Stablecoins and the identity problem no one discusses

They move faster and cheaper than almost anything else in finance. Almost nobody talks about who's actually holding the wallet on the other end

I was reading through a stablecoin market report a few weeks ago, mostly just trying to understand the size of the space. One line stopped me. Stablecoins made up 84% of all illicit crypto transaction volume in 2025, according to Chainalysis. Bitcoin, the coin everyone associates with sketchy transactions, was down to about 7%.

That didn't match the mental model I'd been carrying around. I'd always thought of stablecoins as the boring, practical corner of crypto: dollar-pegged tokens people use for payments and savings, not the part of the ecosystem drawing regulatory attention. So I went looking for why the numbers looked the way they did.

What I found wasn't really a stablecoin problem. It's an identity problem that stablecoins happen to make very visible.

What a stablecoin actually is, quickly

A stablecoin is a digital token designed to hold a steady value, usually pegged one-to-one to a currency like the US dollar, and backed by reserves the issuer holds to support that peg. Unlike Bitcoin or Ether, the price isn't supposed to move.

That stability is exactly why adoption has taken off. The total stablecoin market cap crossed $300 billion in 2026, with Tether's USDT and Circle's USDC together accounting for roughly 83% of that supply. Annual transaction volume has reached into the tens of trillions of dollars, and stablecoin settlement briefly surpassed the ACH network in early 2026.

Most of that growth reflects genuine use. Cross-border payments, payroll for remote teams, remittances and treasury management have all found a faster, cheaper rail in stablecoins than the traditional banking system offers.

The gap nobody really talks about

Here's the part that doesn't get discussed enough: a stablecoin wallet doesn't come with a name attached.

Blockchains are transparent by design. Every transaction is publicly visible, permanently recorded and traceable between addresses. What they don't tell you, on their own, is which human or entity controls a given address.

This is usually described as pseudonymity rather than anonymity, and the distinction matters. A wallet address is a consistent identifier, similar to a username, but connecting that username to a real identity takes outside work: an exchange's KYC records, a data leak, behavioral analysis or a subpoena. Absent that work, a stablecoin wallet is just a string of characters moving value at internet speed with no built-in answer to "who is this."

That gap is not new to crypto generally. But stablecoins amplify it, because they combine three things at once:

1. Price stability, which makes them useful for actually storing and moving value rather than speculating
2. Fast, low-cost, borderless transfers between unhosted wallets, with no bank or intermediary required
3. A dollar-denominated on-ramp and off-ramp into the traditional financial system, which most other crypto assets don't offer as cleanly

What that gap is already being used for

To be clear about scale first: illicit activity is still a small share of total stablecoin volume. TRM Labs put it at under 1.5% of the roughly $4 trillion in stablecoin activity during 2025, and Chainalysis has made the same point about crypto broadly, that illicit volume remains under 1% of all attributed transactions.

But the dollar figures involved are large enough to matter. TRM Labs estimated that illicit entities received about $141 billion through stablecoin wallets in 2025, the highest figure the firm has recorded in five years.

The FATF report separately found that stablecoins accounted for 84% of the $154 billion in illicit virtual asset volume tracked that year, driven mostly by large-scale money laundering and sanctions-related activity moving through peer-to-peer transfers and unhosted wallets.

FATF's March 2026 report on the topic pointed to a specific structural issue: peer-to-peer stablecoin transfers between unhosted wallets happen without any regulated intermediary in the loop at all, which is precisely the identity gap described above playing out at scale.

The part that keeps this from being a simple story

It would be easy to read those numbers and conclude stablecoins are uniquely risky. That's not quite what the data shows either.

Illicit use is heavily concentrated among professional, industrialized operations, guarantee services and sanctioned exchanges structured specifically to move large sums, not the ordinary person sending a payment.

