I used to think the biggest risk in crypto was a bad smart contract. Then I met Joan Capdevila’s story—a former World Cup champion who almost couldn’t play the 2026 final because a government database flagged a trip to Iran he took years earlier. His ESTA was denied. His career hung on a presidential waiver. This isn’t an immigration story. It’s a story about centralization, the illusion of permissionless movement, and why blockchain’s promise of self-sovereign identity isn’t just a nice-to-have—it’s a life raft.
Here is what the charts won’t tell you: the most dangerous technical debt of our age isn’t code. It’s identity infrastructure built by governments and corporations that own the keys to your mobility. Capdevila’s case is a clean slice of how legacy systems fail—and why crypto’s answer, decentralized identity, isn’t just for financial inclusion. It’s for human freedom.
Context: The Visa Wall
The Visa Waiver Program (VWP) allows citizens of 40 countries—including Spain—to visit the U.S. for up to 90 days without a visa, using an electronic authorization (ESTA). That’s a convenience, not a right. In 2021, the U.S. Department of Homeland Security added a rule: anyone who had traveled to Iran, Iraq, Syria, Sudan, Libya, Somalia, or Yemen since March 2011 is ineligible for ESTA. The rule was justified by national security, but it’s an administrative blacklist. You don’t get a hearing. You don’t get a right to appeal. You just get a rejection.
Capdevila, a 45-year-old retired footballer who won the World Cup with Spain in 2010, was selected for the 2026 World Cup final squad as a ceremonial ambassador or emergency substitute—the exact role isn’t clear, but he needed to be in the U.S. for the final. He applied for ESTA. The system flagged his Iranian travel. Denied.
The story could have ended there. But Capdevila had something most people don’t: a direct line to political power. A Trump-era appeal—possibly a presidential waiver—was granted days before the final. He flew to the U.S., played, and the world moved on.
But the rest of us don’t have a presidential hotline. And that’s the point.
Core: How Blockchain Re-Architects Identity
The Capdevila case exposes three failures of centralized identity: opacity, irreversible judgments, and single points of failure. Blockchain-based Self-Sovereign Identity (SSI) addresses all three. Let me walk through the technical meat.
1. Zero-Knowledge Proofs for Selective Disclosure
Capdevila’s problem was that he had to disclose his entire travel history to the ESTA system. There was no way to prove he wasn’t a security threat without revealing every country he visited. Zero-knowledge proofs (ZKPs) change that. A ZKP allows a prover to convince a verifier that a statement is true without revealing the underlying data. For example, Capdevila could generate a ZK proof that he visited Iran for a legitimate purpose (e.g., a FIFA event) or that his trip was before a certain date that’s still within the allowed window (if the rule applies only to trips after a specific date). The U.S. system could verify the proof without accessing the raw travel history.
I implemented a similar system in my work on zero-knowledge credentials for content authenticity at VerifiableTruth. The math is sound. The challenge is adoption, not technology. But if the U.S. government wanted to—and it’s in their interest for sports diplomacy—they could accept ZKPs from federally approved credential issuers (like FIFA or UEFA). That would preserve security while protecting privacy.
2. Verifiable Credentials on Chain
Capdevila’s identity was a collection of weak signals: passport data, airline records, and a government database. None of these were cryptographically linked or tamper-proof. A verifiable credential (VC) issued by the Spanish government and anchored on a public blockchain could have provided a trusted, portable attestation: “Joan Capdevila is a former World Cup winner, has no criminal record, and his trip to Iran was for a sanctioned FIFA event.” The U.S. CBP could verify the credential’s signature using a public registry, without needing to contact Spain or access any other database.
The beauty of VCs on-chain is that they create an auditable trail. If the U.S. denies someone based on a VC, the denial is recorded, creating transparency. If the denial is arbitrary, the public can see it. That’s a deterrent against the kind of black-box decisions that nearly derailed Capdevila’s career.
3. Decentralized Identifiers (DIDs) for Portability
Currently, Capdevila’s digital identity is scattered across silos: the Spanish passport database, airline loyalty programs, FIFA’s player registry, and the U.S. ESTA system. Each silo has its own rules, and none are interoperable. A DID is a globally unique, persistent identifier that is controlled by the individual, not a central authority. Capdevila could have a DID that he controls via a private key. When the U.S. asks for proof of his identity, he presents his DID and a verifiable credential. The U.S. system resolves the DID to a DID document that contains public keys and service endpoints. No centralized database is required.
