Surveillance Is Not Security: How Communities Can Protect Themselves Without Watching Everyone

March 20, 2026 · 8 min read

In 2017, members of the Atlanta Solidarity Fund — a bail fund supporting protesters and activists — were arrested by federal agents.^[1] The evidence against them came partly from financial surveillance: transaction records, payment platform data, and the digital paper trail that every modern financial tool leaves behind.

They weren't doing anything illegal by running a bail fund. But the surveillance infrastructure built into the financial system gave authorities the tools to target them anyway. PayPal records, bank statements, and Venmo transactions became a map of their community's network — who was connected to whom, who supported what, who gave money to which cause.

This is the reality of building community with today's tools: every transaction is visible to the platform, and by extension, to anyone the platform shares data with.

The Surveillance Creep

It's not just law enforcement. The infrastructure of modern digital life is built on surveillance as a business model. Venmo made transactions public by default — your payments, your friends, your habits, all visible to anyone who looked. Even after privacy backlash forced changes, Venmo still collects and stores all that data internally.

Banks are required to file Suspicious Activity Reports (SARs) for transactions that look unusual. The threshold for mandatory reporting is $10,000, but banks routinely flag much smaller amounts. In 2022, FinCEN received over 4 million SARs.^[2] Community groups that handle cash donations, distribute mutual aid funds, or collect membership dues can trigger these reports without anyone doing anything wrong.

The crypto world, which promised financial freedom, has largely moved toward even more surveillance. Know Your Customer (KYC) requirements mean that to use most cryptocurrency exchanges, you need to upload your government ID, sometimes a selfie, sometimes proof of address. Blockchain analytics firms like Chainalysis sell tools that let governments trace every transaction on public blockchains. The ledger that was supposed to free us became the most comprehensive financial surveillance system ever built.

The Global Identity Trap

There's a growing push for global digital identity systems. Worldcoin wants to scan your eyeballs to give you a digital ID. Governments are building national digital identity frameworks. The argument is always the same: we need to verify who people are to prevent fraud, stop bots, ensure fairness.

But every global identity system is, by definition, a global surveillance system. If one database can verify who you are everywhere, that same database can track what you do everywhere. The convenience of a single identity comes at the cost of a single point of control — and a single point of failure.

For community groups, this is especially dangerous. Mutual aid networks serve people who may be undocumented, unhoused, or otherwise vulnerable to state surveillance. Requiring government ID to participate in community governance isn't just inconvenient — it's exclusionary and potentially dangerous for the people who need mutual aid most.

Local Knowledge Beats Global Databases

Here's the thing: your community already knows who its members are. The mutual aid group in your neighborhood doesn't need a blockchain identity verification system to know that Maria has been showing up every Saturday for two years. The food co-op doesn't need biometric scans to know that James always takes his shift. Local communities have the richest context about their members — context that no global database can capture.

This principle has a name: subsidiarity. It means that decisions and verification should happen at the most local level possible — the level where people actually know each other, have context, and have skin in the game. A neighborhood association is better equipped to verify its members than a federal agency. A worker co-op knows its workers better than any KYC provider.

During COVID, mutual aid networks proved this at scale. Groups like Invisible Hands in New York City coordinated thousands of volunteers and deliveries without any centralized identity system. They used phone trees, Signal groups, and personal networks. They knew their members because their members had shown up, done the work, and built trust over time. No iris scans required.

Skin in the Game as Identity

Goodkeep takes a fundamentally different approach to identity and trust. Instead of requiring external verification — government IDs, biometric scans, or blockchain KYC — it uses commitment as a signal of legitimacy.

When you commit tokens to a community, you're putting skin in the game. That commitment is irrevocable — you can't just show up, extract value, and disappear. This creates a natural barrier against bad actors without requiring surveillance. Someone who's willing to lock up real resources for the long term is credibly signaling that they care about the community's future.

Communities can set their own thresholds. A small mutual aid group might require minimal commitment to participate in governance. A larger cooperative managing significant resources might require more. The point is that the community decides — not a government agency, not a tech platform, not a surveillance company.

Privacy as a Feature, Not a Bug

The mutual aid tradition has always understood that privacy is essential for the people it serves. Groups serving undocumented immigrants don't keep detailed records for a reason. Organizations supporting domestic violence survivors protect member identities as a matter of safety. Bail funds maintain confidentiality because exposure can lead to retaliation.

Building community tools on top of surveillance infrastructure betrays these values. When your treasury runs through PayPal, PayPal has a complete record of every person your group has ever helped. When your membership list lives on Google Sheets, Google can see who belongs to your mutual aid network.

Goodkeep is designed so that communities can verify their own members, manage their own resources, and govern themselves without handing that data to any external platform. Your community's business is your community's business. Security comes from local trust and committed stakes — not from watching everyone and hoping the watchers are benevolent.

Real security isn't built on surveillance. It's built on trust, commitment, and communities that know their own members. The best verification system is the one your community already has: people who show up, do the work, and put something on the line.