A few weeks ago, I wrote about how stablecoins are gradually moving from the world of experimentation into the realm of supervised financial infrastructure.

The most recent report from the Financial Action Task Force (FATF) adds an important layer to that conversation. The report examines financial crime risks associated with stablecoins and unhosted wallets.

In one sentence, the key idea is this: the focus of supervision is shifting from exchanges alone to the broader ecosystem through which value moves.

Context: the growing role of stablecoins

Stablecoins occupy a unique position in the digital asset environment.

They are designed to maintain stable value, typically by referencing fiat currencies. This makes them useful not only for trading, but increasingly for payments, remittances, and cross-border transfers.

The FATF notes that this same utility can make them attractive to illicit actors. Stablecoins combine the liquidity and speed of crypto networks with the stability of traditional currencies, allowing funds to move quickly across borders and often outside traditional banking rails.

For regulators, this creates a familiar challenge: a technology that improves efficiency while simultaneously expanding the potential surface for abuse.

Unhosted wallets remain the central concern

Another theme running through the report is the continued concern around unhosted wallets.

Unlike accounts held with regulated virtual asset service providers (VASPs), unhosted wallets are controlled directly by users. Transactions can therefore occur without the same level of identity verification, monitoring, or reporting typically required in regulated financial institutions.

The FATF emphasises the importance of risk mitigation when regulated entities interact with these wallets. In practice, this means exchanges, custodians, and financial institutions will increasingly be expected to:

  • assess the risk of transfers involving self-hosted wallets

  • gather additional information where appropriate

  • apply enhanced monitoring to suspicious flows

  • document the rationale behind risk decisions

In other words, regulators are encouraging context-driven oversight rather than blanket restrictions.

Transparency does not automatically equal accountability

One of the more interesting observations in the report relates to a common misconception about blockchain technology.

Public blockchains offer extraordinary transparency. Transaction histories are visible and traceable. Yet transparency alone does not solve the identity problem.

Without reliable information about who controls a wallet, the ability to follow funds does not necessarily translate into the ability to hold actors accountable.

This is why the FATF continues to emphasise measures such as the Travel Rule, customer due diligence, and stronger information sharing between service providers.

The regulatory lens is widening

Perhaps the most important takeaway from the report is the direction of travel.

In the early days of crypto regulation, supervisory attention focused primarily on exchanges as entry and exit points.

Today, that perimeter is expanding.

Stablecoin issuers, wallet providers, custodians, payment intermediaries, and decentralised finance infrastructure are increasingly viewed as part of the same financial ecosystem. The risks associated with digital assets are no longer evaluated only at the platform level, but across the entire flow of value.

For compliance teams, this means developing a deeper understanding of how funds move across networks of actors, technologies, and jurisdictions.

What this means for institutions

For financial institutions and regulated crypto firms, several operational implications stand out.

First, interactions with unhosted wallets will likely become a key supervisory focus, requiring clearer internal policies and risk assessment frameworks.

Second, stablecoin flows will increasingly be treated with the same scrutiny as traditional payment flows, particularly where large cross-border transfers are involved.

Third, compliance teams will need stronger collaboration between blockchain analytics, transaction monitoring, and traditional AML controls.

Reinforcing our prior observations, digital assets are being gradually integrated into the same supervisory logic that governs the rest of the financial system.

As always, I am happy to exchange views if these developments intersect with your institution’s approach to digital asset risk management.

Thanks for reading,
Alexey

Keep Reading