FinCENKYC / CDDJune 22, 2026

Proposed Rule: Stablecoin Issuers Must Have BSA-Compliant Customer ID Programs

FinCEN, OCC, the Federal Reserve, FDIC, and NCUA are jointly proposing a rule under the GENIUS Act that would formally classify permitted payment stablecoin issuers as 'financial institutions' under the Bank Secrecy Act and require them to maintain a Customer Identification Program (CIP). This means stablecoin issuers would face the same KYC/AML obligations as banks and MSBs, including identity verification at onboarding. Any firm issuing, managing, or providing custody or payment rails for payment stablecoins needs to assess whether it falls within the rule's scope and begin gap-analyzing its CIP infrastructure.

What to do

Review the proposed rule's definition of 'permitted payment stablecoin issuer,' assess whether your firm meets that definition, and begin a gap analysis of your existing CIP program against BSA financial institution requirements before the comment period closes.

Who this affects

Crypto ExchangeCrypto CustodianWallet ProviderPayments CompanyBank / Credit UnionTrust CompanyMoney Services BusinessFintech / Neobank

Does this affect your program?

Pick your institution type for an instant read on whether you're in scope — then see exactly which sections of your own policies this changes.

Source

Read the official publication

This radar entry is educational and does not constitute legal advice. Summaries are AI-assisted and grounded in the linked official source; always verify against the primary source and consult qualified legal counsel for jurisdiction-specific guidance.

Related developments

FinCEN

FinCEN Withdraws Proposed Rule Targeting CVC Mixing as AML Risk

FinCEN is withdrawing its Section 311 finding and proposed rulemaking that would have classified international convertible virtual currency (CVC) mixing as a class of transactions of primary money laundering concern, along with associated enhanced recordkeeping and reporting requirements. This means the specific regulatory burden proposed for CVC mixing transactions will not move forward. Compliance teams should note that while the formal rule is withdrawn, mixing activity may still carry AML risk warranting internal controls.

FinCEN

FinCEN Withdraws Proposed Unhosted Wallet Reporting & KYC Rule

FinCEN is withdrawing the NPRM that would have required banks and MSBs to file reports, maintain records, and verify customer identities for transactions involving convertible virtual currency or digital assets held in unhosted wallets or wallets in certain foreign jurisdictions. FinCEN states it will take no further action on this proposal. Firms that built compliance frameworks anticipating this rule should reassess their obligations, though voluntary best practices around unhosted wallet due diligence may still be prudent.

FinCEN

FinCEN Proposes Ban on Fund Transfers Tied to Russia-Linked A7 Network

FinCEN has issued a finding and proposed rule declaring that transactions involving any company outside the U.S. controlled by the A7 Network — a sanctions-evasion and money-laundering service with ties to Russia, Iran, and terrorist proxies — are a class of primary money laundering concern. The proposed rule would prohibit all covered financial institutions from transmitting funds in connection with that class of transactions. Crypto exchanges, payment processors, and MSBs that handle cross-border transfers must take immediate note, as violations could expose them to significant BSA and sanctions liability.

OCC

Regulators Clarify: Mobile Driver's Licenses & Digital IDs Can Satisfy KYC Rules

Five federal regulators — OCC, FinCEN, the Federal Reserve, FDIC, and NCUA — jointly issued FAQs confirming that state-issued mobile driver's licenses and other government-issued verifiable digital credentials (VDCs) can be used to satisfy Customer Identification Program (CIP) requirements under the Bank Secrecy Act. This is significant guidance for crypto and fintech firms because it provides regulatory clarity on accepting digital identity documents during onboarding, reducing reliance on physical ID checks. Compliance officers should review the FAQs carefully to understand the conditions and limitations under which VDCs qualify as acceptable identity verification methods.

Stay ahead of every rule change

PliOS monitors FinCEN, OCC, OFAC, the SEC and CFTC and tells you which of your policies each new rule affects — with the edit already drafted. Start free.

Run My Free Assessment