FDIC Proposes Customer Identification Program Requirements for Permitted Payment Stablecoin Issuers

Reference: FIL-29-2026

Official publication: Read the full FIL-29-2026 on the agency website

On June 18, 2026, the Federal Deposit Insurance Corporation, in close coordination with the Board of Governors of the Federal Reserve System, the Office of the Comptroller of the Currency, the National Credit Union Administration, and the Financial Crimes Enforcement Network, jointly issued a Notice of Proposed Rulemaking. This proposed framework seeks to establish formalized Customer Identification Program requirements specifically tailored for Permitted Payment Stablecoin Issuers. Driven by the statutory mandates of the Guiding and Establishing National Innovation for U.S. Stablecoins Act, this regulatory initiative officially designates these issuers as financial institutions under the Bank Secrecy Act framework. The proposal marks a definitive shift toward incorporating digital asset infrastructure into the established anti-money laundering and countering the financing of terrorism compliance architecture that governs traditional depository institutions.

Executive Summary

• Statutory Reclassification: The proposed rule integrates Permitted Payment Stablecoin Issuers into the Bank Secrecy Act framework as financial institutions, mandating full compliance with federal anti-money laundering disciplines.
• Core Identity Metrics: Issuers will be legally required to implement written procedures to collect and verify essential customer identifying data, including full legal name, date of birth or legal formation, physical address, and government identification numbers.
• Affiliated Program Integration: Subsidiary issuers owned by Insured Depository Institutions may legally leverage the established compliance infrastructure and Customer Identification Programs of their parent institutions, subject to risk-based modifications.
• Definitive Enforcement Timeline: The public comment window is set to close on August 4, 2026, with the underlying statutory requirements scheduled to take effect no later than January 18, 2027.

What the Regulator Issued

The Federal Deposit Insurance Corporation, alongside its federal regulatory counterparts, published a joint Notice of Proposed Rulemaking titled Notice of Proposed Rulemaking: Permitted Payment Stablecoin Issuer Customer Identification Program. The official announcement and full text can be accessed through the Federal Deposit Insurance Corporation Official Portal. This issuance represents the execution of regulatory responsibilities under the Guiding and Establishing National Innovation for U.S. Stablecoins Act, a legislative milestone that structurally bridges digital asset issuance with traditional banking supervision.

The primary objective of this administrative action is to mandate that all designated stablecoin issuers design, implement, and maintain an independent, written Customer Identification Program. This program must be directly integrated into the issuer’s broader Bank Secrecy Act and anti-money laundering compliance framework. By establishing these rules, the regulators are extending the long-standing requirements of Section 326 of the USA PATRIOT Act to the expanding domain of dollar-gegged digital assets. This proposal follows a broader sequence of coordinated regulatory releases issued in April 2026, which addressed underlying reserve asset compositions, mandatory redemption protocols, and net capital compliance thresholds for digital asset participants.

Who Is Impacted

The direct impact of this proposed regulation falls squarely upon entities operating as Permitted Payment Stablecoin Issuers, with particular emphasis on those structured under the administrative oversight of the Federal Deposit Insurance Corporation. This encompasses bank-affiliated subsidiaries, chartered depository entities engaging in digital asset activities, and any specialized non-bank institutions operating within this statutory perimeter. For institutions that have structured their digital asset operations as direct subsidiaries of Insured Depository Institutions, the rule introduces nuanced operational flexibility, allowing them to coordinate compliance activities with their parent banks while ensuring localized risk assessment.

Beyond the primary issuers, the practical ramifications extend significantly to downstream participants within the digital finance ecosystem. Third-party technology providers, decentralized platform developers, hosted wallet service providers, and compliance technology vendors will face immediate pressure to alter their technical architectures. Any system facilitating the primary issuance or redemption of permitted payment stablecoins must now adapt to capture, validate, and securely archive sophisticated identifying information. Financial intermediaries and institutional market makers engaging in bulk redemptions will similarly need to ensure their corporate records align precisely with the newly articulated regulatory expectations.

