TL;DR: Stablecoins are now operating as payment infrastructure at cross-border scale, and the FATF Travel Rule is forcing VASPs to embed originator and beneficiary checks directly into transaction flows, according to SumSub. Compliance models built around manual, after-the-fact review no longer match the speed or jurisdictional complexity of stablecoin transfer.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Scaling Travel Rule Compliance in the Stablecoin Era”.
Key questions
Q: What breaks when stablecoin compliance only covers on- and off-ramps?
A: Compliance misses the part of the lifecycle where most of the risk can actually move, including wallet-to-wallet transfers and self-custodied circulation.
Q: Why do stablecoins create more compliance complexity than traditional transfers?
A: Stablecoins combine real-time settlement with cross-border reach, so compliance must keep pace with the transfer itself.
Q: How do organisations know whether Travel Rule controls are working?
A: They should measure successful data exchange rates, exception volumes, reconciliation quality, and the proportion of transactions that can be traced end to end without manual repair.
Practitioner guidance
- Embed Travel Rule checks in transaction flows Move originator and beneficiary collection, transmission, and verification into the live transfer path so compliance is evaluated before value moves onward.
- Standardise jurisdiction handling logic Define a single control model that can apply differing thresholds and reporting requirements without creating separate manual workflows for each market.
- Replace manual exception handling with policy-driven routing Use deterministic rules for routing, screening, and escalation so high-risk transfers do not depend on after-the-fact analyst intervention.
Bottom line: Stablecoin transfers are pushing compliance into the transaction layer, where delays and manual handoffs no longer fit the operating model.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Stablecoin compliance has become an identity and governance problem, not just a regulatory one. Once originator and beneficiary information must move with the transaction, the control surface looks less like a policy document and more like an identity workflow. The important question is whether the organisation can preserve accountability across counterparties, jurisdictions, and execution speed. Practitioners should treat the transaction path as a governed system, not a passive transport layer.
A few things that frame the scale:
- 80% of identity breaches involved compromised non-human identities such as service accounts and API keys, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: Who is accountable when stablecoin transfers cross multiple jurisdictions?
A: Accountability sits with the VASP orchestrating the transfer, but it is shared across the operational chain that collects, validates, and transmits the required information. The practical issue is not only legal responsibility but whether the control design can prove consistent handling under different rulesets.
👉 Read our full editorial: Stablecoin compliance is moving into transaction flows
Stablecoin compliance is becoming an identity governance problem inside the payment path. The Travel Rule turns originator and beneficiary data into transaction-critical control material, not optional back-office evidence. That changes the governance model for VASPs because compliance must now be enforced where the transfer occurs, not where the audit trail is reviewed. Practitioners should treat stablecoin flows as governed identity exchanges, not just financial messages.
A question worth separating out:
Q: When should VASPs prioritise embedded controls over manual review for stablecoins?
A: Once stablecoin activity becomes cross-border, high-volume, and operationally time-sensitive, embedded controls should come first. Manual review can still support exceptions, but it should not be the primary compliance mechanism for routine transfers. The practical test is whether the control can scale without slowing the user experience or fragmenting governance.
👉 Read our full editorial: Stablecoin compliance is moving into transaction flows