Several US regulatory agencies have put forward a draft rule requiring stablecoin issuers to implement Customer Identification Programs (CIP) under the Bank Secrecy Act (BSA), at the same standard applied to licensed banks, securities brokers, and other regulated financial institutions. According to Cointelegraph’s reporting, this means issuers would need to verify “customer” identity at the issuance and redemption stages — no longer pushing the compliance burden solely onto downstream exchanges and card issuers. Worth noting: this is a proposed requirement targeting the issuer layer upstream, not a requirement for every wallet address holder to register with regulators.
Editorial take: this news hits the upstream layer, not your card
Let’s start with the conclusion to avoid misreading: this is a KYC requirement for issuers (companies like USDT, USDC), not a requirement for you as a cardholder to re-verify your identity. Your USDT does not need to be “re-registered” because of this draft rule.
What’s actually affected is the upstream compliance structure of the card issuance chain. The fund flow for a USDT virtual card typically works like this: you top up USDT → the card issuer settles it into fiat balance at some stage → Visa/Mastercard clears the transaction. When issuers are required to run bank-grade CIP, the interface between card issuers, token issuers, and market-making/redemption channels will tighten — and this pressure will propagate downstream, ultimately showing up as stricter KYC at the card-issuer level and more scrutiny on the source of first-time or large deposits.
Specific to cards:
- Cards built on compliant exchange infrastructure, such as Bybit Card and Coinbase Card, already operate on top of exchange-level KYC, leaving little room for adjustment — users will barely notice.
- Aggregator-style or Asia-Pacific-route cards, such as MPCard (the Asia Elite variant runs on Asia-Pacific rails), will feel the impact depending on whether their upstream settlement partners touch a US-dollar stablecoin redemption channel. The most likely near-term change is more detailed source-of-funds questionnaires and manual review triggers for large single transactions.
Timeline expectations: no card-level changes within 7 days — this is still at the draft stage; within 30 days, some card issuers may proactively update their “source of funds” clauses; within 90 days, if the rule advances, compliant card issuers will gradually push CIP granularity down to the card-opening step.
Historical comparison: different from both MiCAR and the 2023 USDC de-peg
Placing this on a timeline makes it clearer.
The March 2023 USDC de-peg was a reserve asset issue (Silicon Valley Bank exposure) — it hit whether the stablecoin was “worth $1.” This time is entirely different — it’s on the identification side, hitting the question of “who can legally hold/redeem.”
The 2024 EU MiCAR rollout brought stablecoin issuers under licensed regulation, requiring capital, reserve transparency, and EU entities — that was a full licensing framework. This US draft is narrower and more focused: it simply applies the BSA’s CIP/AML obligations explicitly to issuers, akin to “filling in the AML piece of the puzzle” rather than building a new licensing regime.
The common thread: regulators in both cases are pulling stablecoin issuers toward “licensed financial institution” status. The difference: this time it’s a targeted extension of anti-money-laundering compliance obligations, and it may land faster than a brand-new piece of legislation, since it attaches to the existing Bank Secrecy Act framework.
Regulatory boundaries: where the line currently sits
It’s worth being precise about the legal status, to avoid unnecessary alarm:
- Clearly permitted: individuals holding and using USDT virtual cards for everyday spending remains legal in most jurisdictions.
- Gray area: the boundary of issuers’ KYC obligations within US-dollar settlement channels — this is exactly what the draft rule aims to clarify, and it is still “proposed,” not yet in effect.
- Already settled: regulated card issuers performing KYC on cardholders has always been an industry baseline — this is not new.
For US users, it’s worth tracking updates to the US compliance guide; for Asia-Pacific users, card selection logic is relatively independent — see Japan compliance and Singapore compliance. Card issuers in these jurisdictions are not necessarily directly bound by the US CIP draft rule, but if their upstream relies on US-dollar stablecoin redemption channels, they could still be indirectly affected.
Key milestones worth watching
- The draft’s public comment period — US proposed rules typically carry a 30–60 day comment window, which will determine whether the final terms end up looser or stricter.
- Official responses from Tether / Circle — whether issuers adjust redemption procedures or add extra documentation requirements for institutional clients is the most direct signal.
- Card issuer terms-page updates — watch whether the “source of funds / AML” clauses on the cards you use quietly get revised within 60 days.
- Follow-up guidance from FinCEN — whether detailed CIP implementation rules for stablecoin issuers are published; track this on the official FinCEN page.
Editorial recommendations
- Existing users holding any USDT card: no action needed. This is a draft rule targeting the issuer layer — your card and balance are unaffected.
- Users planning to apply for a new card: proceed as normal, no need to hold off. That said, it’s worth prioritizing card issuers with mature KYC processes and transparent source-of-funds clauses, to avoid being caught off guard by later adjustments. Compare the 2026 comprehensive ranking and the lowest-fee list.
- High-volume / high-frequency users: prepare source-of-funds documentation in advance. If the rule advances within 90 days, the odds of large deposits triggering review will rise — having on-chain source explanations ready in advance can save back-and-forth communication.
- What not to do: don’t rush to convert USDT into another stablecoin or withdraw funds because of this news — this draft rule does not concern asset safety, and there is no “de-peg” or “holder freeze” risk signal here.
If you’re still unclear on the basic fund flow of a USDT virtual card, start with What is a U-card, then come back to this news — it will be easier to pinpoint exactly where the “upstream tightening” applies.