Key Dates and Deadlines

The regulatory trajectory for this administrative proposal follows a strict statutory schedule. Administrative and compliance departments must prioritize the following timelines to ensure active participation and eventual operational readiness:

• August 4, 2026: This date marks the official closure of the sixty-day public comment window following publication in the Federal Register. All formal industry feedback, technical critiques, and requests for administrative modification must be submitted to the participating regulators on or before this deadline.
• January 18, 2027: This serves as the final statutory effective date mandated under the Guiding and Establishing National Innovation for U.S. Stablecoins Act. The law requires full implementation of these standards by this date, or exactly one hundred and twenty days following the final publication of these administrative rules, whichever occurs earlier.

Practical Action Checklist

To align institutional practices with the pending administrative mandates, compliance officers and executive leadership should execute the following programmatic actions:

1. Conduct Infrastructure Gap Analysis: Review all existing digital onboarding flows to ensure systems are technically capable of collecting the mandatory four-point identifiers: legal name, date of birth or organizational formation, complete physical address, and valid government identification numbers.
2. Assess Parent Institution Alignment: For subsidiary issuers, initiate a comprehensive legal and operational review of the parent Insured Depository Institution’s active Customer Identification Program to determine the feasibility of program sharing or infrastructure leveraging.
3. Draft Tailored Program Documentation: Author a distinct, comprehensive, and written Customer Identification Program document that explicitly accounts for the transaction velocity, ledger mechanics, and specific risk vectors associated with stablecoin distribution.
4. Establish Verification Failure Protocols: Develop clear, automated operational procedures detailing the precise steps to be taken when a customer’s identity cannot be validated, including automated account freezes, manual compliance overrides, and explicit triggers for filing Suspicious Activity Reports.
5. Audit Third-Party Vendor Agreements: Review and update service-level contracts with identity verification and knowledge-based authentication vendors to ensure their data processing speeds and accuracy levels conform to federal banking standards.
6. Implement Ledger-to-Identity Mapping: Create robust internal data schemas that securely link verified customer identification records with primary public-key ledger addresses used during issuance and redemption phases.
7. Formulate Regulatory Feedback: Compile technical data regarding onboarding latency and operational frictions to draft and submit a formal public comment letter before the August 4, 2026 administrative deadline.
8. Execute Targeted Personnel Training: Conduct dedicated training operations for compliance personnel, focusing specifically on the cross-section of blockchain transactional analysis and traditional Bank Secrecy Act reporting standards.

Open Questions / Watch Items

While the joint proposal provides a comprehensive foundation for identity verification within the stablecoin market, several critical legal and operational ambiguities remain unresolved. A primary concern is the precise administrative interpretation of verifying identity “to the extent reasonable and practicable” within a high-throughput, near-instantaneous digital ledger environment. Regulatory guidance has historically relied on manual or batch verification techniques that conflict with the automated onboarding expectations of modern digital platforms. Market participants must carefully monitor how final rule revisions address this operational friction without diluting core Bank Secrecy Act objectives.

Additionally, the industry must watch how these identity mandates intersect with non-custodial or self-hosted wallet frameworks during the secondary redemption process. The rule heavily penalizes unverified primary transactions, but the mechanism for verifying intermediate transfers before an ultimate redemption request remains textually opaque. Furthermore, the coordination between this proposal and the capital reserve regulations issued in April 2026 warrants close observation, as the structural segregation of reserve assets may introduce distinct compliance triggers. Financial institutions should closely observe upcoming joint agency statements to determine whether additional guidance will clarify third-party reliance parameters or cross-border verification recognitions.

My Law Tampa is the publisher of this regulatory update and maintains an active administrative practice specializing in banking compliance, corporate governance, and digital asset regulation. The firm assists depository and non-depository financial institutions navigating complex federal rulemakings and structural anti-money laundering transformations.

The information provided in this memorandum is for general educational and informational purposes only and does not constitute formal legal advice. The distribution or receipt of this document does not establish an attorney-client relationship between the reader and My Law Tampa, and institutions should consult qualified counsel regarding their specific operational circumstances.

Source Materials

• Official publication: FIL-29-2026
• Regulator archive: FDIC memo archive
• Memo library: browse the full regulatory memo archive
• Related memo: Agencies Remove References to Reputation Risk in Interagency Documents
• Related memo: FDIC Office of Ombudsman 2025 Annual Report: Implications for Institutional Dispute Resolution
• Related memo: FDIC Summary of Deposits Survey and Filing Instructions for June 30, 2026