In direct exchange, both parties hold stablecoins and own compliance. In indirect exchange, a provider settles in stablecoins behind a normal bank payment.
Direct stablecoin exchange means both parties knowingly use stablecoins: the buyer gets them, sends them to the seller's wallet, and each side carries its own compliance and wallet risk. Indirect exchange means a bank or fintech uses stablecoins only as a settlement layer behind an ordinary bank payment, so the provider carries compliance. Most businesses want indirect, or a hybrid of the two.
The terms come from the U.S. Faster Payments Council (FPC), an industry body that published a report on stablecoins as a cross-border payment method in July 2026. Its conclusion is direct: the indirect model has "several important advantages, foremost of which are clarity on compliance, operational simplicity, and reuse of existing rails."
This article is general information, not legal advice. Confirm your own obligations with counsel.
In the FPC's first scenario, the buyer acquires stablecoins, typically through an exchange such as Coinbase, by sending fiat. The stablecoins land in the buyer's wallet and move from there to the seller's wallet. The seller can hold them, use them for its own payments, or redeem them for fiat through an exchange or the issuer.
Nothing in this model needs a bank in the middle. A self-custody wallet works. That's also the problem. Everyone in the chain is responsible for their own:
Direct exchange makes sense for companies that already run crypto operations, hold stablecoin treasury, and have a compliance team that understands wallet screening.
In the FPC's second scenario, the stablecoin isn't visible to the buyer or the seller. To them, the payment looks like a normal transfer: a wire, an ACH payment, or a local instant payment. Behind the scenes, the payment providers on each side settle with each other in stablecoins.
That settlement can run net, aggregating inflows and outflows and moving only the difference, and it can run any day at any time instead of only during banking hours. The end parties get the speed of the stablecoin leg without holding a token, picking a network, or screening a wallet.
The regulated providers carry the work: KYC and KYB at onboarding, sanctions screening, transaction monitoring, travel rule data between providers, and the conversion in and out of stablecoins. How a stablecoin payment works shows the same flow at the API level.
| Direct exchange | Indirect exchange | |
|---|---|---|
| Who sees the stablecoin | Both parties | Only the providers |
| Who holds it | Buyer, then seller | Providers, usually only within the payment |
| Payer sends | Stablecoins from a wallet | A bank transfer in local currency |
| Recipient gets | Stablecoins in a wallet | A bank deposit in local currency |
| KYC, KYB, sanctions screening | Each party, plus any exchange they use | The regulated providers |
| Travel rule | Applies between the exchanges and custodians involved | Handled provider to provider |
| Wallet security | Each party | The providers |
| Conversion to local money | The recipient's problem | Built into the payout |
| Accounting | Both sides hold a digital asset | Usually a normal bank payment on both sides |
| Best for | Crypto-native companies with their own compliance team | Businesses that want faster cross-border payments without new operations |
The rules themselves don't change between models. The FPC report says compliance requirements are "the same for stablecoins as for cash-based payments and could be far greater." What changes is who owns each obligation.
In direct exchange, it's spread across everyone. The exchange that sold the stablecoins ran KYC on the buyer. Nobody necessarily ran it on the seller's wallet. The FPC flags exactly this gap: KYC is possible at issuance, but stablecoins can then be passed to unknown parties, and self-custody wallets can bypass sanctions controls unless someone screens them.
In indirect exchange, the provider that converts and moves the money is a regulated money transmitter or virtual asset service provider. It verifies both sides before anything moves, screens names and wallet addresses against lists like OFAC's, monitors patterns, and exchanges travel rule data with the counterparty provider. The business's job shrinks to giving accurate information and answering requests for information when a payment is flagged.
The GENIUS Act doesn't change this split. It regulates issuers and, from July 18, 2028, the platforms that offer stablecoins in the US. It doesn't decide who runs KYC on a given payment.
Yes. The most common setup in practice is a hybrid:
The business carries wallet security on its side. The provider carries the off-ramp compliance. The supplier sees a bank deposit and never touches a stablecoin. If the payout is non-custodial, the stablecoins stay in the business's wallet until the quoted payout executes, so the provider never holds a balance on its behalf. Non-custodial payments explained covers that model.
BlindPay supports both the indirect and the hybrid model through one API. In the Abstracted flavor, a business sends a bank transfer, often to its own virtual account, and the recipient gets a bank deposit over Pix, SPEI, Transfers (Argentina), ACH COP (Colombia), ACH, wire, RTP, SEPA, or SWIFT (POBO/COBO). The stablecoin settles behind the scenes and nobody on either side holds it. That's indirect exchange.
In the Advanced flavor, a business that holds its own USDC or USDT pays out from an external wallet. Those payouts are non-custodial: the stablecoins stay in the customer's wallet until the quoted payout executes. That's the hybrid. In both, KYC, KYB, sanctions screening, and travel rule checks run inside the API before money moves, and BlindPay is registered with FinCEN as a Money Services Business (NMLS #2745309), which anyone can check in FinCEN's MSB registrant search. The licenses page lists its status by country.
Write one line for each of your cross-border payment flows: who sends, who receives, and whether either of them wants to hold a stablecoin. If neither does, you want indirect exchange, and the next step is deciding whether to build that layer or buy it. Build vs buy for stablecoin payments covers what each path takes on. For the vocabulary behind this page, see the blockchain payments glossary, and for the bigger picture, what blockchain payments are.
This article is for general information only and is not legal advice.
The evidence examiners expect from automated risk monitoring: a 10-item evidence table, good vs poor practice, SAR timelines, RFIs, and a 30-day plan.
Blockchain payments are legal for businesses in the US, EU, UK, Brazil, and Mexico, under different rules. What each country regulates, as of October 2026.
Stablecoin transfers settle final in minutes and cannot be reversed. That finality proves custody at every step, but it also opens a fraud gap on the fiat side of the payment.