On March 6, the United States Department of the Treasury officially submitted its report to Congress titled “Innovative Technologies to Counter Illicit Finance Involving Digital Assets.” This submission was mandated by the Generating Effective New Information on Unchecked Sanctions Act, commonly referred to as the GENIUS Act. The report represents a pivotal moment in the federal government’s attempt to reconcile the rapid evolution of decentralized financial technologies with the stringent requirements of national security and anti-money laundering (AML) frameworks.
The GENIUS Act required the Treasury to conduct extensive research into how regulated financial institutions might implement novel strategies to detect illicit activities, such as money laundering and sanctions evasion, specifically within the digital asset ecosystem. The resulting report analyzes a suite of advanced technologies, including artificial intelligence (AI), digital identity solutions, blockchain analytics, and application programming interfaces (APIs). While the report acknowledges the potential for these technologies to enhance privacy and efficiency, it also signals a potential expansion of the Bank Secrecy Act (BSA) that could have far-reaching implications for the decentralized finance (DeFi) sector.
Chronology of the GENIUS Act and Treasury Research
The road to the March 6 report began in earnest during the summer of 2025. In August 2025, the Department of the Treasury issued a formal Request for Comment (RFC), seeking input from industry stakeholders, privacy advocates, and financial institutions regarding the use of innovative methods to monitor digital asset transactions. This period of public inquiry was designed to gather empirical data on the state of the art in blockchain monitoring and identity verification.
By October 2025, the Treasury had received a wide array of submissions. Among the most prominent was an extensive response from Coin Center, a leading non-profit research and advocacy group focused on the public policy issues facing cryptocurrency. Coin Center’s submission leaned heavily on its "John Hancock Project," a research initiative aimed at developing privacy-preserving digital identity infrastructures. The organization argued that while identification is a necessary component of regulated financial systems, the transition to digital assets must not result in a "financial panopticon" where every transaction is permanently linked to a real-world identity on a public ledger.
Following the close of the RFC, the Treasury spent the winter of 2025 and the early months of 2026 synthesizing the feedback. The March 6 report serves as the culmination of this research, providing a roadmap for future guidance and potential legislative recommendations to Congress.
Digital Identity and the Future of Regulated Stablecoins
A significant portion of the Treasury’s report is dedicated to digital identity. As stablecoins—digital assets pegged to the value of a sovereign currency like the U.S. Dollar—become more integrated into the global financial system, the Treasury is increasingly focused on how issuers verify the identities of their users. Under the GENIUS Act, permitted stablecoin issuers are treated as financial institutions for the purposes of the Bank Secrecy Act. This designation requires them to maintain robust Know Your Customer (KYC) and AML programs.
The Treasury’s report outlines four specific next steps regarding digital identity:
- Issuance of Guidance: The Treasury intends to provide financial institutions with clear frameworks for adopting verifiable digital credentials.
- Legislative Collaboration: The department plans to work with Congress to create incentives, including federal funding, for the development of tools aimed at countering illicit finance through digital identity.
- International Standards: The Treasury will partner with the National Institute of Standards and Technology (NIST) to develop guidelines that can be harmonized with international partners.
- Third-Party Verification: The report suggests a legislative path to allow third-party service providers to conduct identity verification, which can then be accepted by financial institutions to fulfill BSA requirements.
While these steps indicate a willingness to modernize, advocates like Coin Center remain concerned about the implementation. The core of the debate lies in whether identity systems will evolve toward centralized "trust silos" or composable, user-controlled systems. If stablecoins continue to operate on public blockchains without privacy-preserving layers, the Treasury’s push for better "linking" of real-world identities to on-chain transactions could eliminate the pseudonymity that many users rely on for personal security and financial privacy.
Privacy-Preserving Technologies: ZKPs and NIST Standards
To mitigate the risks of total surveillance, the Treasury report examines the role of zero-knowledge proofs (ZKPs). These cryptographic techniques allow a party to prove that a statement is true (e.g., "I am a verified U.S. citizen over the age of 18") without revealing the underlying data that proves it.
The report discusses "portable digital identity solutions" that utilize ZKPs to allow for interoperability across different financial platforms. By using these tools, a user could satisfy the KYC requirements of a stablecoin issuer or a digital asset exchange without the institution needing to store a massive, hackable database of passports and Social Security numbers. The Treasury acknowledges that such systems could create "fewer large identity targets" for hackers and illicit actors.
