The company that verifies people and businesses for banks in Asia now says it will verify the agents those banks deploy. The technical detail is thin; the market signal is not.
What happened
At Hong Kong FinTech Week 2026, Ant Digital Technologies announced an upgrade to ZOLOZ — its security and identity-verification brand — adding KYA, “Know Your Agent,” described in the release dated 3 November 2026 as “a trust governance solution designed for the age of AI agents.”
The framing is a direct extension of an existing verification business. ZOLOZ runs KYC (Know Your Customer) and KYB (Know Your Business) checks; KYA extends that “from verifying people and businesses to verifying AI agents, and providing full-lifecycle trust governance for every agent produced.”
Leo Li, president of international business at Ant DT, put the division of labour bluntly: “Agentar builds the agents, and ZOLOZ certifies them. KYA is the trust foundation of Ant DT’s AI Agent Factory.”
The KYA launch was packaged inside a wider announcement, Agent Factory — a stack spanning Agentar (agent development and scaled management), ZOLOZ (identity and security), LingDT (models) plus blockchain and privacy-preserving computation. Zhuoqun Bian, president of blockchain business, described the problem in KYA terms: “When agents begin to interact with systems on behalf of users, how to verify agent identity, define authorization boundaries, and ensure traceability and accountability become critical.”
On scale, Ant DT says it has 300-plus partners and more than 30,000 enterprise customers, and cites IDC for a 13.3% share of China’s financial-industry market for large-model platforms, agent applications and services. It is a technology commercialisation arm of Ant Group, operating independently since April 2024, with an overseas headquarters in Hong Kong since 2025.
What the release does not contain: any statement of what a ZOLOZ KYA credential asserts, what evidence it binds, how revocation works, or whether it is documented publicly for other verifiers to check.
Why it matters for KYA
KYA is being absorbed into KYC — from the KYC side. Most agent-identity launches this year came from IAM vendors (Entra, Okta, IBM, Saviynt) and agent-payments specialists. This one comes from a company whose business is regulated identity verification for financial institutions. That matters because KYA ultimately has to answer a KYC question: has this agent a verified principal, and is that principal allowed to act here? A vendor already holding the human side of that record has an obvious distribution advantage.
“Certified” is doing a lot of work in that quote. Ant DT’s model is that the agent platform produces agents and the identity brand certifies them — a factory-and-inspector split. It is a coherent story for enterprises buying both halves at once. It is also exactly the arrangement a KYA framework is supposed to make checkable from outside the vendor: who issued the attestation, what it covers, and who can revoke it. None of that is published yet.
Blockchain is being positioned as the accountability layer. Bian’s argument is that agent commerce needs traceability and accountability, and that blockchain plus AI supplies it. Whether a distributed ledger is necessary for an audit trail, or merely one implementation, remains an open question — but it signals that agent-commerce trust infrastructure is being built as a market, not just a standard.
The pattern across the region is consistent. In the space of a week: the HKMA named KYA as a workstream in Project SAGE, the SFC said it will write principles-based guidance for agentic AI, Shufti shipped a KYA check, and now the largest Chinese verification brand has one. Asia is assembling KYA as a product category tied to supervisory expectations, faster than either the US or the EU.
What to watch
Whether ZOLOZ publishes a KYA technical description — credential format, evidence, revocation — or keeps it as a service. A KYA claim that only its issuer can verify is a closed loop; that is the same objection now being raised at banks that block third-party agents rather than verify them. Also watch whether KYA gets bundled with Agentar deployment in a way that discourages agents built on other platforms, since a registry that only lists one factory’s output is not a registry.
Sources
- Ant Digital Technologies, “Ant Digital Technologies Unveils Agent Factory at Hong Kong FinTech Week, Upgrades ZOLOZ with KYA Trust Solutions”, 3 November 2026 — prnewswire.com
- HKMA, “HKMA launches Project SAGE and establishes Expert Group for agentic finance”, 2 November 2026 — hkma.gov.hk
Know Your Agent (KYA) explains agent identity, verification and accountability. This is an explainer, not legal or compliance advice — see our Sources & methodology. New to KYA? Start with What is Know Your Agent? and the glossary.