TL;DR: FATF's 2026 special report says stablecoins now account for 84% of illicit crypto transactions, and it pushes oversight beyond on- and off-ramps into the full circulation lifecycle, including P2P transfers and issuer-side freezing capability, according to Chainalysis and FATF. The compliance problem is no longer transaction entry points; it is continuous visibility across the asset lifecycle.
NHIMG editorial — based on content published by Chainalysis: FATF's stablecoin lifecycle compliance shift
By the numbers:
- 2025 年時点で、不正な暗号資産トランザクションの 84% をステーブルコインが占めるまでになりました。
Questions worth separating out
Q: What breaks when stablecoin compliance only covers on- and off-ramps?
A: Compliance misses the part of the lifecycle where most of the risk can actually move, including wallet-to-wallet transfers and self-custodied circulation.
Q: Why do self-custodied wallets complicate AML governance?
A: Self-custodied wallets break the assumption that a regulated intermediary can always collect KYC data, monitor behaviour, and file reports.
Q: How do you know if multihop blockchain analysis is working?
A: It is working when investigators can trace a transaction beyond the first hop and consistently surface risk clusters, sanctioned links, or hidden counterparties that simple address screening would miss.
Practitioner guidance
- Extend monitoring beyond on- and off-ramps Track stablecoin exposure across the full lifecycle, including peer-to-peer transfers and self-custodied wallet movement, so the compliance view does not stop at exchange boundaries.
- Operationalise multihop tracing Use transaction clustering and multihop analysis to identify hidden links to sanctioned or high-risk addresses before a transfer is treated as low risk.
- Define issuer intervention governance Document who can trigger freeze, burn, allow-list, or deny-list actions, what evidence is required, and how reversals are approved and logged.
What's in the full article
Chainalysis's full article covers the operational detail this post intentionally leaves for the source:
- How FATF's special report frames issuer obligations around circulation-stage monitoring and enforcement.
- Examples of multihop analysis workflows used to trace stablecoin exposure across multiple transactions.
- Practical guidance on when freeze, burn, allow-listing, or deny-listing controls are expected to support AML response.
- How VASPs can use blockchain analytics to identify high-risk counterparties without blocking legitimate traffic.
👉 Read Chainalysis's analysis of FATF's stablecoin lifecycle compliance shift →
Stablecoin lifecycle monitoring: what changes for VASPs and issuers?
Explore further
Lifecycle control has become the defining governance problem in stablecoin compliance. The article shows that regulators are no longer satisfied with entry and exit monitoring, because risk now travels through circulation, self-custody, and issuer response. That is a direct parallel to identity governance, where access at issuance tells you little if you cannot track downstream use. Practitioner implication: treat the asset lifecycle as the control surface, not the transaction edge.
A question worth separating out:
Q: Who is accountable when issuers can freeze or deny-list assets?
A: Accountability should sit with the issuer, the compliance function, and the approval chain that authorises intervention. If freeze capability exists, the organisation must define evidence thresholds, override rules, audit logging, and reversal authority before any incident occurs. Without that governance, technical control becomes discretionary power with weak oversight.
👉 Read our full editorial: FATF's stablecoin lifecycle shift raises the compliance bar