Do merchants need a license to accept stablecoin payments? KYC, KYB, and compliance explained

Usually, no. In the US, the EU, and Brazil, a business accepting stablecoins as payment for its own goods or services is generally treated as a user of the payment system, not as a money transmitter or crypto service provider. The license sits with the provider that converts, holds, or transmits funds for others. Merchants still have obligations: passing KYB with their provider, sanctions compliance, tax reporting, and record keeping. And if you move money on behalf of third parties, like a marketplace paying sellers, that part should run through a licensed provider.

This is general information, not legal advice. Rules change and your structure matters, so confirm with counsel before launch. Here's how it breaks down.

Who actually needs the license?

The rule of thumb across most jurisdictions: whoever moves money for someone else is regulated. Whoever gets paid for their own sale usually isn't.

In the US, FinCEN's 2019 guidance on convertible virtual currency says a person who accepts it as payment for goods or services is a user, not a money transmitter. The line moves when you start accepting funds for one party and passing them to another. That's the marketplace case, and it's why platforms paying out to sellers use a licensed payments provider rather than their own wallet.

What does the GENIUS Act change for merchants?

Not much directly. The GENIUS Act, signed on July 18, 2025, is about issuers: who can issue a payment stablecoin in the US, how reserves must be held, how redemption works, and what AML duties apply.

What it changes indirectly is trust. Merchants get a clearer picture of which dollar tokens are backed and redeemable under federal rules. As of September 2026, the implementing rules are still in rulemaking, with an effective date of January 18, 2027 at the latest. Our stablecoin regulation tracker keeps the current status.

What does MiCA mean for EU merchants?

MiCA regulates the service providers and issuers, not you. But it shapes which tokens your provider can handle.

Single-currency stablecoins offered to EU users must be issued by an authorized e-money institution. USDC is issued under an EU e-money license. USDT is not, and many EU platforms have restricted it for EEA customers. In practice, EU merchants standardize on USDC and use a MiCA-compliant provider for conversion. Full detail in our MiCA explainer.

What about Brazil?

Brazil licenses virtual asset service providers (PSAVs) under the Central Bank's regime, in force since February 2026. A Brazilian merchant accepting stablecoins for its own sales isn't a PSAV. The provider converting stablecoins to reais and paying out over Pix is. See our PSAV explainer.

Brazil also updated its eFX rules with Resolution 561. It targets eFX providers' settlement with foreign counterparties, not stablecoin use in general. We covered why it doesn't affect BlindPay's model.

What compliance work does the provider do?

This is the part you're outsourcing, so know what it should cover:

• KYB on your business. Verifying who you are and who owns you. See what KYB is.
• KYC on individuals. Anyone receiving payouts through the provider: sellers, contractors, creators.
• Sanctions and watchlist screening. Every counterparty, every transaction, against OFAC and other global lists.
• On-chain monitoring. Checking incoming and outgoing stablecoin transfers for exposure to sanctioned or high-risk wallets.
• Fiat-leg monitoring. Watching the bank transfers next to the stablecoin leg. ACH debits and wires can be reversed after the stablecoin side is final, and that gap is a known fraud pattern. More in are stablecoin payments reversible?
• Travel rule data. Passing required sender and recipient information between providers on qualifying transfers.
• Local licensing in each market where it converts and pays out.

BlindPay runs KYC, KYB, sanctions screening, on-chain monitoring, and local rail monitoring inside the same API, and publishes its licenses on the licenses page. The compliance page covers the program.

What compliance work stays with the merchant?

Outsourcing the regulated activity doesn't make you exempt from everything:

1. Pass KYB, honestly. Accurate business activity and expected volumes. Surprises later mean frozen accounts.
2. Don't sell to sanctioned parties. OFAC and equivalent rules apply to every business, regardless of payment rail.
3. Keep records. Invoice, amount, token, network, transaction hash, conversion rate. Your auditors will ask.
4. Report income correctly. In the US, the IRS treats digital assets as property. Revenue is recorded at fair market value when received, and small gains or losses on conversion get tracked. Other countries differ.
5. Publish a refund policy. Stablecoin transfers are final, so consumer protection rules still expect you to have a clear refund process.
6. Collect accurate payee data if you pay out to third parties: legal name, tax ID, and bank details, so your provider's KYC passes the first time.

How do you prepare for KYB?

Have these ready before you start onboarding with any regulated provider:

• Certificate of incorporation and proof of registered address
• Tax ID
• Description of business activity, customer base, and expected monthly volume
• Ultimate beneficial owners (typically anyone with 25% or more) with ID for each
• Directors and authorized signatories
• Source of funds, for some business types

Teams that submit a complete package often clear onboarding in days. Teams that don't spend weeks in back-and-forth. We wrote about automating KYC and KYB for stablecoin payments if you're building payee onboarding into your own product.

What should you ask a provider before signing?

• Which licenses do you hold, and in which markets? Can I see them published?
• Do you monitor the fiat leg continuously, or only check identity at onboarding?
• How long does KYB take for a company like mine? And KYC for my payees?
• Which tokens and networks do you support in my region?
• Can you trace custody at every step, from bank account to wallet, with timestamps?

A provider that answers these clearly is doing the regulated work properly. One that deflects is handing the risk back to you.

For the receiving flow itself, read how merchants accept stablecoin payments. For multi-country payouts, see cross-border merchant payments without pre-funding.

Accept stablecoins without becoming a money transmitter

You don't need a license to get paid in stablecoins. You need a provider that has them, and a clean KYB file. If you want to see what onboarding looks like for your business, talk to the BlindPay team.