2026 Wallet and Compliance Guide

Personal wallet transfers are not outside regulation

FATF’s 2026 report treats stablecoin P2P transfers and unhosted wallets as a key vulnerability. Users need to understand both transfer freedom and freeze risk.

Updated as of 2026-05-23
1What self-custody means

A self-custody wallet means the user controls the private key. It is not recoverable like an exchange account, and on-chain address reputation or compliance screening can still affect use.

Hosted wallet

An exchange or custodian manages the account and keys. KYC and withdrawal review are clearer, but platform risk remains.

Unhosted wallet

The user holds the key directly. Control is higher, but loss, phishing, and address-contamination risk sit with the user.

Stablecoin controls

Some stablecoins allow the issuer to freeze or burn tokens at specific addresses.

2Transfer-stage risks

A stablecoin transfer can look like a simple wallet-to-wallet move, but deposit, conversion, and redemption stages may apply different checks.

StageRiskWhat to check
Exchange withdrawalTravel Rule checks, address verification, withdrawal limits, and high-risk address blocks may apply.Have you checked wallet verification and network fees?
P2P receiptIf the sender address is linked to sanctions, hacks, or scams, later deposits can be questioned.Can you verify the counterparty, purpose, and address history?
Redemption or conversionIssuers or exchanges may request KYC, source-of-funds evidence, or extra documents.Are redemption rights and review steps disclosed in terms?
3What FATF sees as the gap

FATF sees stablecoin P2P flows through unhosted wallets as harder for regulators and VASPs to monitor.

  • Issuers and intermediaries may be expected to apply risk-based monitoring, customer due diligence, and suspicious activity response.
  • High-risk addresses can trigger denylisting, allowlisting, freezing, burning, or smart contract controls.
  • Users should not assume that personal-wallet custody guarantees unrestricted redemption or deposit access.
4User checklist

Self-custody increases control, but it also increases operational responsibility. Test the path with a small amount before moving meaningful funds.

Questions before transfer

  • Do the sending exchange and receiving service support the same network?
  • Is the counterparty address free from sanctions, hacks, mixer, or scam exposure?
  • Have you checked issuer freeze or burn powers and redemption review rules?
  • Have you considered hardware wallet or multisig protection for loss, wrong transfers, and phishing?
Self-Custody Wallet AML and Freeze Risk Guide | KRW Stable