Federal financial regulators are moving to formalize Customer Identification Program (CIP) requirements for non-bank entities, including those facilitating transactions for stablecoins and other digital assets. The Federal Reserve Board, alongside the Office of the Comptroller of the Currency (OCC), the Federal Deposit Insurance Corporation (FDIC), and the National Credit Union Administration (NCUA), is establishing standardized procedures to verify user identities and screen against government watchlists to mitigate money laundering risks.
What are the proposed identification requirements?
The proposed rule mandates that financial institutions implement rigorous procedures to verify the identity of any individual opening an account. According to the Federal Reserve, these procedures must include three core components: verifying identity to a reasonable extent, maintaining detailed records of identifying information—such as names and addresses—and cross-referencing account holders against government-provided lists of known or suspected terrorists. These requirements aim to align non-bank financial service providers with the existing USA PATRIOT Act standards already enforced at traditional commercial banks.
Who is subject to these new regulations?
While traditional banks have long adhered to these standards, the current regulatory push specifically targets entities that occupy the intersection of traditional finance and digital assets. The Financial Crimes Enforcement Network (FinCEN) is simultaneously working on rules to apply anti-money laundering (AML) provisions to issuers of payment stablecoins. By expanding the scope of the Bank Secrecy Act, regulators intend to close gaps where digital asset issuers might currently operate with less oversight than chartered depository institutions.
How does the rule-making process work?
The agencies are currently in the “notice of proposed rulemaking” phase, which follows an initial period of preliminary feedback. In September 2024, regulators collected 450 public comments to refine their approach. This current 60-day comment period allows stakeholders to weigh in on the specific language of the proposal before the agencies finalize the rules. Once this period closes, the agencies will review the feedback and move toward issuing final joint regulations, at which point the new standards will become enforceable.
Comparison of Regulatory Stages
| Stage | Purpose | Status |
|---|---|---|
| Preliminary Request | Gathering industry feedback on implementation | Completed (450 comments) |
| Notice of Proposed Rulemaking | Public review of specific regulatory language | Active (60-day period) |
| Final Rule | Codification and enforcement | Pending |
Why this matters for the financial sector
This initiative represents a significant shift toward “same activity, same risk, same regulation” oversight. By requiring digital asset issuers to maintain the same identity verification standards as traditional lenders, regulators are attempting to diminish the use of anonymous accounts in financial crimes. According to the U.S. Department of the Treasury, these measures are intended to prevent illicit actors from exploiting gaps in the digital ecosystem to move funds globally. Market participants should anticipate increased compliance costs as firms upgrade their internal reporting and identity-verification infrastructure to meet these federal benchmarks.
Keep reading