Stablecoin KYC fight heats up over secondary transfers
The gist
Regulators and crypto heavyweights are clashing over whether stablecoin issuers should track every transaction—or just vet customers at the door.
What to know
- The GENIUS Act requires stablecoin issuers to run bank-style ID checks only at onboarding, excluding the 99% of transactions that are peer-to-peer.
- Five federal agencies want stricter KYC rules and record-keeping, but their conflicting proposals are already causing regulatory fragmentation.
- Industry leaders like Franklin Templeton and the Blockchain Association argue that transaction-by-transaction KYC is unworkable and push for privacy-preserving solutions and clear rules.
Primary vs. Secondary Oversight
Regulators are drawing a sharp line between onboarding checks and peer-to-peer transactions, crafting a compliance framework that targets issuers without stifling 99% of stablecoin activity.
The GENIUS Act marks a pivotal move to integrate permitted payment stablecoin issuers into the federal financial regulatory framework by mandating customer identification programs (CIPs) akin to those used by traditional financial institutions. This regulatory focus is sharply concentrated on primary market activities where issuers directly onboard customers, deliberately excluding peer-to-peer secondary market transfers, which constitute approximately 99% of stablecoin transaction volume, from the full scope of compliance obligations. Such a distinction reflects a nuanced approach to balancing effective oversight with practical enforcement limits.
Five federal agencies—FinCEN, OCC, Federal Reserve, FDIC, and NCUA—jointly proposed that stablecoin issuers collect comprehensive customer information including names, addresses, birth or formation dates, and identification numbers before account opening, with verification records retained for five years. This aligns stablecoin issuers under the Bank Secrecy Act umbrella, imposing enhanced KYC, AML, and sanctions screening obligations that mirror traditional financial institution standards. However, the FDIC’s proposed rules introduce notable divergences from the OCC’s framework, particularly regarding reserve requirements, redemption mechanics, and supervisory controls, signaling emerging regulatory fragmentation within stablecoin oversight.
The enforcement timeline for these customer identification and compliance rules is synchronized with the broader GENIUS Act licensing framework, with final rules expected to take effect 12 months after publication and the licensing regime commencing on January 18, 2027. Despite some delays in rulemaking, this schedule provides stablecoin issuers a clear window to achieve full compliance, underscoring regulators’ intent to establish a robust yet phased approach to integrating stablecoins into the U.S. financial crime compliance regime.
Industry Pushes for Practical KYC
Major asset managers and the Blockchain Association are uniting to demand that KYC rules focus on direct customer relationships, warning that transaction-level checks would cripple market efficiency and privacy.
By mid-2026, a coalition of major asset managers including Franklin Templeton, JP Morgan Asset Management, Janus Henderson, and WisdomTree strongly advocated for modernizing KYC requirements for tokenized funds to align with stablecoin regulations under the GENIUS Act. They emphasized that KYC obligations should be confined to onboarding and offboarding processes, avoiding burdensome verification for every transaction, thereby promoting streamlined compliance and enhancing the competitiveness of U.S. capital markets.
The Blockchain Association emerged as a vocal proponent for limiting stablecoin customer identification strictly to primary market interactions where issuers have direct contractual relationships with customers. They argued that extending KYC requirements to secondary market peer-to-peer transfers—where roughly 99% of stablecoin activity occurs—is impractical and exceeds the GENIUS Act’s authority, as issuers lack oversight or control over these transactions.
Beyond advocating for scope limitations, the Blockchain Association pushed for regulatory clarity and coordination among U.S. agencies to prevent conflicting compliance deadlines and duplicative paperwork. They also championed the integration of privacy-preserving technologies such as zero-knowledge proofs to satisfy customer identification program requirements without exposing sensitive personal data, reflecting a forward-looking approach that balances compliance with user privacy.
Regulators appear to acknowledge the industry’s concerns, recognizing the practical limitations of imposing KYC on secondary market stablecoin transactions and signaling that final rules will likely maintain a clear distinction between primary issuer-customer compliance and secondary market activity. This tacit acceptance underscores a growing consensus that effective regulation must respect the operational realities of decentralized token markets while ensuring robust compliance where direct issuer relationships exist.
Tech and Liability Challenges Loom
Industry voices warn that enforcing KYC on secondary transfers is technically unworkable and legally ambiguous, spurring calls for zero-knowledge proof adoption and clearer liability rules.
Applying KYC requirements in secondary stablecoin markets reveals significant practical challenges due to the complex token flows through multiple wallets and intermediaries, which obscure issuer relationships beyond the primary customer. Industry stakeholders, including America’s Credit Unions, emphasize the need for clear regulatory guidance on compliance responsibilities and liability across wallet-to-wallet transfers, custodial versus non-custodial wallets, and third-party technology providers to ensure feasible enforcement without overextending issuer obligations.
The Blockchain Association strongly advocates limiting customer identification program (CIP) obligations to primary market activities where a direct contractual relationship exists, arguing that imposing KYC on secondary market transactions is impractical and misaligned with blockchain infrastructure. They highlight that peer-to-peer transfers occur without issuer involvement or knowledge, as smart contracts lack pre-settlement approval functions, and point to the GENIUS Act’s statutory language to foreclose issuer obligations over circulating stablecoin transfers.
Technological innovation, particularly zero-knowledge proof (ZKP) technologies, offers a promising path to reconcile compliance with privacy concerns by enabling identity verification without exposing sensitive personal data. The Blockchain Association urges regulators to accept ZKPs as an acceptable CIP method, addressing recordkeeping concerns and calling for synchronized rulemaking timelines under the GENIUS Act to avoid conflicting compliance deadlines that could burden stablecoin issuers.
Calls for a technology-neutral and coordinated regulatory approach extend to clarifying which secondary market actors, such as exchanges and custodians, should bear CIP obligations, as current gaps create asymmetries and redundant requirements. The Bank Policy Institute and The Clearing House Association push for consistent application of CIP rules across all digital asset service providers, while the Blockchain Association warns against treating all interactions as accounts, cautioning that overbroad definitions could impose unnecessary burdens on customers already regulated under existing Bank Secrecy Act frameworks.
