Surveillance Is Not Security: How Communities Can Protect Themselves Without Watching Everyone

March 20, 2026 · 8 min read

In 2017, members of the Atlanta Solidarity Fund, a bail fund supporting protesters and activists, were arrested by federal agents.^[1] The evidence against them came partly from financial surveillance: transaction records, payment platform data, and the digital paper trail that every modern financial tool leaves behind.

Running a bail fund is not illegal, and that turned out to be beside the point. The surveillance already built into the financial system handed authorities everything they needed. PayPal records, bank statements, and Venmo transactions assembled into a map of the community's network: who was connected to whom, and who had given money to what. Nobody had to build that map. It existed as a byproduct of paying each other.

This is the reality of building community with today's tools: every transaction is visible to the platform, and by extension, to anyone the platform shares data with.

The Surveillance Creep

Law enforcement is the sharpest version, not the only one. Most of modern digital infrastructure runs surveillance as its business model. Venmo shipped with transactions public by default, so your payments and your friend list were visible to anyone curious enough to look. Privacy backlash eventually changed the default. It didn't change what Venmo collects and keeps.

Banks are required to file Suspicious Activity Reports (SARs) for transactions that look unusual. The threshold for mandatory reporting is $10,000, but banks routinely flag much smaller amounts. In 2022, FinCEN received over 4 million SARs.^[2] Community groups that handle cash donations, distribute mutual aid funds, or collect membership dues can trigger these reports without anyone doing anything wrong.

The crypto world, which promised financial freedom, has largely moved toward even more surveillance. Know Your Customer (KYC) requirements mean that to use most cryptocurrency exchanges, you need to upload your government ID, sometimes a selfie, sometimes proof of address. Blockchain analytics firms like Chainalysis sell tools that let governments trace every transaction on public blockchains. The ledger that was supposed to free us became the most comprehensive financial surveillance system ever built.

The Global Identity Trap

There's a growing push for global digital identity systems. Worldcoin wants to scan your eyeballs to give you a digital ID. Governments are building national digital identity frameworks. The argument is always the same: we need to verify who people are to prevent fraud, stop bots, ensure fairness.

Every global identity system is a global surveillance system, and that follows from the definition rather than from anyone's bad intentions. A database that can confirm who you are everywhere is a database that records what you did everywhere. One identity means one point of control, and one point of control is also one point of failure.

For community groups, this is especially dangerous. Mutual aid networks serve people who may be undocumented, unhoused, or otherwise vulnerable to state surveillance. Requiring government ID to participate in community governance excludes exactly the people the group formed to support, and for some of them the exclusion is the safer outcome of the two.

Local Knowledge Beats Global Databases

Worth stating plainly: your community already knows who its members are. Nobody needs a blockchain identity system to establish that Maria has shown up every Saturday for two years, and the food co-op doesn't need a biometric scan to know James takes his shift. That knowledge is richer than anything a global database holds, and it's also the kind of knowledge that can't be uploaded into one.

The principle has a name: subsidiarity. Decisions and verification belong at the most local level capable of handling them, which is the level where people know each other and bear the consequences of being wrong. A neighborhood association verifies its members better than a federal agency can, and a worker co-op knows its workers better than any KYC provider ever will.

During COVID, mutual aid networks proved this at scale. Groups like Invisible Hands in New York City coordinated thousands of volunteers and deliveries without any centralized identity system. They used phone trees, Signal groups, and personal networks. They knew their members because their members had shown up, done the work, and built trust over time. No iris scans required.

Skin in the Game as Identity

Goodkeep approaches identity from a different direction. There is no external verification step, meaning no government ID, no biometric scan, and no blockchain KYC. Commitment carries the signal instead.

Committing tokens to a community puts something of yours at risk, and the commitment is irrevocable, which closes off the show-up-extract-disappear pattern entirely. That's a barrier against bad actors that requires watching nobody. Someone willing to lock real resources away for the long term has said something about their intentions that no identity document conveys.

Communities can set their own thresholds. A small mutual aid group might require minimal commitment to participate in governance. A larger cooperative managing significant resources will want more. Either way the number is set by the people it applies to, rather than by an agency or a platform that will never meet them.

Privacy as a Feature, Not a Bug

The mutual aid tradition has always understood that privacy is essential for the people it serves. Groups serving undocumented immigrants don't keep detailed records for a reason. Organizations supporting domestic violence survivors protect member identities as a matter of safety. Bail funds maintain confidentiality because exposure can lead to retaliation.

Building community tools on top of surveillance infrastructure betrays these values. When your treasury runs through PayPal, PayPal has a complete record of every person your group has ever helped. When your membership list lives on Google Sheets, Google can see who belongs to your mutual aid network.

Goodkeep is designed so that communities can verify their own members, manage their own resources, and govern themselves without handing that data to any external platform. Your community's business stays your community's business. The security comes from local trust and committed stakes, which is a different bet than watching everyone and hoping the watchers stay benevolent through the next administration.

Real security isn't built on surveillance. It's built on trust, commitment, and communities that know their own members. The best verification system is the one your community already has: people who show up, do the work, and put something on the line.