US federal financial agencies have proposed customer identification program (CIP) requirements that would apply directly to stablecoin issuers, extending Bank Secrecy Act-style onboarding obligations to a corner of the digital asset market that has so far operated largely outside formal AML examination frameworks.

The proposal, flagged by the law firm Cooley in its Finsights alert, targets issuers of payment stablecoins — entities that mint and redeem dollar-pegged tokens. Under the proposed framework, issuers would need to verify the identity of customers transacting in their tokens, maintain risk-based CIP procedures, and keep records that examiners and law enforcement can act on.

What does the proposal actually require?

Customer identification programs are a foundational anti-money-laundering control long imposed on banks and certain other financial institutions. Applied to stablecoin issuers, a CIP would function as a gate at the point of issuance and redemption — the two points where digital tokens convert into regulated fiat money.

For issuers, the operational consequences are substantial:

• Identity verification and screening at issuance and redemption channels
• Risk-based procedures tailored to the issuer's customer base and distribution model
• Recordkeeping sufficient to satisfy supervisory review
• Potential obligations when tokens move through secondary markets and intermediaries

The hardest design question is where the compliance perimeter sits. Most stablecoins circulate through decentralized exchanges and non-custodial wallets that the issuer never touches. Regulators must decide whether the issuer's CIP duty attaches only at direct mint and redeem windows, or extends further into the secondary market — a distinction that determines how much of the on-chain economy falls inside the program.

Who counts as an issuer?

The proposal lands amid an ongoing definitional fight over what makes an entity a stablecoin issuer. A company that holds the reserves and redeems the tokens looks like an issuer under almost any reading. But the analysis gets harder for protocols where issuance is algorithmic, governed by a DAO, or executed through smart contracts with no single operating company behind them.

Law firms including Cooley have tracked this ambiguity across successive rulemakings. If the CIP rule defines the covered entity by reference to minting and redemption control, protocol-based issuance models could escape the perimeter entirely — or fall into it through whoever administers the reserve account.

What does it change for the market?

For regulated and state-examined issuers — the large, reserve-backed operators already subject to some supervisory oversight — the proposal formalizes obligations many have adopted voluntarily. The marginal compliance burden falls on smaller issuers and offshore operators serving US customers, who would face a choice between building verification infrastructure, restricting US-facing issuance channels, or exiting the market.

The rule also has second-order effects on distribution. Exchanges and custodians that list affected stablecoins may face pressure to collect and pass through identity data so issuers can meet their obligations, effectively pulling parts of the secondary market into the CIP perimeter by commercial necessity rather than direct regulation.

Commenters will likely focus on the secondary-market question and the definition of the covered issuer, the two points that determine the rule's real reach. The agencies will take comments through the standard Federal Register window before finalizing requirements, giving issuers a defined period to shape how the perimeter is drawn.