Five US Regulators Propose Bank-Style KYC Rules for Stablecoin Issuers — A Signal of Integration, Not Restriction

Key Highlights

• The Federal Reserve, FinCEN, FDIC, OCC, and NCUA jointly proposed requiring stablecoin issuers to run Customer Identification Programs equivalent to those banks already operate.
• The rule implements the GENIUS Act, which classifies stablecoin issuers as financial institutions under the Bank Secrecy Act — the legal hinge that triggers the compliance obligation.
• The proposal targets account creation, issuance, and direct redemption — not every downstream on-chain transaction.
• A 60-day public comment period follows publication in the Federal Register, with final implementation required before a statutory GENIUS Act deadline later in 2026.
• Established issuers with existing compliance infrastructure are likely to benefit; crypto-native newcomers face the steeper operational challenge.

Five US financial regulators have jointly proposed requiring stablecoin issuers to verify customer identities the same way banks do. The proposal is one more step in a clear direction: Washington is choosing to integrate stablecoins into the traditional financial system rather than keep them outside it.

What the Rule Does

The Federal Reserve, FinCEN, FDIC, OCC, and NCUA are proposing that Permitted Payment Stablecoin Issuers — PPSIs under the GENIUS Act — establish and maintain Customer Identification Programs comparable to those banks and credit unions already run. In practice, that means know-your-customer and anti-money-laundering checks at the points where users interact directly with the issuer: account creation, stablecoin issuance, and direct redemption back to dollars.

The legal hinge is the GENIUS Act's classification of stablecoin issuers as financial institutions under the Bank Secrecy Act. Once that classification applies, the full apparatus of identity verification and AML compliance follows automatically. The proposal is the regulatory machinery implementing that classification.

What It Doesn't Regulate

An important distinction often gets buried in headlines about crypto compliance rules. This proposal is not built to surveil every transaction that happens later on a decentralised exchange or smart-contract platform. The focus sits at the issuer's front door, where a regulated entity already controls the customer relationship — not across the open secondary market that follows. The rule regulates the regulated entity; it does not attempt to regulate the entire on-chain economy built around it. That is a meaningful limit on its reach, and one worth being precise about.

Why This Is Integration, Not Restriction

The more significant point is what the proposal signals about the direction of US stablecoin policy. For years, the largest open question was whether Washington would eventually move to restrict stablecoins as a shadow banking risk. This proposal provides a different answer. Stablecoins can exist and grow — but issuers must operate under the same identity and AML standards expected of any financial institution. The message is regulated inclusion rather than exclusion.

That matters for how the industry develops. A clear compliance path inside the US financial system is what the largest, most established issuers have been building toward for several years. A rule that confirms that path is open rewards the firms already prepared for it, while raising the barrier for newer entrants who would need to build that infrastructure from scratch.

Who Benefits and Who Faces the Harder Road

Counterintuitively, adding compliance burden can work in favour of incumbents. The issuers best positioned to absorb this rule share a recognisable profile: strong existing compliance teams and systems, established banking relationships that ease regulatory integration, transparent and audited reserves, and regulatory affairs functions already operating at scale.

For crypto-native issuers built primarily around on-chain flows, the operational challenge is likely to be steeper. Traditional identity verification is designed around names, addresses, and government-issued documents — not wallet addresses. Reconciling bank-grade KYC with blockchain-native onboarding, where users are accustomed to pseudonymous participation, is the friction point that matters most in implementation. This is where the gap between passing the rule and operationally embedding it will show up, and where the advantage of firms with existing banking infrastructure becomes most concrete.

What Comes Next

The proposal enters a 60-day public comment period following publication in the Federal Register. Stablecoin issuers, banks, crypto companies, and industry groups can submit feedback before the rule moves toward finalisation. The timeline carries statutory weight — the GENIUS Act's implementing regulations face a 2026 deadline, which is why the five agencies have been moving through related rulemakings in rapid succession this year.

The comment period is unlikely to produce significant pushback on the principle itself — that stablecoin issuers should know their customers is not a controversial position in Washington at this point. The substantive debate will likely centre on implementation specifics: which identity verification methods qualify, how the rules apply to issuers with primarily international customer bases, and what compliance timelines are realistic for smaller or newer entrants.

The broader takeaway is the one that matters most. The most important signal in this proposal may not be the KYC mechanics — those are familiar from decades of banking regulation. The signal is that the United States is formally folding stablecoin issuers into the same compliance framework governing traditional banks, confirming that the regulatory trajectory for stablecoins points toward mainstream financial infrastructure, not toward restriction or prohibition.