Why stablecoin cards ask for ID even with a permissionless wallet, what KYC and KYB collect, why no-KYC cards fall short, and how to fix a rejection.
Yes. Almost every stablecoin card requires KYC, because the card runs on Visa or Mastercard through a licensed issuer, and that issuer must identify its cardholders. The wallet funding the card can be permissionless. The card cannot. Cards sold as "no KYC" are usually low-limit prepaid products or programs at risk of closure.
People ask this question for two reasons. Some want privacy. Others had an application stall or get rejected and want to know why. Both get the same answer: the identity check comes from the card rails, not from the stablecoin.
This page covers what gets checked, what documents to have ready, what KYB means for a business card, and what to do after a rejection. For the basics of how these cards work, start with what a stablecoin-backed card is, and for the issuer side, what stablecoin card issuing is.
Key takeaways
A stablecoin card requires KYC because the card is a regulated payment product, separate from the wallet. The issuer that puts the card on Visa or Mastercard carries the anti-money-laundering duties, and identifying the cardholder is the first of them.
A stablecoin card has two halves. The first half is a balance in USDC or USDT, held in a custodial account or a self-custodial smart wallet. The second half is a card issued by a bank or e-money institution, sponsored onto a card network, and processed like any other debit card. The second half is where the identity check lives.
neobankbeat's explainer on stablecoin cards states it plainly: "Even fully self-custodial programmes must identify cardholders... The wallet may be permissionless; the plastic isn't." Gnosis Pay is a good example. It spends from a Safe smart account that the user controls, with allowances enforced onchain, and it still onboards cardholders through identity verification because the card itself is a regulated product.
Sanctions rules push the same way. OFAC's sanctions compliance guidance for the virtual currency industry (October 2021) expects virtual currency businesses to know who they are dealing with, and you cannot screen a person you have not identified.
KYC verifies a person. KYB verifies a company and then the people behind it. A consumer stablecoin card needs KYC. A business card program needs KYB on the company and KYC on its owners.
KYC (know your customer): verifying an individual's identity against documents or trusted data, plus screening against sanctions and politically exposed person (PEP) lists.
KYB (know your business): verifying a company's registration, address, activity, and ownership, then running KYC on each beneficial owner and controller.
Issuer: the licensed bank or e-money institution that legally issues the card and owns the compliance program.
Program manager: the company that runs the card product day to day under the issuer's policies, often the brand you see.
For a deeper walk through business checks, see what KYB is.
Expect a government ID, a selfie or liveness check, and your personal details for an individual card. Expect formation documents, an ownership chart, and owner IDs for a business card. Exact lists vary by provider and country.
| Item | Individual card (KYC) | Business card program (KYB) |
|---|---|---|
| Identity | Government photo ID (passport, national ID, driver's license) | Certificate of incorporation, articles of organization |
| Liveness | Selfie or video check | Usually not, but owners may do one |
| Personal or company data | Full name, date of birth, residential address | Legal name, registration number, registered address, website |
| Tax ID | National tax or ID number | Company tax ID |
| Ownership | Not applicable | Ownership chart naming beneficial owners |
| Owners | Not applicable | ID and proof of address for each beneficial owner |
| Extra checks | Proof of address or source of funds for higher limits | Source of funds, business activity details |
| Screening | Sanctions and PEP lists | Sanctions on the entity and every owner |
Two items catch people out. Proof of address must usually be recent and in the applicant's name. Source of funds questions show up when a program offers higher limits, and they are normal. Why off-ramps ask for source of funds explains the logic, and the same logic applies to cards.
Some exist, but they are limited and fragile. A card that skips identity checks either avoids the major networks, keeps limits low enough to sit under the issuer's thresholds, or operates in a way the network or a regulator may stop later.
What "no KYC" usually means in practice:
| What the ad says | What it often means | Risk to you |
|---|---|---|
| "No KYC" | Light checks now, full KYC once you pass a limit | Card frozen mid-trip until you verify |
| "Anonymous card" | Low-value prepaid card | Small limits, few or no protections |
| "No ID needed" | Program outside regulated issuers | Funds stuck if the program closes |
| "Instant approval" | Automated KYC that runs in seconds | Usually fine, just fast |
The last row matters. Fast is not the same as no KYC. Many legitimate programs verify identity in a minute or two with automated document and liveness checks. If you value privacy, the better question is what the provider stores, who it shares data with, and how long it keeps records, not whether it skips the check.
Most rejections come from document problems, mismatched data, unsupported countries, or a screening hit that needs a manual look. Most are fixable. Ask which check failed before you reapply.
Screening hits deserve a word. A name that resembles someone on a sanctions or PEP list can trigger a manual review. That is a false positive for most people, and it resolves with more data, such as a date of birth or a second ID.
A business card program verifies the company first, then every beneficial owner and controller, then the employees who get cards to whatever level the issuer requires. The company becomes responsible for how its cards are used.
The steps are predictable. The provider looks up the company in its corporate registry, reviews formation documents, maps the ownership structure, and runs KYC on each owner above the issuer's threshold plus at least one controlling person. It then screens the entity and every person against sanctions lists. Higher-risk sectors get enhanced due diligence.
If you are building a card program rather than applying for one, the duty sits with you and your issuer. Stablecoin card issuing compliance maps who owns each obligation, and how to automate KYC and KYB for stablecoin payments covers the tooling.
Travel rule checks also apply when stablecoins move between providers. In the US, 31 CFR 1010.410(f) requires originator and beneficiary data on transmittals of $3,000 or more, and FATF updated Recommendation 16 on payment transparency in June 2025. That is another reason identity data has to exist before money moves.
BlindPay builds KYC and KYB into the payment flow itself, so the same API that pays out or collects money also verifies the customer behind it. It works alongside card programs on the funding and payout legs, where the same identity data gets reused.
Per the BlindPay KYC requirements, every payment flows through a customer that has completed verification. Individuals in standard-risk countries go through automated KYC Standard, which typically completes in about 60 seconds. Individuals from high-risk countries go through KYC Enhanced with manual review, and businesses go through KYB Standard with manual review, both typically 3 hours to 1 business day. The KYB documents list covers formation documents, ownership, and owner IDs.
For a card program, that matters on the legs around the card. A verified customer can receive USD into a US virtual account and get USDC or USDT in their wallet, or cash a stablecoin balance out to a bank account over Pix, SPEI, ACH, RTP, SEPA, or SWIFT (POBO/COBO), with the live quote showing the rate and fees before anything moves.
If you are applying for a stablecoin card, have your ID, a recent proof of address, and your tax ID ready, and expect a liveness check. If a program promises no KYC, read the limits and the closure terms first.
If you run a program, decide early who owns KYC, KYB, screening, and records. Are stablecoin cards safe? covers the risks that good verification helps prevent. To test a verification and payout flow end to end, open a free development instance and follow the payout quickstart.
The evidence examiners expect from automated risk monitoring: a 10-item evidence table, good vs poor practice, SAR timelines, RFIs, and a 30-day plan.
Blockchain payments are legal for businesses in the US, EU, UK, Brazil, and Mexico, under different rules. What each country regulates, as of October 2026.
Why a stablecoin card purchase can be a taxable disposal, how the US, UK, Germany, Spain, the Netherlands, and Brazil differ, and which records to keep.