Share article
Share article
Everyone wants "real users" online, right up until "real users" means pointing a camera at your hand. Still, that is the bet behind VeryAI's new funding: if AI generated accounts are getting cheaper and more convincing, platforms may have to raise the cost of faking a human.
Enjoy articles without ads?
Register for free and get unlimited access to all articles.
What happened, in numbers
VeryAI's announcement centers on three concrete claims:
- Funding: $10M seed led by Polychain Capital.
- Biometrics: Palm-scan verification using a smartphone-based capture flow.
- Settlement layer: Onchain identity attestations on Solana$79.10, intended to let platforms validate personhood while limiting direct data exposure.
The company's target customers are not just crypto natives. It is explicitly aiming at crypto exchanges, fintech companies, and online platforms facing a rise in bots, deepfakes, and synthetic identities.
The problem VeryAI is trying to price out
- referral bonuses,
- airdrops,
- onboarding rewards,
- credit products,
- remittance rails,
- high-value accounts,
VeryAI is positioning palm biometrics as a higher-friction, higher-signal check than email, phone numbers, or even basic selfie verification. The subtext is simple: if attackers can cheaply generate faces and voices, you look for a biometric that is harder to fake at scale.
How the palm-scan "proof-of-personhood" idea works (and what it is not)
VeryAI's concept fits under the broad label proof-of-personhood, which is exactly what it sounds like: a system that tries to ensure one account corresponds to one real human, without requiring that human to reveal their civil identity everywhere.
Based on the source reporting, the intended flow looks like this:
- User scans their palm via a phone camera (the "capture" step).
- The system creates an identity attestation (a cryptographic statement) that a unique person was verified.
- That attestation is recorded on Solana, so apps can check it. [4]
Two clarifications matter:
- This is not "KYC onchain." The point is not to publish someone's name or passport details to a blockchain.
- This is not automatically privacy-preserving either. "Attestation onchain" can mean many things, from a minimal yes or no credential to a more linkable footprint. The privacy properties live in the implementation details: what is stored, what is hashed, what can be correlated, and who can query it.
Why Solana, specifically
Solana is a practical choice for consumer identity experiments for three reasons:
1) Low fees for frequent checks
Identity systems are not one-and-done. Platforms may want to re-verify periodically, gate certain actions, or rate-limit behavior in real time. Cheap transactions matter.
2) Throughput and UX tolerance
If a verification system causes delays or costs that feel random, user drop-off spikes. Solana's throughput and fast finality help keep identity checks from feeling like a tax.
3) Ecosystem demand (airdrop culture is a customer)
None of this guarantees success. It just means Solana can carry the load if the product actually works.
The hard parts: accuracy, coercion, and privacy
Palm biometrics are appealing because they are not the default "face scan" that scammers already know how to game, and they may be less socially loaded than iris scanning for some users. But three risks are unavoidable.
Accuracy and adversarial pressure
A biometric system that is merely "good" in a lab can fail under real adversarial pressure. Attackers iterate. They probe edge cases. They test camera spoofing. They pressure user support. If VeryAI becomes a widely used gatekeeper for rewards or account creation, it becomes a target with a measurable payoff.
Coercion and account markets
Proof-of-personhood often drifts into a weird economy: people selling verified accounts, renting credentials, or being coerced into verifying. If the attestation is transferable or easily linkable to an account that can be sold, attackers can simply buy what they cannot fake.
A credible design needs guardrails, such as per-app scoping, revocation, rate limits, and fraud monitoring that does not become surveillance.
Privacy and correlation
"Onchain verification" can be privacy-friendly, or it can be a correlation machine. If multiple apps can query the same identifier, they can start stitching together behavior. Even if the underlying palm template is not published, metadata can still leak.
The standard here is clear: users should be able to prove they are unique without creating a universal tracking token. Whether VeryAI gets there will depend on how it structures attestations and access.
Why Polychain's interest makes sense
Polychain has historically leaned toward foundational infrastructure bets. A credible proof-of-personhood layer could become:
- a default Sybil resistance tool for token launches and governance,
- a fraud filter for exchanges and payment apps,
- a credential layer for consumer crypto applications that need to limit abuse without running full KYC for every action.
It is not glamorous, which is usually a compliment in infrastructure. If identity becomes a core constraint for consumer crypto, the winners are the ones that integrate quietly and work under stress.
Takeaways
- This is a bet on bot pressure staying high. If AI-generated fraud keeps improving, identity checks will keep moving "up the stack" from email to biometrics.
- Solana is being used as a verification ledger, not an identity database. That distinction matters, and it should be provable in the design.
- User acceptance is the make-or-break variable. Palm scans have to feel fast, optional where possible, and clearly scoped.
What to watch next (practical, not inspirational)
- Integration details: which exchanges or fintech platforms, if any, are piloting the system, and what flows they are gating (signup, withdrawals, referrals, airdrops).
- Attestation design: whether attestations are app-specific, revocable, and resistant to cross-app tracking.
- Security disclosures: published threat models, third-party audits, and real-world metrics after launch (false rejects matter as much as false accepts).
- Economic incentives: whether the system creates a resale market for verified accounts, and what controls exist to limit transferability.
- Regulatory posture: how VeryAI positions biometric capture and storage practices across jurisdictions, especially if it moves beyond crypto-native use cases. [5]

