockchain 'agentic ID' that ties an AI agent's payments to a verified person or company. The pilot brings the question of whom an agent acts for under supervisory review, though the report describes a test and no rule.

The Investor · Invest desk

How we use AISend a correction

Illustration accompanying Hong Kong regulators test blockchain IDs that tie AI agents' payments to verified customers
Generated illustration
Agent IDs add a check for payment firms, not a replacement How Hong Kong's agent-ID pilot and similar efforts reach financial firms and the companies building agent identity tools

HKT Payment plans to test an agentic ID in a regulator sandbox. Financial firms must confirm agent authority beyond KYC, could screen out unverified agents, and still need access controls and approvals. Raonsecure is building AAM to limit agents to permitted tasks.

Agent IDs add a check for payment firms, not a replacement
WhoHowKindClaim
HKT PaymentPlans to test an agentic ID in the regulator's GenA.I Sandbox++ that verifies identity when an AI agent pays or transferscapability2
Financial firmsMust separately confirm the customer gave the agent authority to send money, and how far; KYC alone does not grant itconstraint6
Financial firms' screeningCould screen out agent requests whose identity or transaction authority has not been verifiedcapability11
Payment firms' securityStill need separate access controls and transaction approvals, since a verified agent can be hijackedcost12
RaonsecureSigned an April agreement with Upstage; building AAM, which gives each agent an identity and role and only permitted taskscapability8

What happened

  • HKT Payment, the financial arm of Hong Kong telecoms group HKT, was selected in August for the regulator's GenA.I Sandbox++ program.
  • HKT Payment is building the ID with blockchain firm Red Date Technology to cut the risk of impersonation and unauthorised transactions.
  • In South Korea, Raonsecure signed an April agreement with Upstage to build Agentic AI Management, which restricts each agent to permitted tasks.
  • Officials from the Ethereum Foundation, Google and Coinbase took part in proposing ERC-8004, a standard giving agents an identifier verifiable on the blockchain.
  • Mysten Labs said on the 6th it is developing Verifiable Agent Arbiter with Google Cloud to keep tamper-evident records of what agents do.

Why it matters

  • constraint Payment firms cannot retire access controls or transaction approvals on the strength of an agent ID, because a verified agent can still be hijacked, so the ID is a cost added to the controls they already run.
  • precedent A regulator-led pilot makes agent mandates a supervisory subject in Hong Kong, so firms there should expect to be asked how they verify an agent's authority before they offer agent payments.
  • decision Firms that want to cap agent spending now must choose between building to existing Ethereum-ecosystem limit standards and waiting to see what Hong Kong's regulators conclude.

Know-your-customer checks establish who a customer is. When that customer's AI agent asks for a transfer, the firm still has to confirm separately that the customer gave the agent authority to send money, and how far it may go [6]. The Sedaily report describes this as the gap the new IDs are meant to close [6]. HKT Payment's version is built to prove on whose behalf an agent is acting [5], and the category's broader aim is to keep agents inside approved limits [3]. A firm holding such IDs could refuse requests from agents whose identity or authority does not verify [11].

The rest of the field is organised differently. Of the four efforts the report describes, only HKT Payment's runs inside a regulator's program [15], and it pairs one payments firm with one blockchain supplier [4]. Google is involved in two of the other three, through the ERC-8004 proposal and the Mysten Labs arbiter [16]. Hashed chief executive Kim Seo-joon wrote in February that agents from different companies need a neutral basis of trust that no single company controls [7]. Blockchain, he argued, lets several companies check an agent's identity, reputation and task data within one shared framework [7]. In an April report, a16z crypto said there was still no widely used method to prove on whose behalf an agent acts or what authority it holds [14].

Three outcomes fit the evidence. Hong Kong's regulators [1] could turn the binding of agent to customer into guidance, so that supervised firms have to show a mandate check for every agent payment. They could accept an open standard such as ERC-8004 [9], leaving no single vendor in control of the identity layer. Or the sandbox could close as a test. Spending limits would then stay a feature each bank designs and prices for itself.

We think the first is the most likely in Hong Kong. A regulator is running the test [1], and the gap it targets sits with the financial firm, which carries the authority check today [6]. The counter-case is that a sandbox is an experiment. The report does not give the pilot's cost or timeline, or say whether spending caps are part of what the regulator is testing. If the program ends without a stated expectation on agent mandates, or if banks adopt open spending-limit standards before the regulator says anything, this view is wrong, and agent limits remain a product decision.

What to watch

  • Whether Hong Kong's regulators publish findings or guidance from GenA.I Sandbox++ that address agent mandates or spending caps.
  • Whether HKT Payment's agentic ID interoperates with ERC-8004 or stays a single-vendor build with Red Date Technology.
  • Whether any sandbox participant reports dropping a manual approval step for agent payments once agent IDs verify.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence38
Adoption12
Hype gap+20
Incentives55
Confidence40
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    A pilot project led by financial regulators to verify the identity of AI agents is under way in Hong Kong, according to the financial industry on the 11th.

    ReportedSupportedSource: Sedaily, citing the financial industryView cited source
  2. [2]

    HKT Payment, the financial subsidiary of Hong Kong telecommunications company HKT, was selected in August as a participant in the regulator's GenA.I Sandbox++ program and plans to test an 'agentic ID' that verifies identity when an AI agent makes a payment or transfer on a user's behalf.

    ReportedSupportedView cited source
  3. [3]

    The idea is to issue a kind of digital ID to AI agents that make payments or transfers on behalf of people, and to ensure they handle tasks only within approved limits.

    ReportedSupportedView cited source

Sources

1 independent publisher whose own reporting we read for this story.

  1. en.sedaily.com

    1 article · October 10, 2026

    Can Blockchain Verify AI Agents as AI-Driven Hacking Surges?

Share your take

Let Clarity write the post for you.

Signed-in readers get a short post drafted on this story in the register they choose — narrative, analytical, or a direct position — editable to the last word before it goes anywhere. The share buttons at the top of this story work without an account.

Topics and entities

Follow any of these and your For You feed starts watching them — no settings page required.

Entities

Loading related stories