Sanctions screening in crypto is migrating from isolated exchange controls to a shared network layer that sits between virtual asset service providers. This layer links counterparty discovery, Travel Rule messaging, and sanctions/KYT decisions in near real time. The regulatory signal is getting sharper, and commercial networks are already routing large flows across jurisdictions.
On the regulatory side, the U.S. Treasury’s Office of Foreign Assets Control has long directed crypto firms to run risk‑based programs that screen customers and transactions against sanctions lists, including the SDN list (OFAC guidance, Oct. 2021). The next step is more prescriptive. A joint FinCEN/OFAC proposal from April 10, 2026 would require permitted payment stablecoin issuers to maintain sanctions programs with technical capabilities to block, freeze, reject, or otherwise prevent impermissible transactions on both primary and secondary markets (FinCEN & OFAC NPRM).
Enforcement‑relevant volumes are part of the justification. Between Jan. 1, 2015 and Nov. 21, 2025, FinCEN recorded roughly 55,000 suspicious activity reports that reference specific stablecoins, while OFAC received about 5,800 blocked‑property reports and approximately 3,000 rejected‑transaction reports referencing stablecoins, according to the same proposal (FinCEN & OFAC NPRM). The Financial Action Task Force has also warned that estimates suggest a majority of on‑chain illicit activity is now transacted in stablecoins and documented uneven Travel Rule implementation across jurisdictions (FATF, June 2025). That combination of volumes and urgency is pushing screening outward from the walls of each exchange.
On the commercial side, inter‑VASPs networks already exist and handle scale. Notabene says its network connects more than 2,000 regulated entities across 100+ jurisdictions and processes over $1 trillion in annual transaction volume; in September 2025 it announced “Notabene Flow,” an open stablecoin payments and transaction‑authorization network (Notabene). Notabene also integrated counterparty sanctions screening via a partnership with Refinitiv in July 2025 (Notabene–Refinitiv). Vendors now expose counterparty graph intelligence and fire real‑time “sanctions.match_detected” events through APIs, indicating that exchanges can automate go/no‑go decisions during inter‑VASP transfers (Veris docs). Enterprise blockchain‑intelligence suites used by exchanges for wallet screening and VASP attribution are commonly embedded into these flows (Elliptic).
What changed: rules are pushing rail‑level controls, and the rails now exist
Verified facts: OFAC’s guidance tells VASPs to run risk‑based compliance programs and screen customers and transactions, including against the SDN list (OFAC). The April 2026 FinCEN/OFAC proposal would require permitted payment stablecoin issuers to have technical capabilities to stop impermissible activity on both primary issuance and secondary markets (NPRM). Commercially, Notabene has launched an authorization network for stablecoin payments and integrated sanctions screening with Refinitiv, while vendors provide real‑time sanctions‑event signals and counterparty graph endpoints (Notabene), (Notabene–Refinitiv), (Veris).
Reasonable inference: when issuers are required to enforce sanctions on secondary markets and exchanges rely on shared Travel Rule and authorization rails, sanctions screening naturally migrates into those inter‑VASP rails. The layer that carries counterparty discovery, KYC metadata, and transaction authorization becomes the control point for screening.
Complication: Travel Rule implementation is fragmented across jurisdictions and protocols, which means inter‑exchange screening still depends on mutual support for messaging/proof standards and alignment on data feeds. Notabene’s own commentary highlights multiple protocols and the need to orchestrate discovery and KYT API calls in‑flow (Notabene blog). That fragmentation is why this network layer is emerging unevenly.
The strongest signals: data points and live deployments
The clearest evidence spans rulemaking data and existing networks.
Signal Detail Source Enforcement‑relevant stablecoin volumes ~55,000 SARs; ~5,800 blocked‑property; ~3,000 rejected‑transaction reports referencing stablecoins (2015–Nov 21, 2025) FinCEN & OFAC (NPRM) Issuer obligations PPSIs must maintain sanctions programs with technical capabilities to block/freeze/reject impermissible transactions on primary and secondary markets (proposed) FinCEN & OFAC (NPRM) Networked screening Notabene network connects 2,000+ regulated entities in 100+ jurisdictions; integrates sanctions screening via Refinitiv; processes $1T+ annually Notabene; Refinitiv partnership Real‑time API events Vendor endpoints return counterparty graph results and emit “sanctions.match_detected” events to drive automated decisions Veris docs Illicit finance context FATF reports estimates suggesting a majority of on‑chain illicit activity is now transacted in stablecoins; uneven Travel Rule implementation FATF (June 2025)
Market practice supports the same direction: exchanges routinely call out to third‑party sanctions and KYT services for wallet screening, transaction monitoring, and VASP attribution, and embed those checks into Travel Rule authorization flows (Elliptic).
