Stablecoin issuers are moving closer to a bank-style compliance regime under a proposed GENIUS Act rule focused on customer identification.
The draft rule would require permitted payment stablecoin issuers to maintain customer identification programs, bringing a core piece of stablecoin compliance closer to the framework long used by banks, brokerages, and other regulated financial firms. For issuers, exchanges, wallet providers, compliance vendors, and companies weighing stablecoin payment products, the practical takeaway is straightforward: identity checks are becoming a central part of the U.S. stablecoin rulebook, not a side issue.
The proposal centers on how issuers verify people and entities seeking to open accounts. It describes procedures for verifying identity where reasonable and practicable, keeping records of the information used in that process, and checking whether a customer appears on government lists of known or suspected terrorists or terrorist organizations.
That makes the rule less about the mechanics of blockchain settlement and more about the operational layer around it: onboarding, recordkeeping, sanctions and watchlist screening, and the compliance controls that sit between a stablecoin issuer and its users.
What the proposed rule would require
The customer-ID proposal is part of the broader implementation of the Guiding and Establishing National Innovation for U.S. Stablecoins Act, better known as the GENIUS Act. The law created a federal framework for payment stablecoins, and this rule would handle one of the more familiar but consequential pieces of financial regulation: knowing who the customer is.
For a stablecoin issuer, that would likely mean building or tightening systems that look much more like traditional financial compliance programs. The core requirements described in the draft include:
- Verifying the identity of a person seeking to open an account, to the extent reasonable and practicable.
- Maintaining records of identifying information used in the verification process, including names, addresses, and other customer details.
- Checking customers against government-provided lists tied to known or suspected terrorists or terrorist organizations.
None of those concepts are new in banking. The notable shift is their application to stablecoin issuers under a crypto-specific legal framework. That matters because payment stablecoins are designed to move like digital cash or settlement assets, while regulators are trying to attach familiar anti-money-laundering controls to the companies that issue and manage them.
Why this matters for stablecoin businesses
For companies operating in or around stablecoins, the proposal points toward a more expensive and more formal compliance environment. Issuers will need to evaluate whether their existing onboarding, monitoring, and recordkeeping systems can satisfy a bank-like customer identification program. Businesses that integrate stablecoins for payments may also need to understand which party is responsible for collecting and maintaining customer information.
The biggest operational impact is likely to fall on issuers seeking formal status as permitted payment stablecoin issuers. That label carries regulatory legitimacy, but it also comes with expectations that look closer to mainstream financial supervision than the looser crypto market practices of earlier years.
Crypto-native firms such as Tether and Circle already dominate the market for U.S. dollar-linked tokens, while traditional financial companies have also been exploring stablecoin products. The proposed rule would not decide the competitive race by itself, but it would raise the baseline for participation. Compliance capacity, not just distribution or liquidity, becomes part of the product.
The unresolved secondary-market question
A key issue is whether customer identification obligations should stop at account opening with issuers or extend deeper into secondary-market activity. That is where stablecoins are traded, transferred, and used after issuance, often through exchanges, wallets, decentralized protocols, and other intermediaries.
Fed Governor Michael Barr raised concern that the GENIUS Act framework may not yet go far enough to address illicit finance risks in secondary-market stablecoin transactions. His concern is that bad actors can route activity through digital asset channels that are harder to detect, even when some service providers are subject to anti-money-laundering and counter-terrorist-financing rules in their own jurisdictions.
The proposal asks whether customer identification program requirements should apply to secondary-market activity, and if so, under what circumstances. That question could become one of the most important parts of the rulemaking because it determines how far compliance duties travel beyond the issuer itself.
| Issue | Why it matters |
|---|---|
| Issuer account opening | Defines how stablecoin issuers verify customers before providing account access. |
| Recordkeeping | Determines what identity data issuers must retain and make available for compliance purposes. |
| Watchlist screening | Connects stablecoin onboarding to government lists tied to terrorism and illicit finance risk. |
| Secondary-market activity | Could expand compliance expectations beyond direct issuer relationships. |
The business decision: prepare before the final rule
For stablecoin companies, the immediate decision is not whether the rule is final. It is how much preparation makes sense before the final version arrives.
A cautious issuer will treat the proposal as a preview of the compliance architecture regulators expect: documented identity verification procedures, durable records, screening workflows, and clear responsibility for customer onboarding. A company waiting for final rules may avoid some wasted work, but it also risks being behind if the final framework closely tracks the proposal.
For buyers of compliance software, banking services, custody infrastructure, or stablecoin payment tooling, the proposal changes the evaluation criteria. The important questions are no longer limited to fees, settlement speed, supported chains, or liquidity. Buyers also need to ask how a provider handles customer identity, audit trails, sanctions and watchlist screening, and regulator-facing records.
Verdict
This is not a consumer feature update for stablecoins. It is a compliance reset aimed at making issuers behave more like regulated financial institutions when they onboard users.
The clearest near-term impact is on stablecoin issuers and the vendors that serve them. The more consequential fight is still ahead: whether regulators extend customer-ID expectations into secondary-market stablecoin activity. If they do, the compliance burden could reach far beyond the issuer-customer relationship and reshape how stablecoins are traded, integrated, and supported across the broader crypto market.