GENIUS Act KYC Rules Explained: Will Stablecoin Users Need Identity Verification?

Summary

U.S. regulators are moving closer to defining how customer identification will work for payment stablecoins under the GENIUS Act — but the proposed framework does not currently mean that every person who holds or transfers a stablecoin must complete KYC directly with the stablecoin issuer.

A joint proposal from FinCEN, the Federal Reserve, OCC, FDIC and NCUA would require permitted payment stablecoin issuers to maintain Customer Identification Programs, or CIPs, comparable to those used by traditional financial institutions. The proposal implements the GENIUS Act's requirement to treat permitted payment stablecoin issuers as financial institutions under the Bank Secrecy Act.

The critical distinction is between the primary market, where a customer interacts directly with the stablecoin issuer, and the secondary market, where tokens move among wallets, trading platforms and other blockchain applications.

The Blockchain Association's latest comment letter supports keeping issuer-level CIP obligations focused on direct primary-market customer relationships rather than extending them to every downstream stablecoin transfer.

The rules are still proposals, however. The comment period closed on August 21, 2026, and regulators may change the framework before final adoption.

What Is the GENIUS Act?

The GENIUS Act — the Guiding and Establishing National Innovation for U.S. Stablecoins Act — created the first comprehensive U.S. federal regulatory framework specifically for payment stablecoins.

The law establishes rules covering areas including:

• permitted stablecoin issuers;

• reserve assets;

• redemption;

• risk management;

• regulatory supervision;

• anti-money laundering compliance;

• customer identification.

The law was signed in July 2025, but much of its practical impact depends on implementing regulations written by U.S. financial agencies.

MEXC Crypto Pulse previously examined how the broader framework is moving toward implementation:

The Federal Reserve Is Advancing Payment Stablecoin Rules Under the GENIUS Act and Why It Is the Last Missing Piece

The important point is that the GENIUS Act itself establishes the framework, while regulators still need to determine exactly how some obligations operate in practice.

What Is the New Stablecoin KYC Proposal?

On June 18, the Federal Reserve announced an interagency proposal requiring permitted payment stablecoin issuers to maintain effective Customer Identification Programs.

The proposal was issued jointly by:

• Financial Crimes Enforcement Network, or FinCEN;

• Office of the Comptroller of the Currency, or OCC;

• Federal Reserve;

• Federal Deposit Insurance Corporation, or FDIC;

• National Credit Union Administration, or NCUA.

The Federal Reserve says the requirements would be comparable to existing CIP requirements applying to banks and credit unions.

Read the Federal Reserve’s official stablecoin CIP proposal overview

The public comment period closed on August 21, 2026.

What Is a Customer Identification Program?

A Customer Identification Program is a compliance framework designed to help a financial institution form a reasonable belief that it knows the identity of its customers.

Under the proposed stablecoin rules, an issuer's CIP would include procedures for collecting and verifying identifying information when a relevant customer relationship is established.

The proposed framework includes requirements involving information such as:

• legal name;

• date of birth or entity formation;

• physical address;

• identification number;

• documentary or non-documentary verification;

• recordkeeping;

• comparison with designated government lists.

The proposed rules also require records supporting verification to be retained for specified periods.

This sounds similar to the KYC process familiar to banking customers.

The difficult question is who counts as the issuer's customer.

Primary Market vs Secondary Market: The Most Important Distinction

Stablecoins operate differently from ordinary bank accounts.

Consider two different situations.

Primary Market

A company interacts directly with the stablecoin issuer to mint or redeem a large quantity of tokens.

The relationship looks like this:

Customer → Stablecoin Issuer → Mint/Redeem Stablecoin

Here, the issuer knows that it has a direct customer relationship.

Secondary Market

After stablecoins enter circulation, they can move across blockchain networks.

For example:

Wallet A → Wallet B

or:

User → Trading Platform → Another User

or:

Wallet → Smart Contract → DeFi Application

In those transactions, the original issuer may not have a direct account relationship with either party.

The Blockchain Association says the proposed rules appropriately focus issuer CIP obligations on primary-market relationships where the permitted issuer directly interacts with the customer.

Will Every Stablecoin User Need KYC?

Under the current proposal, not simply because someone receives or transfers a payment stablecoin.

This is the part most likely to be misunderstood.

