The GENIUS Act, introduced in Congress, would impose customer verification requirements on stablecoin issuers before they allow account creation. The bill mandates that providers conduct these checks using risk-based procedures tailored to their specific model and scale, according to NewsData.io.
The mechanics are straightforward: issuers would need to know who holds their stablecoin before the asset enters circulation. This shifts the verification gate earlier in the lifecycle than many current arrangements, where verification often happens at on- and off-ramps rather than at the point of issuance itself.
Risk-based procedures are the bill's operational lever. A large issuer with retail exposure would likely implement different verification depth than a smaller, enterprise-focused provider. The bill's language ties the rigor to the issuer's own risk profile and customer base, not a single one-size-fits-all standard.
No explicit timeline appears in the proposal for compliance, and the bill does not specify which regulator would oversee enforcement or issue guidance on what "risk-based" actually means in practice. That gap matters: issuers need clear definitions before restructuring their customer onboarding flows.
The requirement addresses a persistent regulatory concern: stablecoins operate as quasi-deposit substitutes but often lack the KYC framework applied to traditional payment processors or banks. The GENIUS Act frames verification as a precondition to operation, not a best practice.
Implementation costs and timeline remain uncertain. Issuers would need to update their account creation infrastructure and likely integrate or build identity-verification systems if they don't already operate them. Smaller projects or decentralized issuance models could face material friction; larger, regulated entities like major stablecoin providers already run similar checks at the on-ramp level and may absorb this as an operational consolidation rather than a net-new burden.
The bill's language does not yet account for how this requirement interacts with decentralized stablecoin protocols or algorithmic issuance, where no single entity controls account creation. That ambiguity may invite further legislative refinement or regulatory interpretation.