Services About Our Process Areas Expertise Blog Training AML Threat Intelligence Tool Let us help

Stablecoins Went Mainstream — Now the AML Programme Has to Catch Up

Physical cryptocurrency coins including Bitcoin and Ethereum — regulated stablecoins are now a mainstream payment rail
Photo by Executium on Unsplash

For most of the last decade, stablecoins sat in a regulatory grey zone — widely used inside crypto trading and DeFi, largely absent from everyday commerce, and treated by most banks as a category to avoid rather than a payment rail to understand. That changed through 2025 and into 2026. The passage of federal payment-stablecoin legislation in the United States established licensing, reserve, and redemption requirements for issuers, following the earlier implementation of the EU's Markets in Crypto-Assets (MiCA) regime. The practical effect has been rapid: major issuers now operate under defined prudential frameworks, transaction volumes running through stablecoins for cross-border payments and merchant settlement have grown accordingly, and the assumption that "stablecoin" automatically means "unregulated" is no longer accurate. For AML/CFT programmes, that is not a reason to relax scrutiny — it is a reason to build a specific, current control framework instead of treating stablecoin exposure as a subset of generic crypto policy.

Why Regulation Changes the AML Calculus, Not the Risk

A regulated issuer with audited reserves and a defined redemption process closes off one category of risk — issuer insolvency and outright counterfeit tokens — without closing off the money laundering risk that actually matters to compliance teams: what happens to value once it moves onto the blockchain and back off again. A stablecoin transaction still settles near-instantly across borders, can be split and re-combined across dozens of wallet addresses in minutes, and can be bridged across multiple blockchains in ways that complicate the audit trail long before the funds are redeemed back into fiat through a bank account your institution can see. Regulation of the issuer says nothing about the AML controls of the exchange, wallet provider, or merchant processor sitting between your customer and that issuer.

Typologies Compliance Teams Are Actually Seeing

  • Rapid layering through cross-chain bridges — moving stablecoin value across multiple blockchains via bridge protocols to break the on-chain trail before consolidating and redeeming to fiat.
  • Structured redemptions — breaking large stablecoin holdings into multiple smaller redemptions routed to different bank accounts or payment processors to stay under reporting or monitoring thresholds.
  • Trade settlement layering — using stablecoin payments to settle invoices in trade-based money laundering schemes, where the speed and finality of settlement is used to obscure the underlying commercial rationale.
  • Migration to less-regulated stablecoins and DeFi protocols — as major issuers tighten compliance, illicit actors are documented moving activity toward smaller, less-supervised stablecoin issuers and decentralised exchange venues that offer fewer controls.
  • Peer-to-peer stablecoin transfer as an informal value transfer channel, functioning similarly to unlicensed money remittance but without the paper trail a licensed MSB would generate.

The Caribbean and Barbados Exposure

Caribbean financial institutions are encountering stablecoin exposure from two directions at once. Fintechs, exchanges, and payment processors increasingly want banking relationships to move between crypto and fiat rails — a legitimate and growing sector that regional banks and MSBs are being asked to serve. At the same time, correspondent banks abroad are, if anything, growing more cautious about clients with any crypto-adjacent activity, precisely because the typologies above are well documented and hard to monitor without specific tooling. That combination puts Caribbean institutions in a difficult position: turning away all stablecoin-related business forecloses a genuine growth sector, while banking it without a specific control framework increases correspondent banking risk at a moment when correspondent relationships in the region are already under pressure. The Financial Services Commission and the Central Bank of Barbados, along with counterpart regulators across CARICOM, have signalled increasing expectations that institutions with virtual-asset exposure demonstrate a defined risk assessment and monitoring approach — not a blanket exclusion policy or, at the other extreme, a policy that treats a regulated stablecoin exactly like a regular bank transfer.

Building the Control Framework

An adequate stablecoin AML framework starts with issuer and platform due diligence — understanding whether the stablecoins your customers use are issued under an established prudential framework, and whether the exchanges or wallet providers they use have functioning AML programmes of their own. Travel Rule compliance tooling, which transmits originator and beneficiary information alongside qualifying virtual asset transfers, needs to be implemented and tested, not just referenced in policy. Blockchain analytics — wallet screening against sanctions lists and known illicit-activity clusters — should sit alongside traditional transaction monitoring, because standard monitoring rules built for wire transfers will not surface on-chain layering patterns. And policies need to name stablecoins specifically, with defined risk ratings, rather than relying on a generic "virtual assets" clause that was last updated before regulated stablecoins existed at scale.

amlx.io tracks stablecoin and broader virtual-asset regulatory developments and typology updates alongside standard AML/CFT intelligence, helping compliance teams keep risk assessments current between formal review cycles.

If your institution is being asked to bank stablecoin issuers, exchanges, or merchants — or if your existing virtual-asset policy predates the current regulatory framework — the Four CCCC team works with banks, MSBs, and fintechs across Barbados and the Caribbean on virtual-asset risk assessments, policy updates, and the documentation correspondent banks and regulators now expect to see.