The proposed framework does not automatically turn every blockchain wallet holding a stablecoin into a direct customer of the issuer.

Instead, the strongest issuer-level identity-verification requirement is centered on direct relationships.

A simplified model is:

The last two rows are important.

“No direct issuer KYC” does not mean “no compliance obligations anywhere.”

A regulated intermediary can separately have its own AML or KYC requirements.

Does This Mean USDT and USDC Wallet Transfers Will Require ID?

There is currently no basis for saying that every ordinary USDT or USDC wallet-to-wallet transfer will automatically require the user to submit identity documents directly to the issuer under this CIP proposal.

The proposal applies to permitted payment stablecoin issuers and their customer relationships.

Furthermore, the final GENIUS Act regulatory framework is still developing, and not every stablecoin or issuer's future status under the U.S. framework can simply be assumed.

The April FinCEN/OFAC rulemaking itself notes that because the GENIUS Act framework is not yet fully implemented, it is not yet determined which specific stablecoins will ultimately qualify as payment stablecoins and which issuers will qualify as permitted payment stablecoin issuers.

Therefore, users should avoid headlines suggesting:

“Every USDT holder now needs KYC.”

That is too broad.

Why Regulators Are Focusing on the Primary Market

There is a practical reason.

An issuer can realistically identify a customer when that person or company opens an account directly with it.

But a freely transferable blockchain token can move thousands of times after issuance.

Imagine:

Issuer → Institution A → Wallet B → Wallet C → DeFi Protocol → Wallet D

The issuer may be able to verify Institution A.

It may not have a direct relationship with Wallet B, C or D.

Trying to treat every downstream wallet as an issuer customer would fundamentally change how permissionless stablecoins operate.

What Did the Blockchain Association Ask Regulators to Do?

The Blockchain Association submitted comments supporting several aspects of the proposed rules.

Its most important position for ordinary stablecoin users is support for limiting issuer CIP requirements to direct primary-market relationships.

The association said it supported the proposal's decision not to extend issuer customer-identification obligations across all downstream secondary-market activity.

It also requested clearer definitions for terms including:

• account;

• customer;

• digital asset service provider.

The organization also urged regulators to avoid overlapping compliance rules and allow flexibility in how issuers verify customer information.

Why Secondary-Market Stablecoin Rules Are Still Controversial

The policy debate is not finished.

Federal Reserve Governor Michael Barr said in June that he was concerned the broader framework might not sufficiently address illicit-finance risks in secondary-market stablecoin transactions.

He specifically said he would review comments on whether portions of the CIP rule should extend further into secondary-market activity.

That makes the regulatory debate more nuanced than:

KYC vs no KYC.

The real question is:

Which entity should be responsible for identity and transaction controls at each layer of the stablecoin ecosystem?

CIP Is Not the Same as the Entire AML and Sanctions Framework

Another important distinction is that the June Customer Identification Program proposal is only one part of GENIUS Act implementation.

FinCEN and OFAC separately proposed broader AML/CFT and sanctions requirements for permitted payment stablecoin issuers.

The Treasury proposal would treat these issuers as financial institutions for Bank Secrecy Act purposes and require AML and sanctions-compliance programs.

That means:

CIP = identifying relevant direct customers

while:

AML/CFT = broader controls for detecting and managing illicit-finance risk

and:

sanctions compliance = restrictions involving sanctioned persons, entities and jurisdictions.

Those frameworks overlap, but they are not identical.

Why DeFi Is at the Center of the Debate

Permissionless DeFi makes secondary-market obligations especially difficult.

A stablecoin issuer can know who directly redeemed $10 million from an issuer account.

It may not know the real-world identity of someone interacting with an autonomous smart contract several transactions later.

Industry groups have warned that imposing obligations on issuers for activity they cannot realistically identify or control could encourage regulated stablecoins to operate only in permissioned blockchain environments.

The Hyperliquid Policy Center and Paradigm made a related argument earlier in 2026, supporting a primary-market focus while asking Treasury to clarify or narrow secondary-market obligations.

The policy trade-off is therefore significant:

Stronger identity controls

versus

preserving permissionless blockchain transferability.

What Does This Mean for Ordinary Stablecoin Users?

For most users, the practical outcome will depend on where they interact with stablecoins.