And blockchain's public ledger cuts both ways: recent research shows wallet freezes have already immobilized more than $4 billion in USDT and over $1 billion in USDC tied to illicit activity, something that's far harder to do with physical cash. A transparent ledger makes bad activity more visible after the fact, even when it doesn't prevent it up front.

Regulatory frameworks are also catching up. The GENIUS Act, enacted in the US in 2025, established the first federal framework specifically for payment stablecoins, including reserve requirements and disclosure obligations for issuers.

FATF has recommended that countries apply anti-money-laundering obligations directly to stablecoin issuers and intermediaries, not just to exchanges. None of that closes the identity gap by itself, but it's the clearest sign that the gap has been noticed at a policy level, not just a technical one.

What's actually being built to close the gap

The more interesting question, to me, isn't whether the gap exists. It's what closes it without undoing the thing that makes stablecoins useful in the first place: fast, permissionless, borderless transfer.

Two approaches are getting most of the attention right now.

Decentralized identifiers and verifiable credentials let a wallet hold a cryptographically signed credential, proving something about its owner (that they passed a KYC check, that they're a unique individual, that they're over a certain age) without exposing the underlying documents every time. An identity verification primer walks through how this differs from the centralized database model most exchanges still rely on today.

Zero-knowledge proofs take this a step further, letting a wallet prove a fact is true without revealing the data behind it at all. Applied to identity, this means a wallet could prove "this address belongs to a real, unique, verified person" without ever putting that person's name, passport number or transaction history on a public ledger. That's a meaningfully different model from either full anonymity or full disclosure.

A broader look at digital identity in 2026 covers why this shift is happening across the internet generally, not just in crypto. The idea of a human-first layer sitting underneath individual apps, rather than each one running its own separate identity check, comes up in almost every serious proposal I read.

One example worth mentioning

While reading into this, I came across World ID, one project experimenting with proof-of-personhood credentials applied directly to a crypto wallet.

It works through a device called the Orb, which takes images of your face and eyes to generate a unique credential, without storing an identifiable copy of either. World App, the wallet built around that credential, lets someone prove they're a unique verified human to an application without revealing who they actually are. There's a World ID primer and a World App walkthrough that go into more detail than fits here.

It's one implementation among several exploring this space, not a solved problem. But it's a useful concrete answer to what a privacy trade-off doesn't have to look like: proving something true about a wallet's owner, without turning that wallet into a public record of who they are.

What's still genuinely unresolved

A few things worth sitting with before treating this as a solved problem:

• Adoption of identity-linked credentials across wallets and protocols is still early, and most stablecoin transfers today happen with no such layer attached at all
• Peer-to-peer transfers between unhosted wallets, the exact activity FATF flagged, are the hardest category to bring any identity layer into without reintroducing an intermediary
• Cross-chain activity makes consistent identity checks harder, since a credential valid on one network doesn't automatically carry over to another
• Any identity system built for crypto has to survive being decentralized by design, which is a much harder engineering problem than a single company's login system

None of these are reasons to expect the identity gap to close quickly. They're reasons the current conversation, mostly happening at the regulatory and infrastructure level, still has a long way to go.

Where this leaves things

I went into this expecting a story about crypto crime. What I found was closer to a story about infrastructure that grew faster than the systems meant to answer a pretty basic question: who is actually on the other end of this transfer.

Stablecoins didn't create that question. They just made it a lot more urgent, by making it fast, cheap and easy to move real money without ever needing to answer it.

The interesting part is that the fix being built doesn't look like a return to full disclosure, the way traditional banking works. It looks like proving a fact about a person without exposing the person. That's a genuinely different model, and it's still being figured out in public.

If you loved reading through this then do check out my other articles. Also do drop a follow.

Do digital and crypto assets need a human layer? Why the fastest-growing part of the internet still can't reliably tell if a wallet belongs to a person

How biometric tech is evolving past passwords The password is dying a slow, well-deserved death. What's replacing it is genuinely exciting, and also worth watching…