Know your customer at issuance, not at payment: five agencies publish the GENIUS Act's KYC perimeter and name its structural gap.

That definition is the structural decision. Everything the rule requires sits above it; everything the rule does not reach sits below it.

Five discrete decisions are embedded in the joint proposed rule published today in the Federal Register:

The secondary-market exclusion is the structural clause. The Warsh abstention is the political one. Both matter for different reasons.

The rule draws one boundary around the stablecoin lifecycle: a CIP zone covering every account a PPSI opens directly, and a secondary market that the rule does not reach.

• The CIP obligation attaches to the account, not the token. Once a token leaves a primary-market relationship and circulates through secondary markets, the PPSI's CIP obligation for those flows is discharged. The token travels; the obligation does not.
• Reliance reduces cost without moving liability. A PPSI whose distribution partner is a BSA-supervised bank can rely on that bank's existing CIP program under written contract. If the bank fails the CIP, the PPSI is still responsible.

This rule completes the GENIUS Act supervisory architecture in draft form. The FDIC's June 9 confirmation drew the deposit insurance line: bank deposit tokens in, stablecoin holders out. The OCC's June 12 PS-01 and PS-02 forms defined weekly reserve reporting. The FinCEN/OFAC AML and sanctions rules from April 2026 established the broader AML/CFT program requirements. The June 22 CIP rule applies the identity verification layer that has governed bank account opening since the USA PATRIOT Act of 2001. A PPSI reading June 22 now has its full compliance architecture in draft: what to hold, what to report, whom to screen, and whom to identify before opening an account.

The secondary-market exclusion is not a loophole; it is the architecture. Most stablecoin transaction volume by count happens outside primary-market relationships: P2P wallet transfers, DEX swaps, merchant payments from self-hosted wallets, automated smart-contract disbursements. The GENIUS Act framework intentionally does not require a PPSI to KYC those flows. This is the design choice that allows a payment stablecoin to circulate like cash at scale. Gov. Barr's written concern in the vote record, that the framework does not do enough on secondary-market illicit finance, names the structural limit that every major stablecoin regulatory framework shares and none has solved. Closing it requires either a Congressional amendment or a separate rulemaking outside the current GENIUS Act framework. Neither exists today.

Warsh's abstention is the most significant political signal in the filing. The Fed is the supervisor for bank holding company-affiliated PPSIs under the GENIUS Act. A Chair who abstains on the first major GENIUS Act compliance rulemaking signals that the Fed's internal consensus on stablecoin supervision is not complete. For any PPSI seeking to use a bank holding company structure for its charter, the Fed's posture under Warsh now matters more than the OCC's June 22 vote.

• This is a proposed rule, not a final rule. The comment period closes August 21, 2026, thirty-four days after the OCC's July 18 substantive final rule deadline. The CIP rule will finalize two to three months after the framework it attaches to. Until then, no PPSI is legally required to comply with it.
• The secondary-market gap is named but not closed. Gov. Barr entered his concern into the official record. Addressing it requires either Congressional action to amend the GENIUS Act or a follow-on rulemaking. No such instrument is in progress. The gap is structural by design.
• Warsh's abstention creates Fed governance ambiguity. The Fed's supervisory role over bank-affiliated PPSIs is established in the GENIUS Act statute, not subject to Chair discretion. But an abstaining Chair signals that the Fed may interpret its mandate narrowly rather than assertively. That ambiguity shapes compliance planning for any issuer with a bank holding company structure.
• DeFi protocols are not PPSIs. MakerDAO, Ethena, and other decentralized stablecoin issuers have no identifiable legal entity that qualifies as a PPSI under the GENIUS Act. The CIP rule does not apply to them regardless of on-chain market cap or transaction volume. Their AML posture remains an unsettled regulatory question for a different rulemaking.

The CIP rule is the third piece of the GENIUS Act supervisory architecture published in thirteen days. The FDIC's deposit insurance confirmation (June 9), the OCC's PS-01 and PS-02 reserve and financial reporting forms (June 12), and today's joint CIP rule together cover the three dimensions of federal stablecoin supervision: what the instrument is (deposit vs. payment stablecoin), what the issuer discloses to its regulator, and who the issuer must verify before opening an account. Three rules in thirteen days is not coincidental: the agencies are racing their own July 18 statutory deadline, publishing the supervisory plumbing while the substantive framework is still in its final drafting phase.

The primary/secondary market boundary drawn in this rule mirrors the unsolved challenge facing every stablecoin regulatory framework globally. MiCA requires e-money token issuers to screen against sanctions lists but cannot practically impose full KYC on every token transfer in the EEA. The Bank of England's stablecoin framework, currently in the June consultation phase, faces the same design choice: KYC at issuance is tractable; KYC at payment is incompatible with any payment rail operating at meaningful scale. The June 22 US rule formalizes what MiCA implies by silence: the CIP obligation stops at the first-person relationship, and the secondary market runs on trust in the issuer's initial verification rather than its ongoing surveillance. Barr's written concern names the structural gap that every framework holds without resolving it.

Five US agencies published the GENIUS Act's identity verification architecture on June 22, 2026: all PPSIs must know every customer who opens an account directly with them, at issuance, conversion, redemption, or custodial service. Every transaction that happens after that initial relationship, every DEX swap, P2P transfer, wallet payment, and smart-contract flow, sits outside that requirement by design. The secondary-market perimeter is now the official line. Warsh's abstention is the signal to watch: the Fed is the gatekeeper for bank holding company-affiliated PPSI charters, and an uncommitted Chair changes the charter calculus for any issuer whose architecture runs through a bank subsidiary.

Three things to watch:

• OCC GENIUS Act final rules, July 18, 2026. The substantive framework that the CIP rule attaches to. If the OCC hits the deadline, the GENIUS Act takes effect 120 days later with the CIP rule still in comment. If the OCC misses it, the entire framework, including this rule, slips to January 18, 2027.
• Fed Chair Warsh's public statement on the abstention. Any explanation from Warsh, in a speech, testimony, or interview, will clarify whether the Fed intends to apply its GENIUS Act supervisory mandate broadly or narrowly. Silence through July 18 is itself a signal.
• Comment filings by August 21, 2026. Banking groups (BPI, TCH), conditional charter holders (Circle, Paxos, Ripple, BitGo, Fidelity Digital Assets), and crypto exchanges (Coinbase, Kraken) will each file on the secondary-market scope. The comment record will determine whether the final CIP rule widens the perimeter or holds the line drawn today.