Allowlisting and Identity Registries
Definition
An allowlist is the set of wallet addresses permitted to hold or receive a token; an identity registry is a more structured version that links each approved wallet to a verified investor identity and records attributes such as country and investor status. Issuers of tokenized securities use them so that the token can only move to holders the offering allows. The token contract checks the registry on every transfer: if the receiving wallet is not on it, or no longer qualifies, the transfer fails, even though the sender owns the tokens and signed the transaction. Wallets join through the issuer's onboarding, which verifies identity and eligibility and then adds the address. The registry is maintained by the issuer, its transfer agent or an identity provider it trusts, and it is the main reason tokenized securities cannot simply be sent to an exchange or another person's wallet.
Why it matters
The allowlist is where a tokenized security's legal restrictions meet its code. It is why a fund token can be held in a self-custody wallet yet cannot be sent to a friend, deposited on an exchange or used in most DeFi protocols. For investors it decides practical questions: who you can sell to, whether you can move between wallets, whether a broker or protocol can hold the token for you, and what happens if your verification lapses. It also concentrates power in whoever maintains the registry. A registry operator that makes mistakes, is compromised or removes wallets without process can lock holders out, so its governance belongs in diligence alongside the assets.
Common misconceptions
- •Holding a permissioned token in your own wallet does not make it freely transferable. The registry still governs every transfer.
- •An allowlist is not only a KYC formality. It enforces offering rules such as investor status, country limits and holder caps.
- •Approval is per wallet, not per person. A new address must be registered before it can receive tokens.
- •Smart contract wallets and exchange deposit addresses are not automatically eligible. Some issuers allow only non-custodial wallets.
- •Removal from the allowlist is not a confiscation, but it can stop transfers and redemptions until resolved.
Technical details
How the check works at each transfer
Sender check: the sending wallet is not frozen and has enough unfrozen tokens.
Receiver check: the receiving wallet is on the allowlist or linked to a verified identity in the registry.
Attribute check: the receiver's recorded country and investor status meet the offering's rules.
Compliance rules: holder counts, holding caps and lock-ups are within limits.
Result: if every check passes the transfer executes; otherwise it reverts and nothing moves.
Simple allowlist versus identity registry
Allowlist: a list of approved addresses; simple, but each address stands alone and attributes live off-chain.
Identity registry: addresses linked to investor identities with attributes and signed claims from trusted verifiers (the ERC-3643 model).
Shared registries: one registry can serve several tokens from the same issuer, so an investor onboards once.
Off-chain record: personal data stays with the transfer agent or identity provider; the chain holds addresses and status.
Examples from AltStreet's reviews
Superstate: KYC and qualified-purchaser verification, then wallets added to the allowlist; shares arrive as tokens to an allowlisted address or in book entry.
Ondo: OUSG holdable only by addresses on Ondo's identity-registry allowlist, in non-custodial wallets; USDY carries an allowlist, a blocklist and a sanctions check.
Franklin: its blockchain criteria require whitelisting on every network; peer-to-peer transfers are allowed only between approved wallets.
Figure YLDS: transfers only between wallets that have passed Figure's AML and KYC checks.
How investors apply the term
Investors usually apply this term by tying the definition back to the controlling documents and then asking which cash flows, rights, restrictions, or valuation assumptions it changes. A useful review looks at the term alongside fees, leverage, liquidity, reporting frequency, and manager discretion rather than treating it as a standalone concept.
The practical diligence test is simple: identify who benefits if the assumption is wrong, who has control when conditions change, and what evidence the investor receives after closing. Terms that cannot be reconciled to documents, cash movements, and monitoring data should be treated as marketing shorthand until proven otherwise.
Frequently asked questions
- Why can I hold a token but not transfer it to another wallet?
- Because the token checks the receiving wallet against the issuer's allowlist or identity registry before every transfer. If the recipient has not been onboarded and approved, the contract rejects the transfer. Owning the tokens lets you hold them and, if you are eligible, redeem them; it does not let you send them to an unapproved address.
- How does a wallet get on the allowlist?
- Through the issuer's onboarding: identity verification, sanctions screening, proof of the investor status the offering requires, and registration of the specific wallet address. Superstate requires investors to complete KYC and qualified-purchaser verification and add wallets to the allowlist; Ondo's OUSG can be held only by addresses on its identity-registry allowlist, and only in non-custodial wallets; Figure's YLDS transfers only between wallets that have passed Figure's AML and KYC checks.
- Can I move my tokens to a new wallet?
- Yes, once the new wallet is approved. Register it with the issuer under your verified identity, then transfer. In identity-registry designs such as ERC-3643, several wallets can be linked to one investor identity.
- What happens if my wallet is removed from the allowlist?
- You keep your recorded ownership, but you may be unable to send, receive or redeem until the issue is resolved. Removal can follow expired verification, a change in eligibility, sanctions screening or a legal order. The documents should explain the process.