Directly With an Issuer

Expect strong identity-verification requirements if you open a direct issuer account, mint stablecoins or redeem through the issuer under a regulated customer relationship.

Through a Regulated Financial Service

The service provider may already impose KYC under its own regulatory obligations, regardless of whether the stablecoin issuer does.

Peer-to-Peer Wallet Transfer

The current issuer CIP proposal does not mean that every peer-to-peer transfer automatically requires a new identity check by the issuer.

DeFi and Smart Contracts

The treatment is more complex because regulatory responsibilities can depend on whether an identifiable intermediary is providing a regulated service.

Future AML and sanctions rules remain especially relevant here.

Why This Matters Beyond KYC

The regulatory architecture could determine what kind of product U.S.-regulated stablecoins become.

There are two broad possibilities.

One resembles digital bank money:

verified accounts → controlled transfer environment → high compliance

The other preserves open blockchain transferability:

KYC at regulated gateways → freely transferable token in secondary markets

The current CIP proposal leans more toward the second architecture for issuer-level customer identification.

That could prove critical to whether compliant stablecoins remain useful across:

• payments;

• cross-border settlement;

• tokenized assets;

• DeFi;

• blockchain commerce.

MEXC Learn previously covered the broader rulemaking process in:

MEXC On-Chain Daily Report: U.S. Treasury Seeks Public Comment on GENIUS Act Stablecoin Rules

The latest customer-identification debate shows why implementation details matter as much as the original legislation.

Are the GENIUS Act KYC Rules Final?

No.

This point is essential.

The customer-identification framework discussed here remains a proposed rule.

The Federal Reserve's official proposal page shows that public comments closed on August 21, 2026. Regulators must now review those comments before determining the final rule.

Specific requirements could therefore change.

Users, companies and investors should distinguish between:

law → proposed implementing rule → final regulation → compliance deadline.

They are not the same stage.

What Should Crypto Users Watch Next?

The most important developments are:

1. The final Customer Identification Program rule

2. Final FinCEN AML requirements

3. Final OFAC sanctions-compliance rules

4. How regulators define “customer” and “account”

5. Treatment of secondary-market transactions

6. Treatment of DeFi and permissionless wallets

7. Which issuers qualify as permitted payment stablecoin issuers

These details will determine whether GENIUS Act implementation preserves a two-layer stablecoin system:

regulated entry and exit points + transferable blockchain assets

or moves toward a more tightly permissioned model.

FAQ

Does the GENIUS Act require KYC for stablecoins?

The GENIUS Act requires permitted payment stablecoin issuers to maintain effective customer-identification and AML frameworks. Regulators are still finalizing how those requirements work in practice.

Will every stablecoin holder need to complete KYC with the issuer?

The current proposal does not mean every person who holds or receives a stablecoin automatically becomes a direct customer of the issuer. The proposed CIP framework focuses primarily on direct customer relationships in the primary market.

Do peer-to-peer stablecoin transfers require issuer KYC?

Under the current proposal, an ordinary downstream peer-to-peer transfer would not automatically create a new direct issuer-customer relationship requiring issuer-level CIP verification.

Will USDT and USDC users need KYC?

Users interacting directly with regulated issuers or regulated service providers may face identity-verification requirements. It is inaccurate, however, to say that every person simply holding or transferring USDT or USDC must automatically complete KYC directly with the issuer under the current proposal.

What is the difference between the stablecoin primary and secondary markets?

The primary market involves direct issuance or redemption relationships with the issuer. The secondary market involves tokens already in circulation moving among wallets, trading platforms and blockchain applications.

Are the new stablecoin KYC rules already final?

No. The interagency Customer Identification Program proposal completed its public comment period on August 21, 2026. Regulators still need to determine the final requirements.

Could the final rule change?

Yes. Federal regulators may revise proposed requirements after reviewing public comments. Federal Reserve Governor Michael Barr has specifically raised questions about whether secondary-market illicit-finance risks require additional measures.

Disclaimer: This article is provided for general informational purposes and does not constitute legal, regulatory, tax or financial advice. GENIUS Act implementation remains subject to ongoing federal rulemaking, and final requirements may differ from current proposals. Individuals and businesses should consult qualified legal or compliance professionals regarding obligations that apply to their activities.