Furthermore, the report references the NIST Digital Identity Guidelines, specifically the Identity Assurance Level 2 (IAL2) benchmark. Policy experts have urged the Treasury to clarify that meeting IAL2 standards should satisfy the Financial Crimes Enforcement Network (FinCEN) requirement that a financial institution form a "reasonable belief" regarding a customer’s identity. The goal is to move toward an "attribute-based" system where risk is scored dynamically and transparently, rather than through the opaque, data-heavy methods currently employed by traditional banks.
The Decentralized Finance (DeFi) Assessment and BSA Gaps
Perhaps the most controversial aspect of the Treasury’s report is its assessment of Decentralized Finance (DeFi). Unlike centralized exchanges, DeFi protocols operate via smart contracts on public blockchains, often without a central intermediary to perform KYC checks. The Treasury views this as a "perceived gap" in the Bank Secrecy Act.
The report recommends that Congress consider specifying which actors within the DeFi ecosystem should be subject to AML/CFT (Countering the Financing of Terrorism) obligations. This recommendation has sparked significant pushback from the software development community. The primary concern is that the Treasury might attempt to classify non-custodial software developers, miners, or node operators as "financial institutions."
Critics argue that the BSA was designed to regulate intermediaries who have "total independent control" over user funds. Extending these obligations to individuals who merely publish open-source code or maintain the infrastructure of a decentralized network would be, in the view of many legal experts, a violation of First Amendment rights regarding protected speech and a logistical impossibility.
The Treasury report also suggests that FinCEN reevaluate its 2013 and 2019 guidances. The 2019 guidance established that an entity must "accept" and "transmit" funds to be considered a money services business (MSB). Any move to rescind or broaden this definition to include software developers would represent a radical shift in U.S. financial policy and would likely face immediate challenges in the federal court system.
National Security and Section 311 of the PATRIOT Act
The Treasury’s report also touches upon the use of Section 311 of the USA PATRIOT Act. This section allows the Treasury to designate foreign jurisdictions or financial institutions as "primary money laundering concerns" and impose special measures, such as prohibiting U.S. banks from maintaining correspondent accounts with them.
The report recommends adding a "sixth special measure" to Section 311. This new measure would explicitly authorize the Treasury to prohibit or condition certain "transmittals of funds" involving digital assets that are not tied to traditional banking relationships. While this expansion of power is significant, the report notes that it would still only apply to regulated financial institutions, not to individual peer-to-peer transactions.
Legal analysts suggest that while this formalizes the Treasury’s power to block certain crypto-related flows, it does not necessarily represent a "grave threat" to the ecosystem, provided that due process is maintained. However, the proposal underscores the government’s intent to treat digital asset flows with the same—if not greater—scrutiny as traditional international wire transfers.
Implications for Pending Legislation: The CLARITY and BRCA Acts
The Treasury’s findings arrive at a time when Congress is already debating several key pieces of digital asset legislation. The CLARITY Act and the Blockchain Regulatory Certainty Act (BRCA) are currently the primary vehicles for market structure reform.
The BRCA, in particular, aims to protect developers and non-custodial service providers from being classified as money transmitters. The Treasury’s report, by recommending that Congress "specify actors" in DeFi for BSA coverage, creates a direct tension with the goals of the BRCA. Legislative observers suggest that the next few months will see an intense lobbying effort as Congress decides whether to follow the Treasury’s path toward expanded surveillance or the industry’s path toward developer protections.
Conclusion and Future Outlook
The Treasury’s report to Congress on innovative technologies is a double-edged sword for the digital asset industry. On one hand, it shows a sophisticated understanding of privacy-preserving technologies like ZKPs and a willingness to work with NIST to modernize identity verification. This could lead to a more efficient, secure, and private financial system for millions of Americans.
On the other hand, the report’s recommendations regarding DeFi and the potential expansion of the Bank Secrecy Act suggest a continued appetite for broad financial surveillance. The Treasury’s focus on "gap-filling" in the BSA risks imposing intermediary-like requirements on a sector defined by the absence of intermediaries.
As the Treasury moves forward with issuing guidance and collaborating with NIST, the focus will shift to the specific "specifications" of these new rules. The ultimate impact of the GENIUS Act report will depend on whether the federal government chooses to embrace "privacy-by-design" or continues to push for a system where every digital cent is tracked and recorded. For now, the report serves as a foundational document in the ongoing struggle to define the boundaries of financial freedom in the digital age.