This is the same architecture that powers decentralized finance: permissionless access, cryptographic security, and user control. The difference is that instead of moving money, you’re moving identity—and that’s arguably more valuable.
Contrarian: Why Blockchain Won’t Fix This—Yet
I know what the critics will say. The U.S. government doesn’t need to accept blockchain credentials. They can still deny anyone for any reason. And even if they accept ZKPs, the decision is still political. Capdevila’s waiver came from the White House, not a smart contract. So what’s the point?
The point is that blockchain shifts the power asymmetry. Today, the individual has zero leverage. Tomorrow, they could have cryptographic proof of their identity that is so robust and transparent that denying them becomes a political liability, not a technical one. If the U.S. denies a blockchain-authenticated athlete, that denial is on the public record, verifiable by any third party. The cost of arbitrary denial goes up.
But there’s a deeper trap: we might build a system that’s technically decentralized but functionally centralized. If the credential issuers are still governments, we haven’t solved the sovereignty problem. The Spanish government could revoke Capdevila’s credential at will. That’s why we need decentralized issuers—DAOs of ambassadors, federations, or even a global sports credential network governed by a consortium of athletes and leagues, not nation-states.
I saw this failure in 2021 when I built On-Chain Diaries. We minted NFTs that certified local art events, but the art world still relied on centralized curators for legitimacy. The technology alone doesn’t decentralize power; you need the social and governance layer too. The same applies here. A ZKP-based identity system is only as trustless as the issuers it allows.
The Code Audit Perspective
Let me be specific, like I was when I audited Gnosis Safe’s multi-sig logic in 2017. The ESTA denial system is a classic “fail-closed” design: if anything is suspicious, deny. That’s fine for security, but it imposes high false positive costs. A blockchain-based system could be “fail-open with proofs”: allow someone with a valid ZKP to pass unless there’s a specific override, and log that override. The technology exists. Ethereum’s Semaphore library, for instance, supports zero-knowledge group membership proofs that pseudonymously verify someone is on a whitelist without revealing their identity. Adapt that to travel.
Based on my experience auditing smart contracts for multi-sig wallets, I’ve seen how a single point of failure—a compromised key—can lock out millions. The ESTA system is the same: a single database decision can lock out a person. Blockchain distributes the trust. With a DID and ZKP, even if one government database goes rogue, the individual retains control.
Governance: Who Rules the Identity Layer?
This is where my DAO governance experience kicks in. The “code is law” crowd will say that smart contracts can enforce identity rules neutrally. But who writes the rules? Who updates the list of blacklisted countries? In a decentralized identity system, the governance of the credential schema and the revocation policies must be transparent and contestable. We learned from the multi-sig hell of early DAOs that upgrade keys always centralize power. The same will happen to identity protocols unless we design governance that requires broad consensus for changes.
Imagine a protocol like “IDOpt.” It issues credentials for athletes. To add a new country to the restriction list, a proposal must pass a vote of credential holders (athletes) with a time lock. The rule becomes a smart contract that everyone can see. When Capdevila applies, the contract checks his ZK proof against the rules. If he’s denied, the reason is recorded on-chain. That is a radical departure from today’s black box.
But here’s the contrarian twist: even that doesn’t guarantee fairness. The majority could still vote for unfair restrictions. Democracy isn’t always just. The difference is that the minority—say, athletes from certain countries—could fork the protocol or create an alternative. That’s the true decentralization: exit options.
The Takeaway: Follow the Fear, Not the Chart
Capdevila got lucky. He had a backchannel to power. Most people don’t. The fear that haunts every athlete, every artist, every human who crosses borders is that a faceless system can decide you’re not welcome. That fear is real. The chart of government identity spending goes up, but trust goes down.
Blockchain won’t instantly solve visa problems. But it can create the infrastructure for a world where identity is a property right, not a privilege. In that world, Capdevila would have never needed a presidential waiver. He would have swiped his DID, presented a ZKP, and walked through.
If you can build that infrastructure, do it. Integrity is not a feature; it’s a responsibility.
_Follow the fear, not the chart._
