Key Takeaways
Digital identity often involves apps requesting that you “prove” who you are, and then storing your personal data in a virtual silo. As you continue using multiple apps and services, your achievements, purchase history, reputation, and account status begin to split across dozens of services, often in databases you have no control over.
Moca Network’s new offering, MocaProof, is trying a different approach: it’s turning digital identity into something you can collect, reuse, and even earn rewards from, all while keeping your information private. MocaProof is currently live in beta on the Moca Chain testnet, with a mainnet launch planned for 2026.

Instead of treating identity like a form you fill out once per website or app, MocaProof makes it feel more like progress in a game. You complete “proof tasks,” build up your profile, and unlock opportunities over time. That’s where rewards come in: projects can run campaigns that pay out to users who complete certain verifications during a set window.
Essentially, MocaProof operates around these concepts:
Basically, you’re validating identity through MocaProof, and dApps can plug into the layer to verify you upon sign-up.
+68
MocaProof is a part of Moca Network’s broader identity stack, which is made up of the Moca Chain and its AIR Kit. Moca Network describes MocaProof as a “reputation platform” that helps users “build, control, and verify their digital identity.” The AIR Kit is a software development kit (SDK) that integrates decentralized identity features into dApps and wallets across chains.
From there, the dApps use verifiable credentials, but what are such credentials in the first place?
Think of a verifiable credential as a sort of badge for your identity. Like a doctor’s note that proves you’re sick:
MocaProof separates credentials across various categories like activity, loyalty, finance, and influence. That separation matters because you can prove one thing without sharing all of your info.
Have you ever wondered why something like a calculator app might need your location?
It’s odd, right?
Through MocaProof, a dApp can ask for the proof it needs, and nothing more.
Say you want to play a new blockchain-based game, but it only wants humans, not bots. Here’s how you’d sign up using MocaProof:
MocaProof stores credentials in its MocaID system.
Through Moca ID, MocaProof tries to make identity verification feel like a game rather than filling out paperwork. As you verify more credentials, you build a more reliable profile and can qualify for campaigns, which reward you for completing certain sets of proofs during a set time period.
This approach matters because it tells you what MocaProof is really trying to do. It’s not just “identity for identity’s sake,” the platform uses identity to unlock perks, allowlists, airdrops, and access to app features, all without third-party networks hoarding all of your data.
Think of it like a checklist: each verification is a completed step, and finishing a set can unlock rewards, perks, or early access to a certain dApp. This also gives projects a way to incentivize rewarding real users instead of bots, because they can require specific proofs before someone can claim anything.
Take Moca Network’s “Theme of the Month” campaign. In its first month, running from December 1 to December 30, 2025, Moca Network said it would highlight NFT credentials and offer $50,000 in $MOCA rewards, with the prize pool tied to how many credentials get verified across selected projects.

There’s also a beta referral campaign with a $10,000 $MOCA prize pool, which shows how MocaProof can reward specific behaviors, such as inviting new users.
This is the most important question for any identity application.
Kenneth Shek, project lead of Moca Network, said to CCN, “MocaProof does not store raw user data.” Instead, he says users see “a clear preview of the exact data points included,” and must approve issuance from there. He also stresses that “credentials can only be used with the user’s consent,” which is meant to keep the user in control at every step.
He explains that those data points are encrypted and stored via decentralized storage on Moca Chain, while MocaProof “only processes and records the verification outcome as a zero-knowledge proof,” such as a true/false result. As Shek put it, MocaProof is designed so “neither MocaProof nor third parties can access the underlying data.”
Shek says credentials are currently issued on testnet, which “does not yet enforce expiration.” On the mainnet, issuers will be able to set expiration rules based on credential type. He added that “issuers can define and enforce expiration rules by credential type,” and that the team is building revocation and lifecycle tools to streamline credential management systems over time.
If rewards exist, scammers and bots will try to cheat them. How does MocaProof prevent this?
Shek states that credentials are only issued by trusted issuers that control real records, like a game developer issuing credentials that you’ve played a game for X hours, verifying your human status. According to Shek, verifiers judge “issuer reputation and data quality rather than relying on a single centralized source.”
Otherwise, MocaProof includes something called “built-in deduplication,” which Shek claims will prevent multiple credentials from being generated via the same data. MocaProof is also working with partners like zkMe to introduce liveness and human-verification credentials. Shek said these human-check credentials help verifiers filter “bots, Sybil attacks, and large-scale credential farming.”
It also prevents phishing by supporting only whitelisted issuers and official domains, alongside limiting wallet actions to login-style signatures. In Shek’s words: “Wallet interactions are limited to authentication signatures (no spending approvals or transaction permissions).”
All this to say, MocaProof is aiming at a real problem. The internet has no simple way to prove your identity without also leaking personal data. The network’s pitch is that verifiable credentials and zero-knowledge proofs let you prove facts while keeping the underlying details private.
For you, approach the network’s identity verification with caution. Verify only what you need, pay attention to issuer names and domain links, and treat the rewards as a bonus, not the main reason to share your data.
It’s an identity and reputation tool that lets you collect verifiable credentials and share private “yes/no” proofs with apps. Not necessarily. Shek says you approve exactly what data points go into a credential, and apps get a proof result instead of raw data. Projects run campaigns that reward users who complete certain credential verifications during a set period. Full revocation tools are part of the planned rollout. For now, users can delete their AIR Account, and mainnet will support stronger expiration and lifecycle controls.