The defining feature of decentralized finance (DeFi) lies in its absence of centralized servers or governing authorities. Compared with traditional centralized exchanges, DeFi platforms present far fewer barriers and restrictions—most notably, they require no identity verification.
Conventional exchanges, by contrast, typically mandate Know Your Customer (KYC) authentication and cooperate with judicial directives issued across various jurisdictions, such as disclosing user identities tied to specific transactions for enforcement purposes.
Now, however, the U.S. Treasury seeks to extend identity verification requirements to DeFi platforms as well. At present, the department is soliciting public feedback on how digital identity tools and emerging technologies might be leveraged to combat illicit financial activity within the cryptocurrency market.
This consultation stems from the Guidance and Establishment of the National Innovation for U.S. Stablecoins Act (the GENIUS Act), signed into law by President Trump in July 2025. The legislation establishes a regulatory framework for stablecoin issuers and directs the Treasury to explore compliance technologies such as APIs, artificial intelligence, digital identity verification, and blockchain monitoring.
In its consultation paper, the Treasury proposed that DeFi protocols might directly embed digital identity credentials into their code. Under this model, smart contracts could automatically verify a user’s credentials before executing a transaction, thereby integrating KYC and anti-money laundering safeguards into the very fabric of blockchain infrastructure.
The digital credentials envisioned include government-issued identification, biometric verification such as facial recognition, and other portable identity solutions. According to the Treasury, such mechanisms could simultaneously reduce compliance costs and strengthen privacy protections.
The ultimate goal is to detect illicit activity—such as money laundering, terrorist financing, and sanctions evasion—before transactions are completed. For instance, users already placed on the Treasury’s sanctions list would be automatically blocked from transacting on DeFi platforms, thus preventing money laundering while safeguarding other participants.
Yet this approach risks undermining the very essence of DeFi. What was once free of KYC requirements could become subject to mandatory real-name verification. The Treasury has acknowledged these challenges, particularly the tension between data privacy, regulatory oversight, and technological innovation, and is therefore gathering feedback through this consultation process.
The deadline for submitting comments is October 17, 2025. After reviewing the feedback, the Treasury will deliver a report to Congress and may issue guidance or propose new rules based on the responses received.
Related Posts:
- North Korea Targets DeFi and Crypto Companies with Advanced Social Engineering Attacks
- Treasury Department Hit by Major Cybersecurity Incident, China Suspected
- The US announces sanctions against Russian individuals and companies tied to worldwide hacking
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.