Consequences for exchanges and stablecoin issuers
Verified facts: the OFAC guidance expects risk‑based sanctions screening by VASPs, and the PPSI NPRM would require technical capabilities to block, freeze, reject, or otherwise prevent impermissible transactions, including on secondary markets (OFAC), (NPRM). Industry networks now combine Travel Rule messaging with sanctions screening at the counterparty layer (Notabene–Refinitiv).
Inference: exchanges will increasingly treat pre‑transfer counterparty discovery and sanctions checks as a shared service. Instead of screening only addresses and customers in isolation, they will query network intelligence to determine whether the destination is a hosted VASP, request Travel Rule data, and receive sanctions/KYT determinations in the same authorization flow. The decision to send, hold, or reject will sit at the network layer where both parties can see status.
Operational impact in our view:
Withdrawal orchestration: automated pauses if a counterparty VASP reports a sanctions match or insufficient data through the network, reducing back‑and‑forth tickets but increasing dependency on third‑party uptime.
Stablecoin handling: if the PPSI rule is finalized, issuers’ rail‑level controls would interact with exchange workflows, since issuers may be obligated to prevent impermissible secondary‑market transfers. That would incentivize tighter issuer–VASP interfaces for sanctions checks.
Vendor concentration: real‑time graph intelligence and sanctions feeds become critical infrastructure, shifting diligence from static lists to the quality, latency, and coverage of network signals.
How a network layer reshapes flows and risk pricing
Market narrative: as screening migrates into inter‑VASP rails, liquidity is more likely to segment by counterparties that participate in the network and accept common screening standards. Transfers between participating exchanges should clear faster, while routes to non‑participants may face extra friction or outright rejection.
Verified constraint: Travel Rule implementation is fragmented across jurisdictions and protocols (Notabene blog), and FATF has documented uneven progress (FATF). That means cross‑border latency and false positives will still bite. Shared screening does not eliminate operational challenges; it redistributes them.
Opinion: exchanges that can prove low false‑positive rates and tight integration with issuer controls will command a premium in institutional flows, particularly for stablecoin settlement pairs. The screening network becomes a trust signal that shapes routing and fees, much like correspondent networks in fiat.
Counterarguments and the downside scenario
Alternative explanation: one could argue this is just the latest regtech plumbing, not a structural network layer. Exchanges have long used blockchain analytics for wallet screening and KYT; centralizing callouts to vendors does not necessarily create a new layer.
Assessment: there is truth here. The emergence of multiple Travel Rule protocols and the reliance on commercial data feeds mean coverage is uneven. Not all jurisdictions enforce the same rules, and not every exchange participates in the same network. FATF explicitly notes uneven implementation (FATF). The result can be fragmentation, duplicated reviews, and higher false‑positive rates when data is thin.
Downside scenario: screening shifts to a few providers and networks, creating chokepoints. If an API mislabels a counterparty or goes down, withdrawals and settlement can stall across several exchanges at once. Operational risk migrates from individual compliance teams to shared infrastructure. In the stablecoin context, if issuers are obligated to prevent impermissible secondary‑market transfers, misclassification at the rail level could trigger freezes or rejections that ripple through market‑maker inventories.
What would confirm or weaken the thesis
Watch for concrete, near‑term signals:
Rule finalization: the timeline and final text of the FinCEN/OFAC permitted payment stablecoin issuer rule, including how “technical capabilities” and “secondary markets” are defined (NPRM).
Issuer disclosures: public documentation of rail‑level sanctions controls by stablecoin issuers and how those controls interface with exchanges.
Network coverage: growth in the number of VASPs connected to shared Travel Rule and authorization networks; new partnerships that integrate sanctions feeds, such as data‑provider tie‑ups akin to Notabene–Refinitiv (Notabene–Refinitiv).
Operational telemetry: exchanges reporting reductions in manual reviews and faster cross‑VASP settlement where network screening is used, versus longer tails for non‑participants.
Incident patterns: correlated withdrawal pauses or rejections across multiple exchanges tied to a single sanctions‑intelligence vendor or network outage.
FATF follow‑ups: future FATF updates on Travel Rule implementation and any shift in the share of illicit activity attributed to stablecoins (FATF).
Opinion: if regulators finalize rail‑level obligations while networks expand and exchanges publish measurable gains from shared screening, sanctions checks will have functionally become a network layer. If rulemaking stalls, participation plateaus, or fragmentation deepens, screening will remain a patchwork of bilateral integrations rather than a cohesive layer.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.